last executing test programs: 1m43.226225456s ago: executing program 4 (id=115): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'hugetlb'}]}, 0x9) r4 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x261f]}}], 0xffc8) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r8, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x4c, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1m42.510775341s ago: executing program 4 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x688200, 0x0) fchdir(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/214, 0xd6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001d00)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0xfffffffe, 0xb84, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x7f, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, 0xffffffff, 0x0, 0x2, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x83, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0x6, 0x4, 0x4, 0x400, 0x4, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0x6, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x9, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x800001c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x9, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1002, 0x7, 0x2, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x5, 0x403, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x20067bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x0, 0x2, 0x2, 0xdf9, 0xb, 0x6, 0x80000b0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0xc1c, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0x100a, 0xfffffffc, 0x0, 0x1, 0xfffffff8, 0x8, 0xf87, 0x1, 0x9, 0x5, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x88c}}, 0xc0) 1m42.456213501s ago: executing program 4 (id=127): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b405000000000000611034000000000063012000000000009500000000000000f4c32bf3df05a034da1b7fdcf645f3580fe49be316bdb665f1b42ff7ef474df46c0f44ef6fb5e031f7cfef720e05af49fad256a74dbc05ae220102a88002814a88e2fac93f6bba2d4d44db49d45e449d31fa52c326486bc1c908dd9b372f7a455c9566ed5ee0a65f3909cfe1219a0a38b416dc55927f32ab452e0ccaf193c27af10a12c42ef8a3199d0fad0a9521094cc7acdcdff80231586f968fab531515e8aaaa1d4a225592ebf062bba60775d0b7daa8ba68c0cd0642ce3efca015362a7b63f629629efb"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x2, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r4 = gettid() r5 = gettid() tkill(r4, 0x12) tkill(r4, 0x1) tkill(r5, 0x14) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x1}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) readv(r0, &(0x7f0000000580)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/70, 0x46}], 0x8) 1m42.400557112s ago: executing program 4 (id=129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$eJzs281vFGUYAPBnZrvFWrAV8Qv8qKKx8aOlgMrBgxpNPGBiogc9Nm0hyAKG1kQIiWAMnowx8W48+i940osxnky86t2QENOL4GnN7M60u8vu0pbdLrK/XzLwvPPR93125t19Z97dAIbWVPZPErEzIv6IiIl6sXmHqfp/11YvLFxfvbCQRLX67t9Jbb9/Vi8sFLsWx43nhek0Iv08iX1t6l0+d/7kfKWydDYvz66c+mh2+dz5F06cmj++dHzp9MEjRw4fmnv5pYMv9iTP8Ujz6K0Pvn776JdN+bfk0SNT3TY+Xa32uLrB2tUQJyMDbAibUoqI7HSVa/1/IkqxfvIm4s3PBto4oK+q1Wp1vPPmi1XgDpZEc1mXh2FRfNBn97/F0joIeLV/w4+Bu/pa/QYoy/tavtS3jKw9MSi33N/20lREvH/x32+zJfrzHAIAoMmP2fjn+Wy00zr+S+OBhv3uyeeGJiPi3ojYHRH3xenYExH3R9T2fTAiHtpk/a2TJDeOf9IrW0psg7Lx3yv53Fbz+K8Y/cVkKS/tquVfTo6dqCwdyF+T6SjvyMpzXer46Y3fv+q0rXH8ly1Z/cVYMG/HlZEdzccszq/M30rOja5eitg70i7/ZG0mIImIhyNi7xbrOPHs94902nbz/LvowTxT9buIZ+rn/2K05F9Ius9Pzt4VlaUDs8VVcaNff7v8Tqf6byn/HsjO/91tr/+1/CeTxvna5c3XcfnPLzre02z1+h9N3qvFo/m6T+ZXVs7ORYwmR+uNblx/cP3Yolzsn+U/vb99/98d66/EvojILuJHI+KxiHg8b/sTEfFkROzvkv8vrz/1Yeu6sQ3n319Z/oubOv/rwWi0rmkflE7+/ENTpZPrYZ7/9e7n/3Atms7XbOT9byPt2trVDAAAAP8/aUTsjCSdWYvTdGam/h3+PRFp5czyynPHznx8erH+G4HJKKfFk66Jhuehc/ltfb18KSLqXy0oth/Knxt/UxqrlWcWzlQWB508DLnxDv0/81dp0K0D+s7vtWB46f8wvPR/GF6b6/87+tYOYPu16f9jg2gHsP3aff5/OoB2ANuvpf+b9oMh4vkfDC/9H4aX/g9DaXksbv4j+a5B8Ze2ePgdG0T5tmhG34JIb4tmCPoUDPZ9CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFf+CwAA//9kXt09") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x164, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x164}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) rt_sigpending(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000240)={r5, 0x20, "d656c9a61490b7e8773ca55437fa234c0170c8cbe5ebdd2be9"}, &(0x7f0000000180)=0xfc86) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) ptrace$setregs(0xd, r3, 0x8000000000000000, &(0x7f00000003c0)="a7e58c424c14e923a1a869502022642ee7d7b871e7490907596f3078f7adfe85baa9d3e0ed0cacb6abccdbd53278c024cc009b3ead0dbeebd4243e3cd2df5abc659dd2436c293fa474b18b2afa72a514b6f5cdefd381daea6746b2963ae46e66ea45fe550fbbd79bcf377044ff27dc460396cc5fddc4e0902aa6e9c6f12a06ddda9a3693d5977801ec97306f817ea135f74b1ab5bf6c3320ccb08b46a7b7d4226b5bb265b1d91a66fdd9cd3d1df500398e2e51e8af5520278d84df47bfbc19efa0ba44f556bbce3072ad843860a773a4695c95fb277c35c623ce367826ac1cdfe13e5f025a8261ecaa017ae53a31cac606") mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m41.349055539s ago: executing program 4 (id=143): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x200000000000000) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) syz_read_part_table(0x5cd, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x6025, 0xffffffffffffff01, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x4}, &(0x7f00000004c0)=0x8) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r5, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/128, 0x80}, {&(0x7f0000000c00)=""/227, 0xe3}, {&(0x7f0000000d00)=""/236, 0xec}], 0x3, &(0x7f0000000e00)=""/240, 0xf0}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000041) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 1m41.079189301s ago: executing program 4 (id=150): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m41.078957131s ago: executing program 32 (id=150): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m35.993260707s ago: executing program 2 (id=216): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r2}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r4, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r4}}, 0x18) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x49, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0xffffffffffff8001}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x24, r5, 0x1, 0xffffff7d, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, 0x0, 0x4000) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r11 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x141000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r11, 0x80489439, &(0x7f0000000580)) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r12 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r12}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r13, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x7, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x2}, {0xb, 0x3}, {0x6, 0x1}, {0xc, 0x3}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000440)=""/131, 0x57, 0x83, 0x1, 0x9}, 0x28) 1m35.878402067s ago: executing program 2 (id=217): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x0, 0x4, 0x1, 0x7}], 0x10, 0x26}, 0x94) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.pending_reads\x00', 0x20000, 0x19) r4 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x2, @empty, 0xce0}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3e}}, @in6={0xa, 0x4e24, 0x9, @mcast1}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x7}, @in={0x2, 0x4e20, @loopback}], 0x84) r5 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x0) r6 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000140)='silent\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) 1m35.878023727s ago: executing program 2 (id=218): unshare(0x22020400) fsmount(0xffffffffffffffff, 0x2000, 0x0) 1m35.818317718s ago: executing program 2 (id=219): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[], 0x4, 0x2b9, &(0x7f0000000500)="$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") mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x42000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0xa, @void}, 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) bind$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x4}}], 0x48}, 0x0) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d40000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c00028005000100000000000800074000000000030006803c000e802c000180140003000000000000000000000000000000000114000400fc0200000000000000000000000000000c000280050001002f000000"], 0xd4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x4, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x3800) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 1m35.772039528s ago: executing program 2 (id=221): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x4}, 0x18) r7 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000240)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000380), &(0x7f00000004c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r10 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r10) getsockname$packet(r10, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r11, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r11, 0x1, 0x0, 0x6, @local}, 0x14) 1m35.50243091s ago: executing program 2 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x20000080) (fail_nth: 2) 1m35.50207133s ago: executing program 33 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x20000080) (fail_nth: 2) 2.291669064s ago: executing program 5 (id=1615): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa, 0x0, 0xfffd}}, 0x26) (fail_nth: 2) 2.280422834s ago: executing program 5 (id=1616): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000240)={[{@noload}, {@dioread_lock}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0xa0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x700, 0x20, 0x0, 0x7fffffff, {{0x24, 0x4, 0x1, 0x1, 0x90, 0x67, 0x0, 0x7, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, {[@ssrr={0x89, 0x1b, 0x67, [@multicast1, @local, @loopback, @empty, @private=0xa010101, @empty]}, @rr={0x7, 0x1b, 0x25, [@loopback, @rand_addr=0x64010101, @multicast2, @broadcast, @multicast2, @multicast2]}, @generic={0x44, 0xe, "e495817a355b16f280fe65f2"}, @noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x86, 0xe, "b19843f89a8883ca623c5379"}, @timestamp_prespec={0x44, 0x1c, 0xea, 0x3, 0x1, [{@empty, 0x6}, {@multicast2, 0xc6db}, {@loopback, 0x1}]}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa, 0x0, 0xfffd}}, 0x26) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000080)={'a', ' *:* ', 'r\x00'}, 0x8) socketpair(0x1, 0x20000000080001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8927, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x13\xec\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r3}, 0x10) (async) lremovexattr(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xfdeb}, 0x80) 2.001403355s ago: executing program 1 (id=1625): gettid() r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000003c0)=0x1988, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(0x0, 0x40, 0x170) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 1.262294551s ago: executing program 5 (id=1633): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001b00)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x7ff}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x44080) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x84, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008010}, 0x8002) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="00042dbd7000fbdbdf251bf5d6000008000300", @ANYRES32=r1, @ANYBLOB="0c00060003000000000000"], 0x28}}, 0x4000080) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00') getdents(r2, 0xffffffffffffffff, 0x5a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, 0x0, 0xeecea1b3ac6925e0) r3 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f0000002180)=""/31, 0x1f}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) sendmsg$rds(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001380)=""/46, 0x2e}, {&(0x7f00000013c0)=""/127, 0x7f}, {0x0}, {0x0}], 0x4, &(0x7f0000001940)=[@rdma_dest={0x18, 0x114, 0x2, {0xf69, 0x67dd}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x6}, 0x0, &(0x7f0000001700)=0x800, 0x3, 0xb, 0x5, 0xa08e, 0x0, 0x4}}], 0x70}, 0x10) unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x0) 1.096644442s ago: executing program 5 (id=1635): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0), &(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r4, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') read$usbfs(r9, &(0x7f0000000000)=""/13, 0xd) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='prq_report\x00', r9, 0x0, 0xffff}, 0x7c63565d6c24063) msgget$private(0x0, 0x231) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r11, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r12) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x2000c800) io_uring_setup(0x53b5, &(0x7f0000000280)={0x0, 0xbf6b, 0x1000, 0x2, 0x30f}) 1.044309442s ago: executing program 1 (id=1636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) 1.017582122s ago: executing program 1 (id=1638): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000002005000d000100000005000d000200000008000b4000001e82060005004e"], 0x70}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x0, 0x7, 0x5, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x72, &(0x7f0000000000)=""/114}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb6", 0x5}], 0x1}}], 0x1, 0x400c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f00000007c0), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d800000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd65}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) pipe2$watch_queue(&(0x7f0000000140), 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000880000003421755f71c3f1483fcae290a6d950154da7ab5c8d10157dbe0355569161061fea2271cb8f8f3681720252255cdbe28dd9dc4bdb56c42f9452977d12e5fd0c6eccd5e19ffd0683f1fc038c0d30f183a21d62d748eef5dff6159157f88a300ef2f7934623be814c9679288500c998ccbeae33e5eef2fb0e1f72261a10e451434352d3231bc296a416648f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x374}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a010000", @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000ffff00000000"], 0x2c}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) socket$netlink(0x10, 0x3, 0x0) 990.715613ms ago: executing program 1 (id=1640): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0xfccf}}, 0x4c0c2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') unshare(0x6020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='ext4_mballoc_alloc\x00', r1}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) r5 = msgget$private(0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) shutdown(r7, 0x1) splice(r7, 0x0, r6, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'dvmrp1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) msgrcv(r5, &(0x7f0000001080), 0x8, 0x2, 0x3000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x2, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9}) 974.304813ms ago: executing program 6 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) 956.329663ms ago: executing program 6 (id=1643): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='netlink_extack\x00', r1, 0x0, 0x3}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x20, 0x18, 0x1, 0x0, 0x0, {0xa}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 874.387353ms ago: executing program 6 (id=1644): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x200000000000000) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) syz_read_part_table(0x5cd, &(0x7f0000000600)="$eJzs0k9LbGUYAPDnjGNHAxmLqEUbQWkR9gdb1KKBQnSYTYoYRPQBcmGB0MKFaWrbpC+QSAbhRtoFzVK0EINxJa4HWidBiItzmTln7uVe8W6uevHe329xznve533P87y8T3CnJd9+X4yyNMr5KL1y9UpEnPZH7G13Psuf7kxM1oemP56ZnX/1kf+2H/0PfvZbRF/7PZXm0Xo61tw6HD/bGTwaPj4YeaG7r1HqZElWIipX1JBEXGS5Jzg4z4Td6n66tr7wYixW505qS63/s7cmXt+Y+OrH91/6LuK1Dz8r5esapRvLX1lbX6j9sFieO+krJrOLS+05mjy8L0luph5u1/37X46I2lJr85XV09XzT9749Zt3Rl8+3ft8oFj336X7vqGGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnlu71f3K2vpC7aOozp3UllrvJUUga6v09kTE1xHRKPUVgZ5rzt9fjPL8I80Pfvk7m/r3p4G3ew+a52N/dmLv/nXF9uRai+HWFf3XbarWZrvNzrv3muWWI0sjfu/u+fIp1QoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3A0bk/Wh6dLMbEQSX0TEeGlwuz2fpXk86Tx78o9/IqKYr6djza3D8bOdOBo+Phj5ebqYb5QiViJiPsuyLN78I+sokpWjfNvn4/HuBQAA//9bmIrn") perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6, 0x6}, 0x6025, 0xffffffffffffff01, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x4}, &(0x7f00000004c0)=0x8) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, &(0x7f0000000000)=r5, 0x8) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/128, 0x80}, {&(0x7f0000000c00)=""/227, 0xe3}, {&(0x7f0000000d00)=""/236, 0xec}], 0x3, &(0x7f0000000e00)=""/240, 0xf0}, 0x20) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x50}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000041) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 859.201244ms ago: executing program 5 (id=1645): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = memfd_secret(0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0xfffffffffffffffc, 0x20000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000300)=""/243, 0xf3, 0x0, &(0x7f0000000400)=""/188, 0xbc}}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x8910, &(0x7f0000000600)={'syztnl1\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1c, 0x19, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b12, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb005}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @ldst={0x0, 0x2, 0x6, 0x0, 0x4, 0x40}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xd, &(0x7f0000000100)=""/13, 0x41000, 0x52, '\x00', 0x0, @fallback=0x21, r2, 0x8, &(0x7f0000000240)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x6, 0x2, 0x7f}, 0x10, r3, r0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r7}, 0x10) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x5}], 0x1, 0x0, 0x0) 597.429345ms ago: executing program 3 (id=1651): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 576.302256ms ago: executing program 3 (id=1653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) 551.819466ms ago: executing program 3 (id=1655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x5}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fffffff}}, @ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0x4, 0xad5}, {0x1, 0x200}, {0xa, 0x3}]}, @float={0x4, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x5f, 0x30, 0x2e]}}, &(0x7f0000000580)=""/190, 0x85, 0xbe, 0x1, 0x2, 0x10000}, 0x28) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xa8, 0x8, 0x7, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x91d5fdd00f77efa1, 0x40, '\x00', 0x0, @fallback=0x6, r3, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x5, 0x8, 0x4}, 0x10, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000640)=[r2], &(0x7f0000000680)=[{0x2, 0x2, 0x5, 0x1}], 0x10, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10, 0x0) 506.971636ms ago: executing program 3 (id=1656): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001b00)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x7ff}, {0x5, 0x14, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x44080) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x84, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008010}, 0x8002) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="00042dbd7000fbdbdf251bf5d6000008000300", @ANYRES32=r1, @ANYBLOB="0c00060003000000000000"], 0x28}}, 0x4000080) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net\x00') getdents(r2, 0xffffffffffffffff, 0x5a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, 0x0, 0xeecea1b3ac6925e0) r3 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r5, &(0x7f0000001340)=[{&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f0000002180)=""/31, 0x1f}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) sendmsg$rds(r6, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001380)=""/46, 0x2e}, {&(0x7f00000013c0)=""/127, 0x7f}, {0x0}, {0x0}], 0x4, &(0x7f0000001940)=[@rdma_dest={0x18, 0x114, 0x2, {0xf69, 0x67dd}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x6}, &(0x7f00000016c0)=0x1ff, 0x0, 0x3, 0xb, 0x5, 0xa08e, 0x0, 0x4}}], 0x70}, 0x10) unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x0) 506.651346ms ago: executing program 3 (id=1657): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 491.811497ms ago: executing program 3 (id=1658): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0xfccf}}, 0x4c0c2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') unshare(0x6020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='ext4_mballoc_alloc\x00', r1}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) r5 = msgget$private(0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) shutdown(r7, 0x1) splice(r7, 0x0, r6, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'dvmrp1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) msgrcv(r5, &(0x7f0000001080), 0x8, 0x2, 0x3000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1b8, 0x7}, 0x0, 0x0, 0x6, 0x2, 0xffffffff, 0xd5, 0x6, 0x2, 0xfffe, 0x9}) 320.751958ms ago: executing program 0 (id=1659): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b405000000000000611034000000000063012000000000009500000000000000f4c32bf3df05a034da1b7fdcf645f3580fe49be316bdb665f1b42ff7ef474df46c0f44ef6fb5e031f7cfef720e05af49fad256a74dbc05ae220102a88002814a88e2fac93f6bba2d4d44db49d45e449d31fa52c326486bc1c908dd9b372f7a455c9566ed5ee0a65f3909cfe1219a0a38b416dc55927f32ab452e0ccaf193c27af10a12c42ef8a3199d0fad0a9521094cc7acdcdff80231586f968fab531515e8aaaa1d4a225592ebf062bba60775d0b7daa8ba68c0cd0642ce3efca015362a7b63f629629e"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x2, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r5 = gettid() r6 = gettid() tkill(r5, 0x12) tkill(r5, 0x1) tkill(r6, 0x14) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x1}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) readv(r0, &(0x7f0000000580)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/70, 0x46}], 0x8) 142.005848ms ago: executing program 1 (id=1660): gettid() r0 = syz_open_procfs(0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000003c0)=0x1988, 0x4) connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = open(0x0, 0x40, 0x170) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) 135.073088ms ago: executing program 0 (id=1661): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xfffffffffffffe6e}}}]}]}]}}]}, 0x54}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) preadv(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x1000008, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000), 0xc) socket$inet_sctp(0x2, 0x5, 0x84) 68.584839ms ago: executing program 6 (id=1662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, 0x0, 0x0) 62.941869ms ago: executing program 0 (id=1663): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) 46.153249ms ago: executing program 6 (id=1664): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xa0000001}) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x44000006) 45.762729ms ago: executing program 0 (id=1665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) 28.430449ms ago: executing program 0 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) 27.918509ms ago: executing program 6 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2514000000080008007f000000080009000900000008000f006b0f00004ffd1400080000000800060003000000080010000000000008001500280b00000800030001000000fed9e688463558ca386cd94d74727ade75278e51af87fd0940323efd0f2956575a8c6c2ad9f23d833599fe6b49c180f75619e47f21401a0913d6db6f33d02833f70c272393cab1f53dda3c4af3b5f6ec56867db991d0ca7554e92eb522a7ec31eacc2ec7489c62eb0a21869e18153207bb6b6e50647e0eab800b72277ef1e739b2ba26e3b01336645edad7ea"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000005) creat(&(0x7f00000000c0)='./file0\x00', 0x1f) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r4, @ANYRES16=r5], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRESHEX=r2, @ANYBLOB="00000000000080f3270012800a4976786c616e000000180000"], 0x50}}, 0x4000010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) pipe2(&(0x7f00000000c0), 0x80000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="80000000100003043b90b568cc1a157a00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r9, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 291.48µs ago: executing program 5 (id=1668): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000001c0), &(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r4, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') read$usbfs(r9, &(0x7f0000000000)=""/13, 0xd) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000100)=""/219, 0xdb}], 0x1, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='prq_report\x00', r9, 0x0, 0xffff}, 0x7c63565d6c24063) msgget$private(0x0, 0x231) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r11, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r12) sendmsg$ETHTOOL_MSG_TSINFO_GET(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0x2000c800) io_uring_setup(0x53b5, &(0x7f0000000280)={0x0, 0xbf6b, 0x1000, 0x2, 0x30f}) 0s ago: executing program 0 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0xfd, r2}, 0x38) (rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001c000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4818}, 0x20000084) kernel console output (not intermixed with test programs): [ T4934] [ 73.345416][ T4934] __dump_stack+0x1d/0x30 [ 73.345436][ T4934] dump_stack_lvl+0xe8/0x140 [ 73.345531][ T4934] dump_stack+0x15/0x1b [ 73.345564][ T4934] dump_header+0x81/0x220 [ 73.345582][ T4934] oom_kill_process+0x342/0x400 [ 73.345614][ T4934] out_of_memory+0x979/0xb80 [ 73.345638][ T4934] try_charge_memcg+0x610/0xa10 [ 73.345671][ T4934] charge_memcg+0x51/0xc0 [ 73.345707][ T4934] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 73.345729][ T4934] __read_swap_cache_async+0x17b/0x2d0 [ 73.345749][ T4934] swap_cluster_readahead+0x262/0x3c0 [ 73.345776][ T4934] swapin_readahead+0xde/0x6f0 [ 73.345800][ T4934] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 73.345933][ T4934] ? __rcu_read_unlock+0x34/0x70 [ 73.345958][ T4934] ? __rcu_read_unlock+0x4f/0x70 [ 73.345981][ T4934] ? swap_cache_get_folio+0x277/0x280 [ 73.346054][ T4934] do_swap_page+0x2ae/0x2370 [ 73.346073][ T4934] ? css_rstat_updated+0xb7/0x240 [ 73.346101][ T4934] ? __pfx_default_wake_function+0x10/0x10 [ 73.346127][ T4934] handle_mm_fault+0x9a5/0x2be0 [ 73.346152][ T4934] ? vma_start_read+0x141/0x1f0 [ 73.346185][ T4934] do_user_addr_fault+0x630/0x1080 [ 73.346244][ T4934] exc_page_fault+0x62/0xa0 [ 73.346270][ T4934] asm_exc_page_fault+0x26/0x30 [ 73.346286][ T4934] RIP: 0033:0x7fefeb2c6d96 [ 73.346299][ T4934] Code: 03 00 00 48 8d b9 08 03 00 00 89 d6 83 ce 02 39 d6 74 21 89 d0 f0 0f b1 37 89 c6 75 1b 83 e2 3b 83 ca 02 83 fa 0a 74 14 89 f0 66 0f 1f 84 00 00 00 00 00 89 d6 eb f0 89 c2 eb ce 50 48 c7 81 [ 73.346315][ T4934] RSP: 002b:00007ffcb7ca25d8 EFLAGS: 00010293 [ 73.346331][ T4934] RAX: 0000000000000000 RBX: 00007fefeb4f5fa0 RCX: 00005555844da500 [ 73.346382][ T4934] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00005555844da808 [ 73.346392][ T4934] RBP: 00007fefeb4f7da0 R08: 000000000eb4c9b1 R09: 7fffffffffffffff [ 73.346402][ T4934] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000011fdc [ 73.346412][ T4934] R13: 00007fefeb4f6180 R14: ffffffffffffffff R15: 00007ffcb7ca2760 [ 73.346428][ T4934] [ 73.346435][ T4934] memory: usage 307200kB, limit 307200kB, failcnt 711 [ 73.444483][ T4953] netlink: 20 bytes leftover after parsing attributes in process `syz.6.451'. [ 73.445827][ T4934] memory+swap: usage 277248kB, limit 9007199254740988kB, failcnt 0 [ 73.587205][ T4934] kmem: usage 276792kB, limit 9007199254740988kB, failcnt 0 [ 73.594499][ T4934] Memory cgroup stats for /syz3: [ 73.742529][ T4961] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 73.743680][ T4964] bridge0: entered promiscuous mode [ 73.762496][ T4934] cache 0 [ 73.765432][ T4934] rss 0 [ 73.768248][ T4934] shmem 0 [ 73.771253][ T4934] mapped_file 0 [ 73.774728][ T4934] dirty 0 [ 73.777650][ T4934] writeback 0 [ 73.780995][ T4934] workingset_refault_anon 20 [ 73.785574][ T4934] workingset_refault_file 12 [ 73.790188][ T4934] swap 212992 [ 73.793541][ T4934] swapcached 4096 [ 73.797156][ T4934] pgpgin 21110 [ 73.800556][ T4934] pgpgout 21109 [ 73.803998][ T4934] pgfault 29561 [ 73.807461][ T4934] pgmajfault 16 [ 73.810934][ T4934] inactive_anon 0 [ 73.814558][ T4934] active_anon 4096 [ 73.818272][ T4934] inactive_file 0 [ 73.818803][ T4964] bridge0: port 3(macsec0) entered blocking state [ 73.821923][ T4934] active_file 0 [ 73.828337][ T4964] bridge0: port 3(macsec0) entered disabled state [ 73.831754][ T4934] unevictable 0 [ 73.831762][ T4934] hierarchical_memory_limit 314572800 [ 73.831770][ T4934] hierarchical_memsw_limit 9223372036854771712 [ 73.831777][ T4934] total_cache 0 [ 73.831783][ T4934] total_rss 0 [ 73.831812][ T4934] total_shmem 0 [ 73.851574][ T4964] macsec0: entered allmulticast mode [ 73.853212][ T4934] total_mapped_file 0 [ 73.856634][ T4964] bridge0: entered allmulticast mode [ 73.859933][ T4934] total_dirty 0 [ 73.859943][ T4934] total_writeback 0 [ 73.885370][ T4934] total_workingset_refault_anon 20 [ 73.890495][ T4934] total_workingset_refault_file 12 [ 73.895656][ T4934] total_swap 212992 [ 73.899494][ T4934] total_swapcached 4096 [ 73.903638][ T4934] total_pgpgin 21110 [ 73.907516][ T4934] total_pgpgout 21109 [ 73.911528][ T4934] total_pgfault 29561 [ 73.915509][ T4934] total_pgmajfault 16 [ 73.919500][ T4934] total_inactive_anon 0 [ 73.923704][ T4934] total_active_anon 4096 [ 73.927927][ T4934] total_inactive_file 0 [ 73.932138][ T4934] total_active_file 0 [ 73.936111][ T4934] total_unevictable 0 [ 73.940209][ T4934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.444,pid=4934,uid=0 [ 73.954723][ T4934] Memory cgroup out of memory: Killed process 4934 (syz.3.444) total-vm:96136kB, anon-rss:1140kB, file-rss:22588kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 73.955316][ T4935] syz.3.444 (4935) used greatest stack depth: 10200 bytes left [ 73.979418][ T4964] macsec0: left allmulticast mode [ 73.984458][ T4964] bridge0: left allmulticast mode [ 73.990980][ T4964] bridge0: left promiscuous mode [ 74.039113][ T4934] syz.3.444 (4934) used greatest stack depth: 10088 bytes left [ 74.086702][ T4972] netlink: 'syz.1.455': attribute type 1 has an invalid length. [ 74.108726][ T4972] loop1: detected capacity change from 0 to 2048 [ 74.121650][ T4972] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.455: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 74.142696][ T4972] EXT4-fs (loop1): get root inode failed [ 74.148425][ T4972] EXT4-fs (loop1): mount failed [ 74.172572][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 74.183291][ T4980] tipc: Enabling of bearer rejected, failed to enable media [ 74.280089][ T4995] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 74.545170][ T5009] loop5: detected capacity change from 0 to 2048 [ 74.579018][ T5009] loop5: p1 < > p4 [ 74.585248][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 74.594250][ T5009] loop5: p4 start 42180 is beyond EOD, truncated [ 74.608923][ T5012] tipc: Started in network mode [ 74.613855][ T5012] tipc: Node identity 0ee2e9934305, cluster identity 4711 [ 74.621081][ T5012] tipc: Enabled bearer , priority 0 [ 74.629161][ T5012] tipc: Disabling bearer [ 74.714794][ T5028] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 74.740034][ T5030] loop0: detected capacity change from 0 to 512 [ 74.747622][ T5030] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.754302][ T5030] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.477: bad orphan inode 13 [ 74.764663][ T5030] ext4_test_bit(bit=12, block=18) = 1 [ 74.770118][ T5030] is_bad_inode(inode)=0 [ 74.774263][ T5030] NEXT_ORPHAN(inode)=2130706432 [ 74.779190][ T5030] max_ino=32 [ 74.782391][ T5030] i_nlink=1 [ 74.786143][ T5030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.800646][ T5030] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 74.819185][ T5030] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.477: bg 0: block 248: padding at end of block bitmap is not set [ 74.834181][ T5030] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.477: Failed to acquire dquot type 1 [ 74.845695][ T5030] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 74.867715][ T5030] syz.0.477 (5030) used greatest stack depth: 9248 bytes left [ 74.875692][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.116473][ T5043] bridge0: entered promiscuous mode [ 75.123299][ T5043] bridge0: port 3(macsec0) entered blocking state [ 75.129767][ T5043] bridge0: port 3(macsec0) entered disabled state [ 75.136552][ T5043] macsec0: entered allmulticast mode [ 75.141973][ T5043] bridge0: entered allmulticast mode [ 75.149023][ T5043] macsec0: left allmulticast mode [ 75.154096][ T5043] bridge0: left allmulticast mode [ 75.159876][ T5043] bridge0: left promiscuous mode [ 75.244172][ T5049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 75.253055][ T5049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 75.491909][ T5067] xt_CT: No such helper "pptp" [ 75.519570][ T5074] tmpfs: Bad value for 'mpol' [ 75.524970][ T5074] SELinux: Context system_u:object_r:sendmail_exec_t:s0 is not valid (left unmapped). [ 75.637683][ T5084] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 75.749790][ T5102] xt_CT: No such helper "pptp" [ 75.809034][ T5111] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.860555][ T5111] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.910444][ T5111] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.970074][ T5111] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.044164][ T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.059545][ T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.067758][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.079418][ T52] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.103088][ T5120] loop5: detected capacity change from 0 to 256 [ 76.148603][ T5124] tipc: Started in network mode [ 76.153572][ T5124] tipc: Node identity d2f4551f217a, cluster identity 4711 [ 76.160930][ T5124] tipc: Enabled bearer , priority 0 [ 76.169300][ T5124] tipc: Disabling bearer [ 76.170522][ T5127] 9pnet_fd: Insufficient options for proto=fd [ 76.319089][ T5137] xt_CT: No such helper "pptp" [ 76.434766][ T5149] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 76.561459][ T5162] loop0: detected capacity change from 0 to 512 [ 76.567983][ T5162] EXT4-fs: Ignoring removed nobh option [ 76.575776][ T5162] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.525: iget: bad i_size value: 38620345925642 [ 76.589519][ T5162] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.525: couldn't read orphan inode 15 (err -117) [ 76.601898][ T5162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.628825][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.677982][ T5171] xt_CT: No such helper "pptp" [ 77.215895][ T5191] loop1: detected capacity change from 0 to 512 [ 77.222533][ T5191] EXT4-fs: Ignoring removed nobh option [ 77.229317][ T5191] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.537: iget: bad i_size value: 38620345925642 [ 77.242171][ T5191] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.537: couldn't read orphan inode 15 (err -117) [ 77.254510][ T5191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.276509][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.294580][ T5194] xt_hashlimit: max too large, truncated to 1048576 [ 77.301734][ T5194] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 77.591960][ T5204] xt_CT: No such helper "pptp" [ 77.867829][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 77.867883][ T29] audit: type=1326 audit(1761716323.966:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 77.898443][ T29] audit: type=1326 audit(1761716324.006:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 77.915016][ T5223] __nla_validate_parse: 6 callbacks suppressed [ 77.915031][ T5223] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 77.921905][ T29] audit: type=1326 audit(1761716324.006:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 77.959667][ T29] audit: type=1326 audit(1761716324.006:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 77.983120][ T29] audit: type=1326 audit(1761716324.006:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 78.006444][ T29] audit: type=1326 audit(1761716324.006:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 78.029831][ T29] audit: type=1326 audit(1761716324.006:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 78.053165][ T29] audit: type=1326 audit(1761716324.006:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 78.076711][ T29] audit: type=1326 audit(1761716324.006:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 78.076743][ T5223] hsr_slave_0: left promiscuous mode [ 78.106314][ T29] audit: type=1326 audit(1761716324.006:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5222 comm="syz.5.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 78.136883][ T5223] hsr_slave_1: left promiscuous mode [ 78.661736][ T5236] xt_CT: No such helper "pptp" [ 78.753543][ T5249] bridge0: entered promiscuous mode [ 78.760167][ T5249] bridge0: port 3(macsec0) entered blocking state [ 78.760604][ T5253] netlink: 20 bytes leftover after parsing attributes in process `syz.6.560'. [ 78.766632][ T5249] bridge0: port 3(macsec0) entered disabled state [ 78.766792][ T5249] macsec0: entered allmulticast mode [ 78.787535][ T5249] bridge0: entered allmulticast mode [ 78.794803][ T5249] macsec0: left allmulticast mode [ 78.800045][ T5249] bridge0: left allmulticast mode [ 78.807009][ T5249] bridge0: left promiscuous mode [ 78.824037][ T5256] xt_hashlimit: max too large, truncated to 1048576 [ 78.831564][ T5256] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 79.175695][ T5261] loop1: detected capacity change from 0 to 1024 [ 79.183611][ T5261] ext4: Unknown parameter 'uid<00000000000000000000' [ 79.747027][ T5292] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.573'. [ 79.757449][ T5292] netlink: zone id is out of range [ 79.762599][ T5292] netlink: zone id is out of range [ 79.774947][ T5292] netlink: zone id is out of range [ 79.780450][ T5292] netlink: zone id is out of range [ 79.785723][ T5292] netlink: zone id is out of range [ 79.791125][ T5292] netlink: zone id is out of range [ 79.797400][ T5292] netlink: zone id is out of range [ 79.802576][ T5292] netlink: zone id is out of range [ 79.811541][ T5292] netlink: zone id is out of range [ 79.816730][ T5292] netlink: zone id is out of range [ 79.850436][ T5285] mmap: syz.0.572 (5285) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.894189][ T5308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.575'. [ 79.982953][ T5320] bridge0: entered promiscuous mode [ 79.989501][ T5320] bridge0: port 3(macsec0) entered blocking state [ 79.995964][ T5320] bridge0: port 3(macsec0) entered disabled state [ 80.002892][ T5320] macsec0: entered allmulticast mode [ 80.008256][ T5320] bridge0: entered allmulticast mode [ 80.014866][ T5320] macsec0: left allmulticast mode [ 80.019995][ T5320] bridge0: left allmulticast mode [ 80.025495][ T5320] bridge0: left promiscuous mode [ 80.072159][ T5325] tipc: Invalid UDP bearer configuration [ 80.072172][ T5325] tipc: Enabling of bearer rejected, failed to enable media [ 80.132709][ T5331] xt_hashlimit: max too large, truncated to 1048576 [ 80.141487][ T5331] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 80.870214][ T5340] loop6: detected capacity change from 0 to 2048 [ 80.911204][ T5348] xt_CT: No such helper "pptp" [ 80.919242][ T5340] loop6: p1 < > p4 [ 80.923488][ T5340] loop6: p4 start 42180 is beyond EOD, truncated [ 80.943325][ T5344] loop0: detected capacity change from 0 to 512 [ 80.950613][ T5344] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 80.976834][ T5344] loop0: detected capacity change from 0 to 1024 [ 80.979801][ T5354] loop5: detected capacity change from 0 to 2048 [ 80.990205][ T5344] EXT4-fs: Ignoring removed orlov option [ 81.000737][ T5344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.013869][ T5354] loop5: p1 < > p4 [ 81.018414][ T5354] loop5: p4 start 42180 is beyond EOD, truncated [ 81.029037][ T5344] netlink: 48 bytes leftover after parsing attributes in process `syz.0.588'. [ 81.104893][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.221526][ T5378] FAULT_INJECTION: forcing a failure. [ 81.221526][ T5378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.234718][ T5378] CPU: 0 UID: 0 PID: 5378 Comm: syz.1.597 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.234745][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.234758][ T5378] Call Trace: [ 81.234765][ T5378] [ 81.234773][ T5378] __dump_stack+0x1d/0x30 [ 81.234796][ T5378] dump_stack_lvl+0xe8/0x140 [ 81.234816][ T5378] dump_stack+0x15/0x1b [ 81.234852][ T5378] should_fail_ex+0x265/0x280 [ 81.234871][ T5378] should_fail+0xb/0x20 [ 81.234887][ T5378] should_fail_usercopy+0x1a/0x20 [ 81.234908][ T5378] _copy_from_user+0x1c/0xb0 [ 81.235007][ T5378] ___sys_sendmsg+0xc1/0x1d0 [ 81.235050][ T5378] __x64_sys_sendmsg+0xd4/0x160 [ 81.235155][ T5378] x64_sys_call+0x191e/0x3000 [ 81.235183][ T5378] do_syscall_64+0xd2/0x200 [ 81.235203][ T5378] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.235227][ T5378] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.235256][ T5378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.235297][ T5378] RIP: 0033:0x7fd3d75defc9 [ 81.235313][ T5378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.235330][ T5378] RSP: 002b:00007fd3d603f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.235350][ T5378] RAX: ffffffffffffffda RBX: 00007fd3d7835fa0 RCX: 00007fd3d75defc9 [ 81.235413][ T5378] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 81.235474][ T5378] RBP: 00007fd3d603f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.235487][ T5378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.235499][ T5378] R13: 00007fd3d7836038 R14: 00007fd3d7835fa0 R15: 00007fffb1410668 [ 81.235580][ T5378] [ 81.475343][ T5386] bridge0: entered promiscuous mode [ 81.481818][ T5386] bridge0: port 3(macsec0) entered blocking state [ 81.488294][ T5386] bridge0: port 3(macsec0) entered disabled state [ 81.494911][ T5386] macsec0: entered allmulticast mode [ 81.500247][ T5386] bridge0: entered allmulticast mode [ 81.505977][ T5386] macsec0: left allmulticast mode [ 81.511039][ T5386] bridge0: left allmulticast mode [ 81.516431][ T5386] bridge0: left promiscuous mode [ 81.688116][ T5388] xt_CT: No such helper "pptp" [ 81.732376][ T5393] netlink: 28 bytes leftover after parsing attributes in process `syz.6.603'. [ 81.741352][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.603'. [ 81.750216][ T5393] netlink: 28 bytes leftover after parsing attributes in process `syz.6.603'. [ 81.759058][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.603'. [ 81.784654][ T5395] loop6: detected capacity change from 0 to 128 [ 81.833658][ T5401] loop5: detected capacity change from 0 to 1024 [ 81.840441][ T5401] EXT4-fs: Ignoring removed orlov option [ 81.849901][ T5401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.877592][ T3901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.924970][ T5414] xt_CT: No such helper "pptp" [ 81.964054][ T5419] netlink: 28 bytes leftover after parsing attributes in process `syz.5.614'. [ 82.448423][ T5448] loop1: detected capacity change from 0 to 1024 [ 82.455180][ T5448] EXT4-fs: Ignoring removed orlov option [ 82.481483][ T5433] syz.3.621 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 82.490450][ T5448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.492157][ T5433] CPU: 0 UID: 0 PID: 5433 Comm: syz.3.621 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.492216][ T5433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.492245][ T5433] Call Trace: [ 82.492251][ T5433] [ 82.492259][ T5433] __dump_stack+0x1d/0x30 [ 82.492326][ T5433] dump_stack_lvl+0xe8/0x140 [ 82.492389][ T5433] dump_stack+0x15/0x1b [ 82.492406][ T5433] dump_header+0x81/0x220 [ 82.492422][ T5433] oom_kill_process+0x342/0x400 [ 82.492450][ T5433] out_of_memory+0x979/0xb80 [ 82.492488][ T5433] try_charge_memcg+0x610/0xa10 [ 82.492574][ T5433] charge_memcg+0x51/0xc0 [ 82.492594][ T5433] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 82.492618][ T5433] __read_swap_cache_async+0x17b/0x2d0 [ 82.492710][ T5433] swap_cluster_readahead+0x362/0x3c0 [ 82.492734][ T5433] swapin_readahead+0xde/0x6f0 [ 82.492753][ T5433] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 82.492781][ T5433] ? __rcu_read_unlock+0x34/0x70 [ 82.492879][ T5433] ? __rcu_read_unlock+0x4f/0x70 [ 82.492901][ T5433] ? swap_cache_get_folio+0x277/0x280 [ 82.492920][ T5433] do_swap_page+0x2ae/0x2370 [ 82.492943][ T5433] ? css_rstat_updated+0xb7/0x240 [ 82.493026][ T5433] ? __pfx_default_wake_function+0x10/0x10 [ 82.493051][ T5433] handle_mm_fault+0x9a5/0x2be0 [ 82.493074][ T5433] ? vma_start_read+0x141/0x1f0 [ 82.493118][ T5433] do_user_addr_fault+0x630/0x1080 [ 82.493141][ T5433] exc_page_fault+0x62/0xa0 [ 82.493167][ T5433] asm_exc_page_fault+0x26/0x30 [ 82.493185][ T5433] RIP: 0033:0x7fefeb17591e [ 82.493261][ T5433] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 28 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 96 24 38 00 85 c0 0f 8e a3 fd ff ff 8d 9b fe ff 49 39 c4 73 a0 48 8d 1d 71 06 38 00 83 3d 76 24 38 [ 82.493286][ T5433] RSP: 002b:00007ffcb7ca2650 EFLAGS: 00010202 [ 82.493302][ T5433] RAX: 0000000000000001 RBX: 00007fefeb4f7da0 RCX: 0000000000000000 [ 82.493313][ T5433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555844da808 [ 82.493325][ T5433] RBP: 00007fefeb4f7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 82.493337][ T5433] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000014396 [ 82.493348][ T5433] R13: 00007fefeb4f6090 R14: ffffffffffffffff R15: 00007ffcb7ca2760 [ 82.493390][ T5433] [ 82.493396][ T5433] memory: usage 307200kB, limit 307200kB, failcnt 856 [ 82.727763][ T5433] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 82.735740][ T5433] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 82.743099][ T5433] Memory cgroup stats for /syz3: [ 82.743589][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.748618][ T5433] cache 0 [ 82.760462][ T5433] rss 0 [ 82.763221][ T5433] shmem 0 [ 82.766152][ T5433] mapped_file 0 [ 82.769638][ T5433] dirty 0 [ 82.772573][ T5433] writeback 0 [ 82.775915][ T5433] workingset_refault_anon 65 [ 82.780554][ T5433] workingset_refault_file 268 [ 82.784269][ T5453] xt_CT: No such helper "pptp" [ 82.785273][ T5433] swap 217088 [ 82.785282][ T5433] swapcached 0 [ 82.785288][ T5433] pgpgin 30103 [ 82.785294][ T5433] pgpgout 