last executing test programs: 2m34.30867941s ago: executing program 4 (id=1856): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)={0x0, 0x3}) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (fail_nth: 1) 2m33.108147217s ago: executing program 4 (id=1860): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x62, 0x50a, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)={0x11, 0x15, '\x00', [@generic={0x80, 0x64, "ec5b842fee3ec11fc052f7f87d6d549f5c6dd692f5712f38808f18721968eb31d24d3ac85fff18a28524b742a59fa590803ae36403dee6262f751f1883f0e3f2830b3292af1b246b2f1ee72bd06e9b7d552e8c6f10c23603e73da9a76dbdc70533eb714a"}, @pad1, @calipso={0x7, 0x40, {0x3, 0xe, 0x7f, 0x9, [0x8, 0xfffffffffffffffe, 0x4, 0x4, 0xf5, 0x1, 0x10]}}]}, 0xb8) 2m32.89414041s ago: executing program 4 (id=1864): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b"], 0xd6) 2m32.430963817s ago: executing program 4 (id=1871): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x43403d05, 0x0) setpgid(r1, r2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) r6 = open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x6, 0x1}, {0x100, 0xfffff60c}], 0xffffffffffffffff}, 0x18, 0x3) pidfd_getfd(r6, r0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x182) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") (async) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) (async) getpid() (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) dup(r4) (async) ioctl$PTP_EXTTS_REQUEST2(r5, 0x43403d05, 0x0) (async) setpgid(r1, r2) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) (async) open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0) (async) fsetxattr$security_capability(r6, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x6, 0x1}, {0x100, 0xfffff60c}], 0xffffffffffffffff}, 0x18, 0x3) (async) pidfd_getfd(r6, r0, 0x0) (async) creat(&(0x7f00000000c0)='./bus\x00', 0x182) (async) 2m30.975217067s ago: executing program 4 (id=1878): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/address_bits', 0x0, 0x0) r0 = socket(0x1d, 0x6, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @broadcast}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, &(0x7f0000000440)=0x5c) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) mmap(&(0x7f0000392000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0xfb5fa000) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000006800050000000c000200010000001500000004000c80060003000100"/42], 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) unshare(0x40020000) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) 2m30.751114421s ago: executing program 4 (id=1883): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) splice(r7, &(0x7f00000004c0)=0x5, r9, &(0x7f0000000500)=0x9, 0x5, 0x1f) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x38, 0x0, 0x1, 0x0, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r10}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8}]}, 0x38}}, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, &(0x7f0000000240)={0x21, 0xfffc, 0x81, 0x2, 0x90, 0x8}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x1}, 0x10) write(r11, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40af003000000", 0x41d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000580)="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", &(0x7f0000000380)=@udp6=r11}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00'}, 0x18) r13 = gettid() process_vm_writev(r13, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2000002, 0x25dfdbfc, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x0, {@ip4=@private=0xa010100, 0x86dd}}}]}, 0x38}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r11, &(0x7f0000000780)="41d8c074db59aab5ff6da6603bb182dbc79a54787ac397d6f2d9275e9fea743d22eae23682a176d81a855d0a379e22f255f40a85d772541225f0b954d1e6b7ad256dd4c4747028cac6013011e364f3146fd4670d0fd3a4e7bd39a8957b697ef653e5841b5b21fb5917c67c51d5f9fada6830e56a9ce85343e703b419a0c2c5fcb303ba5f312e61a0c7be22a4a0389e7112a55a610b2cda658953d06b3bc1a880fa23a6aa451305a65d7e0ee1f8"}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=@bridge_getlink={0x50, 0x12, 0x400, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x0, 0x10008}, [@IFLA_IFALIAS={0x14, 0x14, 'bond0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0xc}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x4000) 2m30.638914242s ago: executing program 32 (id=1883): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r9 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) splice(r7, &(0x7f00000004c0)=0x5, r9, &(0x7f0000000500)=0x9, 0x5, 0x1f) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x38, 0x0, 0x1, 0x0, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r10}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_NET_NS_FD={0x8}]}, 0x38}}, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r12, 0x6, 0x1, &(0x7f0000000240)={0x21, 0xfffc, 0x81, 0x2, 0x90, 0x8}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0x1}, 0x10) write(r11, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40af003000000", 0x41d) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000580)="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", &(0x7f0000000380)=@udp6=r11}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00'}, 0x18) r13 = gettid() process_vm_writev(r13, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2000002, 0x25dfdbfc, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x0, {@ip4=@private=0xa010100, 0x86dd}}}]}, 0x38}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r11, &(0x7f0000000780)="41d8c074db59aab5ff6da6603bb182dbc79a54787ac397d6f2d9275e9fea743d22eae23682a176d81a855d0a379e22f255f40a85d772541225f0b954d1e6b7ad256dd4c4747028cac6013011e364f3146fd4670d0fd3a4e7bd39a8957b697ef653e5841b5b21fb5917c67c51d5f9fada6830e56a9ce85343e703b419a0c2c5fcb303ba5f312e61a0c7be22a4a0389e7112a55a610b2cda658953d06b3bc1a880fa23a6aa451305a65d7e0ee1f8"}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=@bridge_getlink={0x50, 0x12, 0x400, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r4, 0x0, 0x10008}, [@IFLA_IFALIAS={0x14, 0x14, 'bond0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0xc}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x50}}, 0x4000) 2m19.905915933s ago: executing program 3 (id=1961): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640), 0x0, 0xdbcf}, 0x38) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1695458af2ac700, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES64=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r4, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_sfeatures={0x33, 0x1, [{0x8, 0x8}]}}) 2m19.808181564s ago: executing program 3 (id=1966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m17.656003605s ago: executing program 3 (id=1982): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r5, &(0x7f0000000640)={0x1d, r6, 0x0, {}, 0x1}, 0x18) sendfile(r5, r4, 0x0, 0x1000000000000a) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xffff}, {0x5, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000280)=[{{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x4, 0x1}, {0x2}}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x4, 0x1}, {0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m17.444004068s ago: executing program 3 (id=1987): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000440)="$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") openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@user_xattr}, {@jqfmt_vfsold}, {@noinit_itable}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@nombcache}]}, 0x1, 0x55f, &(0x7f0000000400)="$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") (async, rerun: 64) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="50000000000c00000000000800a7d0304aa7a6fc0c088300"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="170000001400b595000000000000000002"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0700000004000a000800000001000000000000002e9008ce3140256554724b07e113de001bdf760412a7072dc5ea6be749355427837f90c818d3c5fec093f213978391996bec1f34c693ff5f1df8214a43dc929207ea599266e069faf4da49060f0bc54b3a6853f38cdbbea50473e5193ca551c42664454c118f07e1814b303fe8d7b468bbc521ad3e0a465fdc7501ec1e9df2057adccc179bde37d68a237dcf8a00ec5dbd5b6eb96a209ac074d0fd124e42f38dbf4fdccfd33b7f8698428686495e3d0c8cc9dcfc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) (async, rerun: 64) syz_usbip_server_init(0x2) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000002440)='ext4_allocate_blocks\x00', r0}, 0x18) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async) setsockopt$MRT_ADD_MFC(r8, 0x0, 0xcc, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "3dab2026179e3f9e94f795c462aef6c3ea5725a79a084ad573851312355a1302", 0xff, 0x3, 0x6, 0x2}, 0x3c) (async) setsockopt$MRT_DEL_MFC_PROXY(r8, 0x0, 0xd3, &(0x7f0000000080)={@rand_addr=0x64010102, @loopback, 0x0, "5d68d8f45e8c44e9bd761f737fce61895afc22fb62828f678626f59a14d4571f", 0x1be6, 0x0, 0xeb, 0x8}, 0x3c) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 2m17.020593863s ago: executing program 3 (id=1990): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000f3, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) kexec_load(0x0, 0x0, &(0x7f0000000140), 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x0, 0x800a, 0x2, "5f7300fbffffff00"}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) 2m14.640508747s ago: executing program 3 (id=1997): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r5, &(0x7f0000000640)={0x1d, r6, 0x0, {}, 0x1}, 0x18) sendfile(r5, r4, 0x0, 0x1000000000000a) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xffff}, {0x5, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000280)=[{{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x4, 