30103 [ 82.803544][ T5433] pgfault 41111 [ 82.806983][ T5433] pgmajfault 45 [ 82.810434][ T5433] inactive_anon 0 [ 82.814043][ T5433] active_anon 0 [ 82.817487][ T5433] inactive_file 0 [ 82.821289][ T5433] active_file 0 [ 82.824817][ T5433] unevictable 0 [ 82.828258][ T5433] hierarchical_memory_limit 314572800 [ 82.833827][ T5433] hierarchical_memsw_limit 9223372036854771712 [ 82.840036][ T5433] total_cache 0 [ 82.843479][ T5433] total_rss 0 [ 82.846832][ T5433] total_shmem 0 [ 82.850295][ T5433] total_mapped_file 0 [ 82.854364][ T5433] total_dirty 0 [ 82.857814][ T5433] total_writeback 0 [ 82.861621][ T5433] total_workingset_refault_anon 65 [ 82.866712][ T5433] total_workingset_refault_file 268 [ 82.871930][ T5433] total_swap 217088 [ 82.875744][ T5433] total_swapcached 0 [ 82.879636][ T5433] total_pgpgin 30103 [ 82.883516][ T5433] total_pgpgout 30103 [ 82.887488][ T5433] total_pgfault 41111 [ 82.891468][ T5433] total_pgmajfault 45 [ 82.895487][ T5433] total_inactive_anon 0 [ 82.899642][ T5433] total_active_anon 0 [ 82.903610][ T5433] total_inactive_file 0 [ 82.907754][ T5433] total_active_file 0 [ 82.911828][ T5433] total_unevictable 0 [ 82.915910][ T5433] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.621,pid=5433,uid=0 [ 82.930488][ T5433] Memory cgroup out of memory: Killed process 5433 (syz.3.621) total-vm:93956kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 82.948597][ T5456] __nla_validate_parse: 5 callbacks suppressed [ 82.948611][ T5456] netlink: 28 bytes leftover after parsing attributes in process `syz.5.627'. [ 82.963726][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.627'. [ 82.972527][ T5456] netlink: 28 bytes leftover after parsing attributes in process `syz.5.627'. [ 82.981801][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.5.627'. [ 83.096909][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 83.096924][ T29] audit: type=1326 audit(1761716329.196:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 83.128693][ T29] audit: type=1326 audit(1761716329.206:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 83.152060][ T29] audit: type=1326 audit(1761716329.206:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 83.175431][ T29] audit: type=1326 audit(1761716329.206:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 83.198796][ T29] audit: type=1326 audit(1761716329.206:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 83.222137][ T29] audit: type=1326 audit(1761716329.206:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 83.245494][ T29] audit: type=1326 audit(1761716329.206:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 83.268867][ T29] audit: type=1326 audit(1761716329.236:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 83.292131][ T29] audit: type=1326 audit(1761716329.236:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 83.315533][ T29] audit: type=1326 audit(1761716329.236:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5461 comm="syz.6.630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 83.340324][ T5434] syz.3.621 (5434) used greatest stack depth: 7240 bytes left [ 83.362072][ T5467] netlink: 20 bytes leftover after parsing attributes in process `syz.5.632'. [ 83.390677][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.634'. [ 83.445643][ T5474] tipc: Started in network mode [ 83.450638][ T5474] tipc: Node identity e65846d4f6ca, cluster identity 4711 [ 83.457857][ T5474] tipc: Enabled bearer , priority 0 [ 83.509601][ T5474] tipc: Disabling bearer [ 83.540752][ T5492] xt_CT: No such helper "pptp" [ 83.659792][ T5501] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 83.822556][ T5514] netlink: 20 bytes leftover after parsing attributes in process `syz.6.647'. [ 83.832183][ T5512] FAULT_INJECTION: forcing a failure. [ 83.832183][ T5512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.845278][ T5512] CPU: 1 UID: 0 PID: 5512 Comm: syz.1.646 Not tainted syzkaller #0 PREEMPT(voluntary) [ 83.845382][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.845426][ T5512] Call Trace: [ 83.845432][ T5512] [ 83.845440][ T5512] __dump_stack+0x1d/0x30 [ 83.845461][ T5512] dump_stack_lvl+0xe8/0x140 [ 83.845481][ T5512] dump_stack+0x15/0x1b [ 83.845499][ T5512] should_fail_ex+0x265/0x280 [ 83.845596][ T5512] should_fail+0xb/0x20 [ 83.845612][ T5512] should_fail_usercopy+0x1a/0x20 [ 83.845637][ T5512] _copy_to_user+0x20/0xa0 [ 83.845661][ T5512] simple_read_from_buffer+0xb5/0x130 [ 83.845697][ T5512] proc_fail_nth_read+0x10e/0x150 [ 83.845727][ T5512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.845755][ T5512] vfs_read+0x1a8/0x770 [ 83.845828][ T5512] ? __rcu_read_unlock+0x4f/0x70 [ 83.845907][ T5512] ? __fget_files+0x184/0x1c0 [ 83.845931][ T5512] ksys_read+0xda/0x1a0 [ 83.845950][ T5512] __x64_sys_read+0x40/0x50 [ 83.846037][ T5512] x64_sys_call+0x27c0/0x3000 [ 83.846100][ T5512] do_syscall_64+0xd2/0x200 [ 83.846115][ T5512] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 83.846137][ T5512] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 83.846165][ T5512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.846254][ T5512] RIP: 0033:0x7fd3d75dd9dc [ 83.846344][ T5512] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 83.846427][ T5512] RSP: 002b:00007fd3d603f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.846520][ T5512] RAX: ffffffffffffffda RBX: 00007fd3d7835fa0 RCX: 00007fd3d75dd9dc [ 83.846530][ T5512] RDX: 000000000000000f RSI: 00007fd3d603f0a0 RDI: 0000000000000006 [ 83.846540][ T5512] RBP: 00007fd3d603f090 R08: 0000000000000000 R09: 0000000000000000 [ 83.846550][ T5512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.846561][ T5512] R13: 00007fd3d7836038 R14: 00007fd3d7835fa0 R15: 00007fffb1410668 [ 83.846586][ T5512] [ 84.187090][ T5531] xt_CT: No such helper "pptp" [ 84.338909][ T5539] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.391969][ T5543] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.409062][ T5539] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.428362][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 84.438833][ T5546] tipc: Enabling of bearer rejected, failed to enable media [ 84.449710][ T5543] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.470793][ T5550] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.659'. [ 84.482010][ T5539] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.502063][ T5543] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.540112][ T5539] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.612683][ T5543] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.634509][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.643076][ T5568] loop5: detected capacity change from 0 to 2048 [ 84.651793][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.660170][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.668545][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.693944][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.698541][ T5570] xt_CT: No such helper "pptp" [ 84.709038][ T5568] loop5: p1 < > p4 [ 84.714040][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.718420][ T5568] loop5: p4 start 42180 is beyond EOD, truncated [ 84.731443][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.742638][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.819614][ T5582] tipc: Enabled bearer , priority 0 [ 84.827372][ T5582] tipc: Disabling bearer [ 85.419142][ T5594] tipc: Invalid UDP bearer configuration [ 85.419158][ T5594] tipc: Enabling of bearer rejected, failed to enable media [ 85.465134][ T5598] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.500073][ T5598] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.612486][ T5598] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.700152][ T5598] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.825260][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.834115][ T5607] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.841344][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.849730][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.858477][ T5607] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 85.867863][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.294112][ T5637] xt_CT: No such helper "pptp" [ 86.707873][ T5658] xt_hashlimit: max too large, truncated to 1048576 [ 86.715224][ T5658] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 86.851226][ T5661] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.899905][ T5661] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.959921][ T5661] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.010187][ T5661] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.336283][ T5675] xt_CT: No such helper "pptp" [ 87.713106][ T5688] loop0: detected capacity change from 0 to 2048 [ 87.769035][ T5688] loop0: p1 < > p4 [ 87.828946][ T5688] loop0: p4 start 42180 is beyond EOD, truncated [ 88.275870][ T5711] xt_CT: No such helper "pptp" [ 88.297680][ T5713] __nla_validate_parse: 8 callbacks suppressed [ 88.297695][ T5713] netlink: 48 bytes leftover after parsing attributes in process `syz.5.713'. [ 88.315605][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 88.315618][ T29] audit: type=1326 audit(1761716334.416:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 88.346260][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.713'. [ 88.356216][ T29] audit: type=1326 audit(1761716334.446:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 88.379704][ T29] audit: type=1326 audit(1761716334.446:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 88.402997][ T29] audit: type=1326 audit(1761716334.446:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 88.426235][ T29] audit: type=1326 audit(1761716334.446:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 88.449564][ T29] audit: type=1326 audit(1761716334.446:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 88.472818][ T29] audit: type=1326 audit(1761716334.456:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 88.496234][ T29] audit: type=1326 audit(1761716334.456:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 88.519500][ T29] audit: type=1326 audit(1761716334.456:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 88.542851][ T29] audit: type=1326 audit(1761716334.456:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5704 comm="syz.5.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 88.600654][ T5717] loop0: detected capacity change from 0 to 512 [ 88.624443][ T5717] EXT4-fs: Ignoring removed nobh option [ 88.721027][ T5717] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.717: iget: bad i_size value: 38620345925642 [ 88.738499][ T5717] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.717: couldn't read orphan inode 15 (err -117) [ 88.760597][ T5717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.905450][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.295324][ T5745] tipc: Invalid UDP bearer configuration [ 89.295334][ T5745] tipc: Enabling of bearer rejected, failed to enable media [ 89.527150][ T5765] netlink: 28 bytes leftover after parsing attributes in process `syz.1.738'. [ 89.602395][ T5768] netlink: 48 bytes leftover after parsing attributes in process `syz.1.739'. [ 89.623985][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 90.236959][ T5774] xt_CT: No such helper "pptp" [ 90.273588][ T5781] loop5: detected capacity change from 0 to 1024 [ 90.298973][ T5781] ext4: Unknown parameter 'noacl' [ 90.350357][ T5783] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 90.587641][ T5808] loop0: detected capacity change from 0 to 512 [ 90.594525][ T5808] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.606342][ T5808] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.755: corrupted xattr entries [ 90.618590][ T5808] EXT4-fs (loop0): Remounting filesystem read-only [ 90.625216][ T5808] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.638890][ T5808] EXT4-fs (loop0): 1 truncate cleaned up [ 90.645011][ T5808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.668598][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.679121][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.682176][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.695542][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.710104][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.729790][ T5813] xt_CT: No such helper "pptp" [ 90.742448][ T5816] netlink: 48 bytes leftover after parsing attributes in process `syz.3.757'. [ 90.760727][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 90.772851][ T5818] loop0: detected capacity change from 0 to 512 [ 90.779763][ T5818] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.791623][ T5818] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 90.806505][ T5818] EXT4-fs (loop0): 1 truncate cleaned up [ 90.812793][ T5818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.826660][ T5818] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 90.847894][ T5825] netlink: 'syz.3.761': attribute type 13 has an invalid length. [ 90.855744][ T5825] netlink: 'syz.3.761': attribute type 27 has an invalid length. [ 90.925657][ T5834] tipc: Invalid UDP bearer configuration [ 90.925666][ T5834] tipc: Enabling of bearer rejected, failed to enable media [ 91.007025][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.025588][ T5840] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.059822][ T5840] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.099985][ T5840] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.151352][ T5840] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.177915][ T5844] xt_CT: No such helper "pptp" [ 91.209452][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.227529][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.236097][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.244602][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.286038][ T5850] netlink: 48 bytes leftover after parsing attributes in process `syz.6.769'. [ 91.338486][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.769'. [ 91.486106][ T5866] loop5: detected capacity change from 0 to 2048 [ 91.531367][ T5866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.802630][ T5866] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.964580][ T3901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.002061][ T5874] pim6reg1: entered promiscuous mode [ 92.007393][ T5874] pim6reg1: entered allmulticast mode [ 92.051419][ T5876] tipc: Started in network mode [ 92.056352][ T5876] tipc: Node identity 62c1c8b40f9a, cluster identity 4711 [ 92.063587][ T5876] tipc: Enabled bearer , priority 0 [ 92.089719][ T5876] tipc: Disabling bearer [ 92.135672][ T5888] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 92.135672][ T5888] The task syz.0.780 (5888) triggered the difference, watch for misbehavior. [ 92.187221][ T5894] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 92.199279][ T5892] loop5: detected capacity change from 0 to 2048 [ 92.220981][ T5896] loop6: detected capacity change from 0 to 1024 [ 92.227936][ T5896] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.247454][ T5896] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.784: Invalid block bitmap block 0 in block_group 0 [ 92.248872][ T5892] loop5: p1 < > p4 [ 92.265533][ T5896] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.784: Failed to acquire dquot type 0 [ 92.277101][ T5896] EXT4-fs error (device loop6): ext4_free_blocks:6706: comm syz.6.784: Freeing blocks not in datazone - block = 0, count = 4096 [ 92.290785][ T5896] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.784: Invalid inode bitmap blk 0 in block_group 0 [ 92.303594][ T5892] loop5: p4 start 42180 is beyond EOD, truncated [ 92.318772][ T12] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 92.338330][ T5896] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 92.347048][ T5896] EXT4-fs (loop6): 1 orphan inode deleted [ 92.353235][ T5896] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.401989][ T5890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.613241][ T5921] tipc: Invalid UDP bearer configuration [ 92.613256][ T5921] tipc: Enabling of bearer rejected, failed to enable media [ 92.666513][ T5922] tipc: Enabled bearer , priority 0 [ 92.679759][ T5922] tipc: Disabling bearer [ 92.688941][ T5930] xt_hashlimit: max too large, truncated to 1048576 [ 92.696218][ T5930] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 93.616837][ T5954] __nla_validate_parse: 6 callbacks suppressed [ 93.616851][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 93.697901][ T5959] loop6: detected capacity change from 0 to 512 [ 93.704571][ T5959] EXT4-fs: Ignoring removed nobh option [ 93.715438][ T5959] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.807: iget: bad i_size value: 38620345925642 [ 93.728753][ T5959] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.807: couldn't read orphan inode 15 (err -117) [ 93.741698][ T5959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.756705][ T5959] netlink: 40 bytes leftover after parsing attributes in process `syz.6.807'. [ 93.778106][ T4241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.794720][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 93.794742][ T29] audit: type=1326 audit(1761716339.896:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 93.813344][ T5965] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 93.826203][ T29] audit: type=1326 audit(1761716339.896:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 93.851311][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.6.809'. [ 93.855954][ T29] audit: type=1326 audit(1761716339.896:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 93.871570][ T5966] tipc: Enabled bearer , priority 0 [ 93.888005][ T29] audit: type=1326 audit(1761716339.896:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 93.917897][ T29] audit: type=1326 audit(1761716339.896:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 93.941344][ T29] audit: type=1326 audit(1761716339.896:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 93.964851][ T29] audit: type=1326 audit(1761716339.896:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 93.988251][ T29] audit: type=1326 audit(1761716339.896:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 94.011640][ T29] audit: type=1326 audit(1761716339.896:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 94.034939][ T29] audit: type=1326 audit(1761716339.896:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5963 comm="syz.1.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 94.059357][ T5966] tipc: Disabling bearer [ 94.762337][ T5991] tipc: Invalid UDP bearer configuration [ 94.762347][ T5991] tipc: Enabling of bearer rejected, failed to enable media [ 94.804672][ T5997] loop1: detected capacity change from 0 to 512 [ 94.811448][ T5997] EXT4-fs: Ignoring removed nobh option [ 94.818834][ T5997] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.822: iget: bad i_size value: 38620345925642 [ 94.831794][ T5997] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.822: couldn't read orphan inode 15 (err -117) [ 94.844199][ T5997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.859386][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'. [ 94.876307][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.915813][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 94.929315][ T6002] tipc: Enabled bearer , priority 0 [ 94.937234][ T6002] tipc: Disabling bearer [ 95.052825][ T6012] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 95.200855][ T6020] tipc: Invalid UDP bearer configuration [ 95.200863][ T6020] tipc: Enabling of bearer rejected, failed to enable media [ 95.386260][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.833'. [ 95.645838][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 95.656617][ T6036] tipc: Enabling of bearer rejected, failed to enable media [ 95.785194][ T6049] tipc: Invalid UDP bearer configuration [ 95.785204][ T6049] tipc: Enabling of bearer rejected, failed to enable media [ 96.038781][ T6056] bridge0: entered promiscuous mode [ 96.087459][ T6056] bridge0: port 4(macsec0) entered blocking state [ 96.094334][ T6056] bridge0: port 4(macsec0) entered disabled state [ 96.151349][ T6056] macsec0: entered allmulticast mode [ 96.156728][ T6056] bridge0: entered allmulticast mode [ 96.163547][ T6056] macsec0: left allmulticast mode [ 96.168739][ T6056] bridge0: left allmulticast mode [ 96.175671][ T6056] bridge0: left promiscuous mode [ 96.323967][ T6076] xt_CT: No such helper "pptp" [ 96.352880][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.853'. [ 96.366227][ T6081] tipc: Enabled bearer , priority 0 [ 96.376188][ T6081] tipc: Disabling bearer [ 96.387257][ T6087] tipc: Invalid UDP bearer configuration [ 96.387265][ T6087] tipc: Enabling of bearer rejected, failed to enable media [ 96.421309][ T6091] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.463934][ T6091] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.509990][ T6091] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.539012][ T6103] bridge0: entered promiscuous mode [ 96.545715][ T6103] bridge0: port 3(macsec0) entered blocking state [ 96.552300][ T6103] bridge0: port 3(macsec0) entered disabled state [ 96.559051][ T6103] macsec0: entered allmulticast mode [ 96.564351][ T6103] bridge0: entered allmulticast mode [ 96.570198][ T6103] macsec0: left allmulticast mode [ 96.575298][ T6103] bridge0: left allmulticast mode [ 96.580984][ T6103] bridge0: left promiscuous mode [ 96.601181][ T6091] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.619763][ T6106] loop5: detected capacity change from 0 to 128 [ 96.685671][ T1006] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.696966][ T1006] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.708019][ T1006] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.719634][ T1006] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.933303][ T6123] tipc: Invalid UDP bearer configuration [ 96.933323][ T6123] tipc: Enabling of bearer rejected, failed to enable media [ 97.382818][ T6135] loop6: detected capacity change from 0 to 1024 [ 97.393005][ T6135] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 97.405601][ T6135] loop6: detected capacity change from 0 to 512 [ 97.412718][ T6135] ext4: Unknown parameter 'ɇ³'ÿ' [ 98.040730][ T6155] tipc: Invalid UDP bearer configuration [ 98.040748][ T6155] tipc: Enabling of bearer rejected, failed to enable media [ 98.069133][ T6159] loop5: detected capacity change from 0 to 2048 [ 98.108921][ T6159] loop5: p1 < > p4 [ 98.113332][ T6159] loop5: p4 start 42180 is beyond EOD, truncated [ 98.129612][ T6162] bridge0: entered promiscuous mode [ 98.136226][ T6162] bridge0: port 3(macsec0) entered blocking state [ 98.142817][ T6162] bridge0: port 3(macsec0) entered disabled state [ 98.149651][ T6162] macsec0: entered allmulticast mode [ 98.154926][ T6162] bridge0: entered allmulticast mode [ 98.160655][ T6162] macsec0: left allmulticast mode [ 98.165737][ T6162] bridge0: left allmulticast mode [ 98.171363][ T6162] bridge0: left promiscuous mode [ 98.439487][ T6192] tipc: Enabling of bearer rejected, failed to enable media [ 98.965461][ T6205] __nla_validate_parse: 7 callbacks suppressed [ 98.965474][ T6205] netlink: 48 bytes leftover after parsing attributes in process `syz.0.895'. [ 99.003473][ T6207] loop6: detected capacity change from 0 to 256 [ 99.073270][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 99.073286][ T29] audit: type=1326 audit(1761716345.176:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.5.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 99.164017][ T29] audit: type=1326 audit(1761716345.206:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.5.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 99.175007][ T6213] 9pnet_fd: Insufficient options for proto=fd [ 99.187642][ T29] audit: type=1326 audit(1761716345.206:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.5.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 99.194062][ T6215] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 99.217052][ T29] audit: type=1326 audit(1761716345.206:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.5.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 99.217081][ T29] audit: type=1326 audit(1761716345.206:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.5.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 99.217106][ T29] audit: type=1326 audit(1761716345.206:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.5.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 99.231812][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 99.248810][ T29] audit: type=1326 audit(1761716345.206:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.5.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 99.327830][ T29] audit: type=1326 audit(1761716345.206:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.5.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 99.351299][ T29] audit: type=1326 audit(1761716345.206:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.5.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 99.374640][ T29] audit: type=1326 audit(1761716345.206:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6208 comm="syz.5.897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 99.553395][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 99.569759][ T6228] tipc: Enabled bearer , priority 0 [ 99.579682][ T6228] tipc: Disabling bearer [ 99.740809][ T6245] netlink: 'syz.0.908': attribute type 1 has an invalid length. [ 107.321858][ T6261] netlink: 48 bytes leftover after parsing attributes in process `syz.3.915'. [ 107.338676][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 107.361820][ T29] kauditd_printk_skb: 1477 callbacks suppressed [ 107.361833][ T29] audit: type=1326 audit(1761716353.466:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 107.365841][ T6263] tipc: Enabled bearer , priority 0 [ 107.404391][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 107.404777][ T29] audit: type=1326 audit(1761716353.506:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 107.436663][ T29] audit: type=1326 audit(1761716353.506:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 107.460097][ T29] audit: type=1326 audit(1761716353.506:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 107.483401][ T29] audit: type=1326 audit(1761716353.506:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 107.506686][ T29] audit: type=1326 audit(1761716353.506:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 107.530426][ T29] audit: type=1326 audit(1761716353.506:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 107.553746][ T29] audit: type=1326 audit(1761716353.506:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 107.577161][ T29] audit: type=1326 audit(1761716353.506:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 107.585441][ T6283] loop0: detected capacity change from 0 to 1024 [ 107.608008][ T29] audit: type=1326 audit(1761716353.516:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6260 comm="syz.3.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 107.612178][ T6283] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.634785][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 107.651925][ T6283] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.921: Invalid block bitmap block 0 in block_group 0 [ 107.652107][ T6277] tipc: Disabling bearer [ 107.666881][ T6276] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 107.680284][ T6283] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.921: Failed to acquire dquot type 0 [ 107.695283][ T6283] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.921: Freeing blocks not in datazone - block = 0, count = 4096 [ 107.711825][ T6283] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.921: Invalid inode bitmap blk 0 in block_group 0 [ 107.728489][ T1006] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 107.740312][ T6283] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 107.761891][ T6283] EXT4-fs (loop0): 1 orphan inode deleted [ 107.768000][ T6283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.801060][ T6295] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 107.826083][ T6300] tipc: Invalid UDP bearer configuration [ 107.826097][ T6300] tipc: Enabling of bearer rejected, failed to enable media [ 107.857478][ T6280] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.899193][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 107.924622][ T6304] tipc: Enabled bearer , priority 0 [ 107.933297][ T6304] tipc: Disabling bearer [ 108.250732][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 108.272328][ T6328] tipc: Enabled bearer , priority 0 [ 108.285467][ T6328] tipc: Disabling bearer [ 108.488728][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 108.503590][ T6346] tipc: Enabled bearer , priority 0 [ 108.512298][ T6346] tipc: Disabling bearer [ 108.672020][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 108.696310][ T6362] tipc: Enabled bearer , priority 0 [ 108.705984][ T6362] tipc: Disabling bearer [ 108.866908][ T6387] tipc: Enabling of bearer rejected, failed to enable media [ 108.978766][ T6395] xt_hashlimit: max too large, truncated to 1048576 [ 109.008616][ T6395] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 109.679836][ T6431] loop1: detected capacity change from 0 to 128 [ 109.919981][ T6464] loop0: detected capacity change from 0 to 128 [ 111.170780][ T6569] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.193928][ T6571] loop6: detected capacity change from 0 to 128 [ 111.230122][ T6569] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.273239][ T6582] loop6: detected capacity change from 0 to 512 [ 111.280160][ T6582] EXT4-fs: Ignoring removed nobh option [ 111.287355][ T6582] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1043: iget: bad i_size value: 38620345925642 [ 111.301347][ T6569] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.308855][ T6582] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1043: couldn't read orphan inode 15 (err -117) [ 111.323689][ T6582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.348867][ T4241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.358573][ T6569] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.467393][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.478610][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.489477][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.500544][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.008885][ T6609] xt_CT: No such helper "pptp" [ 112.758462][ T29] kauditd_printk_skb: 461 callbacks suppressed [ 112.758478][ T29] audit: type=1326 audit(1761716358.836:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 112.788089][ T29] audit: type=1326 audit(1761716358.836:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6643 comm="syz.5.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 112.865455][ T29] audit: type=1326 audit(1761716358.966:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 112.889130][ T29] audit: type=1326 audit(1761716358.966:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 112.913228][ T29] audit: type=1326 audit(1761716359.016:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 112.937062][ T29] audit: type=1326 audit(1761716359.016:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 112.960609][ T29] audit: type=1326 audit(1761716359.016:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 113.003568][ T29] audit: type=1326 audit(1761716359.086:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 113.027172][ T29] audit: type=1326 audit(1761716359.086:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 113.050975][ T29] audit: type=1326 audit(1761716359.086:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.5.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 113.221234][ T6682] xt_hashlimit: max too large, truncated to 1048576 [ 113.229650][ T6682] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 113.531123][ T6699] __nla_validate_parse: 2 callbacks suppressed [ 113.531138][ T6699] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1087'. [ 113.662003][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1087'. [ 114.927733][ T6755] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1110'. [ 115.263223][ T6774] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1117'. [ 115.309004][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1117'. [ 115.546317][ T6787] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.599064][ T6787] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.640420][ T6787] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.690257][ T6787] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.972635][ T6801] xt_hashlimit: max too large, truncated to 1048576 [ 115.980321][ T6801] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 116.075582][ T6807] xt_hashlimit: max too large, truncated to 1048576 [ 116.083072][ T6807] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 116.269029][ T6810] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 116.573049][ T2814] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.584095][ T2814] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.595387][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.605900][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.628563][ T6819] loop0: detected capacity change from 0 to 128 [ 116.828513][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 116.842271][ T6827] tipc: Enabled bearer , priority 0 [ 116.850609][ T6827] tipc: Disabling bearer [ 116.869717][ T6830] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1137'. [ 116.890914][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1137'. [ 116.961365][ T6836] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.009990][ T6836] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.060327][ T6836] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.120254][ T6836] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.178773][ T1006] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.198794][ T1006] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.207051][ T1006] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.234066][ T1006] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.296364][ T6848] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1146'. [ 117.527321][ T6861] tipc: Enabled bearer , priority 0 [ 117.535889][ T6861] tipc: Disabling bearer [ 117.624469][ T6868] loop0: detected capacity change from 0 to 128 [ 117.698772][ T6882] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.750441][ T6882] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.819690][ T6882] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.879824][ T6882] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.109902][ T6891] tipc: Enabled bearer , priority 0 [ 118.117636][ T6891] tipc: Disabling bearer [ 118.168312][ T6895] loop6: detected capacity change from 0 to 128 [ 118.285100][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 118.285113][ T29] audit: type=1326 audit(1761716364.386:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 118.314744][ T29] audit: type=1326 audit(1761716364.386:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 118.342312][ T29] audit: type=1326 audit(1761716364.416:5839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 118.365847][ T29] audit: type=1326 audit(1761716364.416:5840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 118.389324][ T29] audit: type=1326 audit(1761716364.416:5841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 118.412623][ T29] audit: type=1326 audit(1761716364.416:5842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 118.436606][ T29] audit: type=1326 audit(1761716364.416:5843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 118.460264][ T29] audit: type=1326 audit(1761716364.416:5844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 118.483720][ T29] audit: type=1326 audit(1761716364.416:5845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 118.507503][ T29] audit: type=1326 audit(1761716364.416:5846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.6.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1c5b6efc9 code=0x7ffc0000 [ 118.564006][ T6913] __nla_validate_parse: 5 callbacks suppressed [ 118.564020][ T6913] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 118.692956][ T6921] loop5: detected capacity change from 0 to 128 [ 118.748156][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1177'. [ 118.762846][ T6925] tipc: Enabled bearer , priority 0 [ 118.771254][ T6925] tipc: Disabling bearer [ 119.050164][ T6930] loop5: detected capacity change from 0 to 128 [ 119.695139][ T6973] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 119.994797][ T6990] dummy0: left allmulticast mode [ 119.995890][ T6993] loop5: detected capacity change from 0 to 256 [ 119.999953][ T6990] bridge0: port 3(dummy0) entered disabled state [ 120.006512][ T6993] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 120.024184][ T6990] bridge_slave_0: left allmulticast mode [ 120.029890][ T6990] bridge_slave_0: left promiscuous mode [ 120.035550][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.044283][ T6990] bridge_slave_1: left allmulticast mode [ 120.050002][ T6990] bridge_slave_1: left promiscuous mode [ 120.055679][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.065472][ T6990] bond0: (slave bond_slave_0): Releasing backup interface [ 120.080356][ T6990] bond0: (slave bond_slave_1): Releasing backup interface [ 120.100996][ T6990] team0: Port device team_slave_0 removed [ 120.109464][ T6990] team0: Port device team_slave_1 removed [ 120.142820][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.157747][ T6993] 9pnet_fd: p9_fd_create_tcp (6993): problem connecting socket to 127.0.0.1 [ 120.178167][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 120.179264][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.210680][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.227406][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.233894][ T7008] loop0: detected capacity change from 0 to 2048 [ 120.288755][ T7008] loop0: p1 < > p4 [ 120.297960][ T7008] loop0: p4 start 42180 is beyond EOD, truncated [ 120.371796][ T7013] xt_hashlimit: max too large, truncated to 1048576 [ 120.379787][ T7013] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 120.390467][ T7013] netlink: 'syz.3.1209': attribute type 10 has an invalid length. [ 120.398314][ T7013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1209'. [ 120.894687][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1216'. [ 120.908177][ T7032] tipc: Enabled bearer , priority 0 [ 120.924536][ T7032] tipc: Disabling bearer [ 121.036159][ T7036] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.086065][ T7040] IPv6: NLM_F_CREATE should be specified when creating new route [ 121.094017][ T7040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.101260][ T7040] IPv6: NLM_F_CREATE should be set when creating new route [ 121.111327][ T7036] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.163189][ T7036] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.200666][ T7036] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.259898][ T1006] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.272913][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1229'. [ 121.283187][ T1006] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.295906][ T7067] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 121.297990][ T1006] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.314189][ T7063] tipc: Enabled bearer , priority 0 [ 121.322295][ T7063] tipc: Disabling bearer [ 121.329355][ T1006] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.391706][ T7074] loop0: detected capacity change from 0 to 512 [ 121.401541][ T7074] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1231: inode has both inline data and extents flags [ 121.414979][ T7074] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1231: couldn't read orphan inode 15 (err -117) [ 121.427316][ T7074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.440605][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1230'. [ 121.545623][ T7071] tipc: Enabled bearer , priority 0 [ 121.554015][ T7071] tipc: Disabling bearer [ 121.670375][ T7098] xt_hashlimit: max too large, truncated to 1048576 [ 121.685831][ T7098] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 121.697708][ T7098] netlink: 'syz.1.1239': attribute type 10 has an invalid length. [ 121.705625][ T7098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1239'. [ 121.719078][ T7100] loop5: detected capacity change from 0 to 128 [ 121.817743][ T1006] kworker/u8:5: attempt to access beyond end of device [ 121.817743][ T1006] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 121.832309][ T1006] kworker/u8:5: attempt to access beyond end of device [ 121.832309][ T1006] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 121.846050][ T1006] kworker/u8:5: attempt to access beyond end of device [ 121.846050][ T1006] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 121.860888][ T1006] kworker/u8:5: attempt to access beyond end of device [ 121.860888][ T1006] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 121.887893][ T1006] kworker/u8:5: attempt to access beyond end of device [ 121.887893][ T1006] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 121.909201][ T1006] kworker/u8:5: attempt to access beyond end of device [ 121.909201][ T1006] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 121.922790][ T1006] kworker/u8:5: attempt to access beyond end of device [ 121.922790][ T1006] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 121.939905][ T1006] kworker/u8:5: attempt to access beyond end of device [ 121.939905][ T1006] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 121.953968][ T1006] kworker/u8:5: attempt to access beyond end of device [ 121.953968][ T1006] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 121.971347][ T1006] kworker/u8:5: attempt to access beyond end of device [ 121.971347][ T1006] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 122.264487][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.683717][ T7159] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1260'. [ 123.379434][ T7192] xt_hashlimit: max too large, truncated to 1048576 [ 123.386611][ T7192] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 123.397264][ T7192] netlink: 'syz.3.1275': attribute type 10 has an invalid length. [ 123.430001][ T7197] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.440945][ T7190] tipc: Enabled bearer , priority 0 [ 123.448864][ T7190] tipc: Disabling bearer [ 123.469720][ T7197] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.559925][ T7197] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.619661][ T7197] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.817474][ T7214] loop5: detected capacity change from 0 to 512 [ 123.825786][ T7214] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1281: error while reading EA inode 32 err=-116 [ 123.838338][ T7214] EXT4-fs (loop5): Remounting filesystem read-only [ 123.845100][ T7214] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 123.855260][ T7214] EXT4-fs (loop5): 1 orphan inode deleted [ 123.861503][ T7214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.874450][ T7214] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.904781][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 123.904860][ T29] audit: type=1326 audit(1761716370.006:6250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.5.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 123.960745][ T29] audit: type=1326 audit(1761716370.006:6251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.5.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 123.984248][ T29] audit: type=1326 audit(1761716370.006:6252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.5.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 124.007703][ T29] audit: type=1326 audit(1761716370.006:6253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.5.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 124.031121][ T29] audit: type=1326 audit(1761716370.006:6254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.5.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 124.054539][ T29] audit: type=1326 audit(1761716370.006:6255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.5.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 124.077915][ T29] audit: type=1326 audit(1761716370.006:6256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.5.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 124.101345][ T29] audit: type=1326 audit(1761716370.006:6257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.5.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 124.105862][ T7216] loop6: detected capacity change from 0 to 32768 [ 124.124717][ T29] audit: type=1326 audit(1761716370.006:6258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.5.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 124.124743][ T29] audit: type=1326 audit(1761716370.006:6259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7217 comm="syz.5.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe695f5efc9 code=0x7ffc0000 [ 124.188865][ T1006] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.200584][ T1006] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.223372][ T1006] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.232366][ T7216] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 124.237755][ T7216] loop6: p1 start 460800 is beyond EOD, truncated [ 124.244357][ T7216] loop6: p2 size 83886080 extends beyond EOD, truncated [ 124.283277][ T7216] loop6: p5 start 460800 is beyond EOD, truncated [ 124.289879][ T7216] loop6: p6 size 83886080 extends beyond EOD, truncated [ 124.335226][ T1006] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.195162][ T7242] __nla_validate_parse: 2 callbacks suppressed [ 125.195176][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1289'. [ 125.229832][ T7232] tipc: Enabled bearer , priority 0 [ 125.240076][ T7232] tipc: Disabling bearer [ 125.272262][ T7256] loop6: detected capacity change from 0 to 2048 [ 125.308981][ T7259] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.328819][ T7256] loop6: p1 < > p4 [ 125.335108][ T7256] loop6: p4 start 42180 is beyond EOD, truncated [ 125.418117][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'. [ 125.427137][ T7278] netlink: 'syz.1.1306': attribute type 1 has an invalid length. [ 125.602668][ T7311] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1319'. [ 126.127480][ T7341] netlink: 'syz.1.1331': attribute type 7 has an invalid length. [ 126.156606][ T7339] loop6: detected capacity change from 0 to 8192 [ 126.310114][ T7362] loop0: detected capacity change from 0 to 2048 [ 126.359571][ T7362] loop0: p1 < > p4 [ 126.364047][ T7362] loop0: p4 start 42180 is beyond EOD, truncated [ 126.993061][ T7391] FAULT_INJECTION: forcing a failure. [ 126.993061][ T7391] name failslab, interval 1, probability 0, space 0, times 0 [ 127.005827][ T7391] CPU: 1 UID: 0 PID: 7391 Comm: syz.6.1349 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.005923][ T7391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 127.005930][ T7391] Call Trace: [ 127.005935][ T7391] [ 127.005939][ T7391] __dump_stack+0x1d/0x30 [ 127.005953][ T7391] dump_stack_lvl+0xe8/0x140 [ 127.005972][ T7391] dump_stack+0x15/0x1b [ 127.005989][ T7391] should_fail_ex+0x265/0x280 [ 127.006036][ T7391] should_failslab+0x8c/0xb0 [ 127.006052][ T7391] kmem_cache_alloc_noprof+0x50/0x480 [ 127.006068][ T7391] ? audit_log_start+0x342/0x720 [ 127.006158][ T7391] audit_log_start+0x342/0x720 [ 127.006169][ T7391] ? kstrtouint+0x76/0xc0 [ 127.006186][ T7391] audit_seccomp+0x48/0x100 [ 127.006214][ T7391] ? __seccomp_filter+0x82d/0x1250 [ 127.006228][ T7391] __seccomp_filter+0x83e/0x1250 [ 127.006243][ T7391] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 127.006334][ T7391] ? vfs_write+0x7e8/0x960 [ 127.006347][ T7391] ? __rcu_read_unlock+0x4f/0x70 [ 127.006360][ T7391] ? __fget_files+0x184/0x1c0 [ 127.006432][ T7391] __secure_computing+0x82/0x150 [ 127.006445][ T7391] syscall_trace_enter+0xcf/0x1e0 [ 127.006461][ T7391] do_syscall_64+0xac/0x200 [ 127.006509][ T7391] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 127.006570][ T7391] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 127.006652][ T7391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.006664][ T7391] RIP: 0033:0x7fc1c5b6efc9 [ 127.006678][ T7391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.006718][ T7391] RSP: 002b:00007fc1c45d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.006729][ T7391] RAX: ffffffffffffffda RBX: 00007fc1c5dc5fa0 RCX: 00007fc1c5b6efc9 [ 127.006736][ T7391] RDX: 0000000000000000 RSI: 000080000000000b RDI: 000020000000cffc [ 127.006743][ T7391] RBP: 00007fc1c45d7090 R08: 0000200000048000 R09: 0000000000000300 [ 127.006750][ T7391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.006835][ T7391] R13: 00007fc1c5dc6038 R14: 00007fc1c5dc5fa0 R15: 00007ffc29ef8c78 [ 127.006845][ T7391] [ 127.292231][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'. [ 127.306088][ T7404] tipc: Enabled bearer , priority 0 [ 127.359479][ T7404] tipc: Disabling bearer [ 127.388105][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1358'. [ 127.403143][ T7415] tipc: Enabled bearer , priority 0 [ 127.413097][ T7415] tipc: Disabling bearer [ 127.538083][ T7425] loop1: detected capacity change from 0 to 2048 [ 127.579125][ T7425] loop1: p1 < > p4 [ 127.583904][ T7425] loop1: p4 start 42180 is beyond EOD, truncated [ 127.806949][ T7437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.814484][ T7437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.822306][ T7437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.829757][ T7437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.837705][ T7437] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 127.844919][ T7437] batman_adv: batadv0: Removing interface: veth1_vlan [ 127.931803][ T7445] loop5: detected capacity change from 0 to 512 [ 127.940933][ T7442] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1366'. [ 127.951908][ T7445] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.5.1367: corrupted xattr block 95: invalid header [ 127.966588][ T7445] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1367: bg 0: block 7: invalid block bitmap [ 127.979419][ T7445] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 127.988572][ T7445] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2967: inode #11: comm syz.5.1367: corrupted xattr block 95: invalid header [ 128.002934][ T7445] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 128.011277][ T7442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1366'. [ 128.012792][ T7445] EXT4-fs (loop5): 1 orphan inode deleted [ 128.027400][ T7445] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.059310][ T3901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.320266][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 128.330872][ T7461] tipc: Enabling of bearer rejected, failed to enable media [ 128.405743][ T7468] bridge0: entered promiscuous mode [ 128.419892][ T7468] bridge0: port 3(macsec0) entered blocking state [ 128.426526][ T7468] bridge0: port 3(macsec0) entered disabled state [ 128.433443][ T7468] macsec0: entered allmulticast mode [ 128.438856][ T7468] bridge0: entered allmulticast mode [ 128.446458][ T7468] macsec0: left allmulticast mode [ 128.451674][ T7468] bridge0: left allmulticast mode [ 128.457782][ T7468] bridge0: left promiscuous mode [ 128.488150][ T7476] ref_ctr increment failed for inode: 0x5ae offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005f300 [ 128.695119][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'. [ 128.898131][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1391'. [ 128.927712][ T7510] loop6: detected capacity change from 0 to 1024 [ 128.934552][ T7510] EXT4-fs: Ignoring removed orlov option [ 128.940380][ T7510] ext4: Bad value for 'min_batch_time' [ 128.950053][ T7510] program syz.6.1390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.014860][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.024017][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.058714][ T7515] FAULT_INJECTION: forcing a failure. [ 129.058714][ T7515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.071826][ T7515] CPU: 0 UID: 0 PID: 7515 Comm: syz.5.1393 Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.071855][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.071907][ T7515] Call Trace: [ 129.071915][ T7515] [ 129.071923][ T7515] __dump_stack+0x1d/0x30 [ 129.071944][ T7515] dump_stack_lvl+0xe8/0x140 [ 129.071963][ T7515] dump_stack+0x15/0x1b [ 129.071981][ T7515] should_fail_ex+0x265/0x280 [ 129.072000][ T7515] should_fail+0xb/0x20 [ 129.072088][ T7515] should_fail_usercopy+0x1a/0x20 [ 129.072107][ T7515] _copy_from_user+0x1c/0xb0 [ 129.072128][ T7515] do_sock_getsockopt+0xf1/0x240 [ 129.072156][ T7515] __x64_sys_getsockopt+0x11e/0x1a0 [ 129.072254][ T7515] x64_sys_call+0x2bca/0x3000 [ 129.072272][ T7515] do_syscall_64+0xd2/0x200 [ 129.072288][ T7515] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 129.072312][ T7515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.072391][ T7515] RIP: 0033:0x7fe695f5efc9 [ 129.072404][ T7515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.072419][ T7515] RSP: 002b:00007fe6949c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 129.072436][ T7515] RAX: ffffffffffffffda RBX: 00007fe6961b5fa0 RCX: 00007fe695f5efc9 [ 129.072448][ T7515] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000009 [ 129.072509][ T7515] RBP: 00007fe6949c7090 R08: 0000200000000080 R09: 0000000000000000 [ 129.072521][ T7515] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.072531][ T7515] R13: 00007fe6961b6038 R14: 00007fe6961b5fa0 R15: 00007fff8d47b1c8 [ 129.072546][ T7515] [ 129.274438][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 129.274453][ T29] audit: type=1326 audit(1761716375.376:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 129.308637][ T29] audit: type=1326 audit(1761716375.376:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 129.332380][ T29] audit: type=1326 audit(1761716375.376:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 129.332404][ T29] audit: type=1326 audit(1761716375.376:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 129.332440][ T29] audit: type=1326 audit(1761716375.376:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 129.332463][ T29] audit: type=1326 audit(1761716375.376:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 129.332487][ T29] audit: type=1326 audit(1761716375.376:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 129.332585][ T29] audit: type=1326 audit(1761716375.376:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 129.332605][ T29] audit: type=1326 audit(1761716375.376:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 129.497141][ T29] audit: type=1326 audit(1761716375.376:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7531 comm="syz.1.1399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d75defc9 code=0x7ffc0000 [ 129.582091][ T7546] xt_hashlimit: max too large, truncated to 1048576 [ 129.589478][ T7546] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 129.603410][ T7546] netlink: 'syz.0.1406': attribute type 10 has an invalid length. [ 129.613816][ T7546] net_ratelimit: 68 callbacks suppressed [ 129.613829][ T7546] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 130.048340][ T7585] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.111498][ T7585] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.172074][ T7585] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.229858][ T7585] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.294490][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.305444][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.316253][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.327159][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.384772][ T7589] loop6: detected capacity change from 0 to 1024 [ 130.392117][ T7589] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.403096][ T7589] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 130.417481][ T7589] JBD2: no valid journal superblock found [ 130.423278][ T7589] EXT4-fs (loop6): Could not load journal inode [ 130.548959][ T7618] __nla_validate_parse: 1 callbacks suppressed [ 130.548973][ T7618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1433'. [ 130.572401][ T7622] FAULT_INJECTION: forcing a failure. [ 130.572401][ T7622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.585490][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.0.1432 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.585518][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.585530][ T7622] Call Trace: [ 130.585549][ T7622] [ 130.585557][ T7622] __dump_stack+0x1d/0x30 [ 130.585576][ T7622] dump_stack_lvl+0xe8/0x140 [ 130.585596][ T7622] dump_stack+0x15/0x1b [ 130.585613][ T7622] should_fail_ex+0x265/0x280 [ 130.585633][ T7622] should_fail+0xb/0x20 [ 130.585649][ T7622] should_fail_usercopy+0x1a/0x20 [ 130.585669][ T7622] _copy_from_user+0x1c/0xb0 [ 130.585691][ T7622] ioctl_fssetxattr+0x75/0x1d0 [ 130.585719][ T7622] do_vfs_ioctl+0x5c1/0xe10 [ 130.585737][ T7622] ? selinux_file_ioctl+0x308/0x3a0 [ 130.585777][ T7622] ? __fget_files+0x184/0x1c0 [ 130.585804][ T7622] __se_sys_ioctl+0x82/0x140 [ 130.585891][ T7622] __x64_sys_ioctl+0x43/0x50 [ 130.585907][ T7622] x64_sys_call+0x1816/0x3000 [ 130.585924][ T7622] do_syscall_64+0xd2/0x200 [ 130.585943][ T7622] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.585996][ T7622] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 130.586020][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.586040][ T7622] RIP: 0033:0x7fd9e4b5efc9 [ 130.586055][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.586073][ T7622] RSP: 002b:00007fd9e359e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.586107][ T7622] RAX: ffffffffffffffda RBX: 00007fd9e4db6090 RCX: 00007fd9e4b5efc9 [ 130.586120][ T7622] RDX: 00002000000005c0 RSI: 00000000401c5820 RDI: 0000000000000003 [ 130.586132][ T7622] RBP: 00007fd9e359e090 R08: 0000000000000000 R09: 0000000000000000 [ 130.586144][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.586155][ T7622] R13: 00007fd9e4db6128 R14: 00007fd9e4db6090 R15: 00007ffed0e953e8 [ 130.586172][ T7622] [ 130.807747][ T7624] xt_hashlimit: max too large, truncated to 1048576 [ 130.815332][ T7624] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 130.866450][ T7624] netlink: 'syz.6.1435': attribute type 10 has an invalid length. [ 130.874318][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1435'. [ 130.884448][ T7624] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 131.008572][ T7643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7643 comm=syz.3.1442 [ 131.008842][ T7651] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1443'. [ 131.125161][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1443'. [ 131.135122][ T7667] FAULT_INJECTION: forcing a failure. [ 131.135122][ T7667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.148229][ T7667] CPU: 1 UID: 0 PID: 7667 Comm: syz.0.1447 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.148256][ T7667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 131.148267][ T7667] Call Trace: [ 131.148272][ T7667] [ 131.148326][ T7667] __dump_stack+0x1d/0x30 [ 131.148349][ T7667] dump_stack_lvl+0xe8/0x140 [ 131.148394][ T7667] dump_stack+0x15/0x1b [ 131.148410][ T7667] should_fail_ex+0x265/0x280 [ 131.148429][ T7667] should_fail+0xb/0x20 [ 131.148443][ T7667] should_fail_usercopy+0x1a/0x20 [ 131.148504][ T7667] _copy_from_user+0x1c/0xb0 [ 131.148524][ T7667] ___sys_sendmsg+0xc1/0x1d0 [ 131.148559][ T7667] __sys_sendmmsg+0x178/0x300 [ 131.148585][ T7667] __x64_sys_sendmmsg+0x57/0x70 [ 131.148641][ T7667] x64_sys_call+0x1c4a/0x3000 [ 131.148659][ T7667] do_syscall_64+0xd2/0x200 [ 131.148677][ T7667] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 131.148702][ T7667] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 131.148731][ T7667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.148750][ T7667] RIP: 0033:0x7fd9e4b5efc9 [ 131.148764][ T7667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.148849][ T7667] RSP: 002b:00007fd9e359e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 131.148868][ T7667] RAX: ffffffffffffffda RBX: 00007fd9e4db6090 RCX: 00007fd9e4b5efc9 [ 131.148881][ T7667] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006 [ 131.148892][ T7667] RBP: 00007fd9e359e090 R08: 0000000000000000 R09: 0000000000000000 [ 131.148953][ T7667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.148964][ T7667] R13: 00007fd9e4db6128 R14: 00007fd9e4db6090 R15: 00007ffed0e953e8 [ 131.149013][ T7667] [ 131.867880][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1450'. [ 131.883575][ T7744] tipc: Enabled bearer , priority 0 [ 131.891811][ T7744] tipc: Disabling bearer [ 132.069856][ T7778] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1451'. [ 132.467636][ T7798] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7798 comm=syz.3.1458 [ 132.536114][ T7819] xt_hashlimit: max too large, truncated to 1048576 [ 132.555864][ T7819] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 132.578773][ T7819] netlink: 'syz.3.1461': attribute type 10 has an invalid length. [ 132.586641][ T7819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1461'. [ 132.644526][ T7825] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1464'. [ 132.791735][ T7846] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 133.000991][ T4505] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 133.008731][ T4505] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 133.016651][ T4505] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 133.029314][ T4505] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 133.692674][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 133.706053][ T7907] tipc: Enabled bearer , priority 0 [ 133.713982][ T7907] tipc: Disabling bearer [ 134.000803][ T4505] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 134.008282][ T4505] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 134.015740][ T4505] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 134.023161][ T4505] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 134.030900][ T4505] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 134.038299][ T4505] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 134.045947][ T4505] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 134.054280][ T4505] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 134.425814][ T7959] tipc: Enabled bearer , priority 0 [ 134.447059][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 134.447077][ T29] audit: type=1326 audit(1761716380.496:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 134.477055][ T29] audit: type=1326 audit(1761716380.496:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 134.500517][ T29] audit: type=1326 audit(1761716380.496:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 134.524385][ T29] audit: type=1326 audit(1761716380.496:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 134.547889][ T29] audit: type=1326 audit(1761716380.496:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 134.571419][ T29] audit: type=1326 audit(1761716380.496:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 134.595292][ T29] audit: type=1326 audit(1761716380.496:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 134.618791][ T29] audit: type=1326 audit(1761716380.506:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 134.642262][ T29] audit: type=1326 audit(1761716380.506:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 134.665665][ T29] audit: type=1326 audit(1761716380.506:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7957 comm="syz.3.1512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefeb29efc9 code=0x7ffc0000 [ 134.704848][ T7959] tipc: Disabling bearer [ 134.791425][ T7985] loop1: detected capacity change from 0 to 2048 [ 134.819143][ T7985] loop1: p1 < > p4 [ 134.825192][ T7985] loop1: p4 start 42180 is beyond EOD, truncated [ 135.007427][ T8021] netlink: 'syz.3.1535': attribute type 3 has an invalid length. [ 135.016480][ T8021] netlink: 'syz.3.1535': attribute type 21 has an invalid length. [ 135.024978][ T8021] netlink: 'syz.3.1535': attribute type 6 has an invalid length. [ 135.038570][ T8023] tipc: Enabled bearer , priority 0 [ 135.048606][ T8023] tipc: Disabling bearer [ 136.241671][ T8062] loop0: detected capacity change from 0 to 128 [ 136.265908][ T8062] FAT-fs (loop0): bogus number of reserved sectors [ 136.272669][ T8062] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 136.282224][ T8062] FAT-fs (loop0): Can't find a valid FAT filesystem [ 136.334748][ T8064] __nla_validate_parse: 5 callbacks suppressed [ 136.334831][ T8064] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 136.354733][ T8077] netlink: 'syz.0.1552': attribute type 1 has an invalid length. [ 136.362593][ T8077] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1552'. [ 136.572502][ T8083] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1553'. [ 136.620647][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 136.767267][ T8086] loop0: detected capacity change from 0 to 2048 [ 136.848869][ T8086] loop0: p1 < > p4 [ 136.855361][ T8086] loop0: p4 start 42180 is beyond EOD, truncated [ 137.164761][ T8107] xt_hashlimit: max too large, truncated to 1048576 [ 137.172364][ T8107] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 137.185393][ T8107] netlink: 'syz.5.1562': attribute type 10 has an invalid length. [ 137.193391][ T8107] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1562'. [ 137.471942][ T8139] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1573'. [ 137.486228][ T8142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1575'. [ 137.625455][ T8147] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1576'. [ 137.637033][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1576'. [ 137.849267][ T36] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 138.097394][ T8162] loop1: detected capacity change from 0 to 128 [ 138.338819][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1588'. [ 138.740476][ T4689] hid_parser_main: 29 callbacks suppressed [ 138.740495][ T4689] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.753928][ T4689] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.761450][ T4689] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.768942][ T4689] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.776326][ T4689] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.783893][ T4689] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.791375][ T4689] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.798934][ T4689] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.806571][ T4689] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.814161][ T4689] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 138.830350][ T4689] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 138.880215][ T8201] xt_hashlimit: max too large, truncated to 1048576 [ 138.887562][ T8201] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 138.899842][ T8201] netlink: 'syz.6.1597': attribute type 10 has an invalid length. [ 138.909273][ T8201] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 138.945441][ T8205] tipc: Enabled bearer , priority 0 [ 138.953680][ T8205] tipc: Disabling bearer [ 139.083548][ T8212] tipc: Enabled bearer , priority 0 [ 139.092351][ T8212] tipc: Disabling bearer [ 139.319884][ T4689] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 139.364655][ T8237] tipc: Enabled bearer , priority 0 [ 139.372780][ T8237] tipc: Disabling bearer [ 139.391710][ T8245] FAULT_INJECTION: forcing a failure. [ 139.391710][ T8245] name failslab, interval 1, probability 0, space 0, times 0 [ 139.406315][ T8245] CPU: 1 UID: 0 PID: 8245 Comm: syz.5.1615 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.406380][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 139.406390][ T8245] Call Trace: [ 139.406396][ T8245] [ 139.406403][ T8245] __dump_stack+0x1d/0x30 [ 139.406426][ T8245] dump_stack_lvl+0xe8/0x140 [ 139.406462][ T8245] dump_stack+0x15/0x1b [ 139.406478][ T8245] should_fail_ex+0x265/0x280 [ 139.406494][ T8245] ? l2tp_tunnel_create+0x67/0x1d0 [ 139.406572][ T8245] should_failslab+0x8c/0xb0 [ 139.406595][ T8245] __kmalloc_cache_noprof+0x4c/0x4a0 [ 139.406621][ T8245] ? radix_tree_lookup+0x12d/0x140 [ 139.406698][ T8245] l2tp_tunnel_create+0x67/0x1d0 [ 139.406737][ T8245] pppol2tp_connect+0x38f/0xa00 [ 139.406766][ T8245] ? __pfx_pppol2tp_connect+0x10/0x10 [ 139.407151][ T8245] __sys_connect+0x1f2/0x2b0 [ 139.407188][ T8245] __x64_sys_connect+0x3f/0x50 [ 139.407262][ T8245] x64_sys_call+0x2c0c/0x3000 [ 139.407276][ T8245] do_syscall_64+0xd2/0x200 [ 139.407287][ T8245] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 139.407369][ T8245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.407382][ T8245] RIP: 0033:0x7fe695f5efc9 [ 139.407392][ T8245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.407405][ T8245] RSP: 002b:00007fe6949c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 139.407417][ T8245] RAX: ffffffffffffffda RBX: 00007fe6961b5fa0 RCX: 00007fe695f5efc9 [ 139.407423][ T8245] RDX: 0000000000000026 RSI: 0000200000000080 RDI: 0000000000000005 [ 139.407430][ T8245] RBP: 00007fe6949c7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.407462][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.407570][ T8245] R13: 00007fe6961b6038 R14: 00007fe6961b5fa0 R15: 00007fff8d47b1c8 [ 139.407581][ T8245] [ 139.611432][ T8248] loop5: detected capacity change from 0 to 512 [ 139.630317][ T8248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.643015][ T8248] ext4 filesystem being mounted at /284/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.677051][ T8248] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.1616: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 139.698131][ T8248] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 12: comm syz.5.1616: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 139.720389][ T8248] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz.5.1616: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 139.748417][ T8248] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 14: comm syz.5.1616: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 139.778814][ T8248] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 15: comm syz.5.1616: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=32773, rec_len=0, size=2048 fake=0 [ 139.817879][ T8248] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz.5.1616: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 139.840122][ T8263] loop6: detected capacity change from 0 to 2048 [ 139.858054][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 139.858071][ T29] audit: type=1400 audit(1761716385.946:7120): avc: granted { setsecparam } for pid=8267 comm="syz.0.1623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 139.871009][ T8256] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 18: comm syz.5.1616: lblock 23 mapped to illegal pblock 18 (length 1) [ 139.898693][ T8263] loop6: p1 < > p4 [ 139.903006][ T4503] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 139.912432][ T8263] loop6: p4 start 42180 is beyond EOD, truncated [ 139.941919][ T8260] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 18: comm syz.5.1616: lblock 23 mapped to illegal pblock 18 (length 1) [ 139.956443][ T8248] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 17: comm syz.5.1616: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 139.977473][ T8283] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 18: comm syz.5.1616: lblock 23 mapped to illegal pblock 18 (length 1) [ 140.006453][ T8278] tipc: Enabling of bearer rejected, failed to enable media [ 140.027002][ T29] audit: type=1326 audit(1761716386.126:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.0.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e4b5efc9 code=0x7ffc0000 [ 140.050592][ T29] audit: type=1326 audit(1761716386.126:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.0.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9e4b5efc9 code=0x7ffc0000 [ 140.074358][ T29] audit: type=1326 audit(1761716386.126:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.0.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e4b5efc9 code=0x7ffc0000 [ 140.097800][ T29] audit: type=1326 audit(1761716386.126:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.0.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9e4b5efc9 code=0x7ffc0000 [ 140.121201][ T29] audit: type=1326 audit(1761716386.126:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.0.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e4b5efc9 code=0x7ffc0000 [ 140.153446][ T29] audit: type=1326 audit(1761716386.126:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.0.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9e4b5efc9 code=0x7ffc0000 [ 140.177183][ T29] audit: type=1326 audit(1761716386.126:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.0.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e4b5efc9 code=0x7ffc0000 [ 140.200610][ T29] audit: type=1326 audit(1761716386.126:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.0.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fd9e4b5efc9 code=0x7ffc0000 [ 140.224171][ T29] audit: type=1326 audit(1761716386.126:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8286 comm="syz.0.1629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e4b5efc9 code=0x7ffc0000 [ 140.381616][ T8300] xt_hashlimit: max too large, truncated to 1048576 [ 140.389126][ T8300] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 140.399632][ T8300] netlink: 'syz.3.1632': attribute type 10 has an invalid length. [ 140.583411][ T3901] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.861307][ T8309] tipc: Enabled bearer , priority 0 [ 140.875669][ T8309] tipc: Disabling bearer [ 140.903152][ T8324] xt_hashlimit: max too large, truncated to 1048576 [ 140.910610][ T8324] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 140.929557][ T8324] netlink: 'syz.1.1640': attribute type 10 has an invalid length. [ 140.938101][ T8324] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 140.976219][ T8334] loop6: detected capacity change from 0 to 2048 [ 140.999007][ T8334] loop6: p1 < > p4 [ 141.003336][ T8334] loop6: p4 start 42180 is beyond EOD, truncated [ 141.405657][ T8373] xt_hashlimit: max too large, truncated to 1048576 [ 141.412969][ T8373] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 141.423951][ T8373] netlink: 'syz.3.1658': attribute type 10 has an invalid length. [ 141.431963][ T8373] __nla_validate_parse: 10 callbacks suppressed [ 141.431976][ T8373] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1658'. [ 141.491133][ T8375] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.530223][ T8375] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.579793][ T8375] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.630110][ T8375] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.693305][ T7773] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.704358][ T7773] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.715292][ T7773] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.726186][ T7773] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.767864][ T8382] ip6t_srh: unknown srh match flags 4000 [ 141.911027][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1668'. [ 141.940894][ T8401] tipc: Enabled bearer , priority 0 [ 141.957179][ T8401] tipc: Disabling bearer [ 141.970354][ T8395] ================================================================== [ 141.971106][ T8407] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1667'. [ 141.978467][ T8395] BUG: KCSAN: data-race in __htab_map_lookup_elem / bpf_lru_pop_free [ 141.978494][ T8395] [ 141.978500][ T8395] write to 0xffff88811a28daa8 of 4 bytes by task 8405 on cpu 0: [ 141.978514][ T8395] bpf_lru_pop_free+0xbea/0xcc0 [ 141.978533][ T8395] __htab_lru_percpu_map_update_elem+0xea/0x600 [ 141.978553][ T8395] bpf_percpu_hash_update+0x61/0xa0 [ 141.978573][ T8395] bpf_map_update_value+0x36b/0x570 [ 141.978595][ T8395] generic_map_update_batch+0x3ff/0x550 [ 141.978620][ T8395] bpf_map_do_batch+0x25c/0x380 [ 141.978641][ T8395] __sys_bpf+0x5f8/0x7c0 [ 141.978657][ T8395] __x64_sys_bpf+0x41/0x50 [ 141.978680][ T8395] x64_sys_call+0x2aee/0x3000 [ 141.978702][ T8395] do_syscall_64+0xd2/0x200 [ 141.978719][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.978737][ T8395] [ 141.978742][ T8395] read to 0xffff88811a28daa8 of 4 bytes by task 8395 on cpu 1: [ 141.978758][ T8395] __htab_map_lookup_elem+0xab/0x150 [ 141.978776][ T8395] htab_lru_percpu_map_lookup_elem+0x20/0xb0 [ 141.978809][ T8395] bpf_prog_1908f35e458ae2da+0x48/0x50 [ 141.978826][ T8395] bpf_trace_run2+0x107/0x1c0 [ 141.978853][ T8395] __traceiter_kfree+0x2e/0x50 [ 141.978872][ T8395] kfree+0x351/0x400 [ 141.978892][ T8395] copy_splice_read+0x623/0x660 [ 141.978913][ T8395] splice_direct_to_actor+0x26f/0x680 [ 141.978936][ T8395] do_splice_direct+0xda/0x150 [ 141.978953][ T8395] do_sendfile+0x380/0x650 [ 141.978979][ T8395] __x64_sys_sendfile64+0x105/0x150 [ 141.979004][ T8395] x64_sys_call+0x2bb4/0x3000 [ 142.069784][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1667'. [ 142.072578][ T8395] do_syscall_64+0xd2/0x200 [ 142.072603][ T8395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.151539][ T8395] [ 142.153850][ T8395] value changed: 0x2a4f3234 -> 0xec4102e6 [ 142.159547][ T8395] [ 142.161851][ T8395] Reported by Kernel Concurrency Sanitizer on: [ 142.167991][ T8395] CPU: 1 UID: 0 PID: 8395 Comm: syz.6.1667 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.177691][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.187735][ T8395] ==================================================================