0x1}, {0x2}}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x4, 0x1}, {0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2m14.601119887s ago: executing program 33 (id=1997): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r5, &(0x7f0000000640)={0x1d, r6, 0x0, {}, 0x1}, 0x18) sendfile(r5, r4, 0x0, 0x1000000000000a) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0xffff}, {0x5, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000280)=[{{0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}, {{0x1, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x4, 0x1}, {0x2}}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x4, 0x1}, {0x0, 0x1, 0x1}}, {{0x4, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.106274218s ago: executing program 6 (id=3188): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x4) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 3.338634403s ago: executing program 0 (id=3199): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x4, 0x4, 0x4, 0x4}}, 0x2e) socket$rxrpc(0x21, 0x2, 0xa) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)="d80000001c0081064e81f782db44b9044a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200100803600cfab94dcf5c3b37170461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516275631cd632ac071988284891dd709aa5e8d7ce06bbace8017cb8f91d2ec973b8f70c32bfdec4c2ee5a7cef40900000c1fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c16a4683f5aeb4edbb57a5025ccca9e00360dfd9bfc8a4bd1bbab77eb0034b7010044fad95667e006dc91f308fbffea5e889ad8090100", 0xda}], 0x1, 0x0, 0x0, 0x7400}, 0x40480d4) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x601, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="a161f962c4ddeb3fa405bceb9f992f80a52e669f0cd36341c2575005cafea5344839f27c", 0x24, 0x7) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close(r2) 2.957021349s ago: executing program 6 (id=3200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") 2.82380347s ago: executing program 0 (id=3203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) write$selinux_user(r4, &(0x7f00000001c0)={'system_u:object_r:tzdata_exec_t:s0', 0x20, 'system_u\x00'}, 0x2c) readv(r3, &(0x7f0000001180)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000000c0)=0x32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000040), &(0x7f0000000200)=r6}, 0x20) syz_clone(0x200e1400, &(0x7f0000000180)="3bc4dc0a7c16f150d4aec4812f2f6e00a7453831d407002cd13d6302f71c44169280792f45dc8b6fbc061da7c931c18fd4b422ffb5", 0x35, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300)="e683d749e576969507eabed5e4826e66f9016fc84841617e0463d21653e7be5fbe7a6ca838070cf2a7bb987a190549415896b2fd9ee111a77f8d237919e3f687e39a06197eae1747faad749e6aea015bbdd7ff6eca6d51373352b2f714d17951c2c669d3255129f77cfd3b7b6c2337751adc7ca130726a087d4930e730681e09c09f7d2c2813282a26") r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.753865831s ago: executing program 1 (id=3204): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x20409b, &(0x7f0000000040)={[{@user_xattr}]}, 0x7, 0x511, &(0x7f0000001c40)="$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") stat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x2ff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@remote, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000640)=0xe8) mount$9p_fd(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x210080, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=', @ANYRESDEC=r1, @ANYRESDEC]) 2.618765013s ago: executing program 1 (id=3205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x13dab808ea1e0d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.545657824s ago: executing program 1 (id=3206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x13dab808ea1e0d, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb1003fff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000640)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000a80)}, 0x20) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'macsec0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x6c, r8, 0x1, 0x70bd27, 0x8, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @loopback}}, {0x20, 0x2, @in6={0xa, 0x6e22, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) r9 = syz_clone(0x40940000, &(0x7f0000000340)="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", 0xfc, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000680)="f90ab665d1f35aad50458ad59eb518c5a0868e3ed42bd3cdab84c35361f53f084b4bfc72b038f64c1881c35d5f563c4b71e85687db43619461656eba9634f0d7ea1554e66f602b3c5cd0a80d0c20f22f1ada4c91b5ee3e0928abba1d3368496cc164b334234c530db12848d3a4e8e0a1bcd7c82e84cc11daabd47f30524ccf8a4396b0b787d9e120dbcb91") prlimit64(r9, 0x1, &(0x7f0000000240)={0x200000109a6d12, 0x8}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000000c0)) 2.415700316s ago: executing program 0 (id=3207): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x10}}], 0x2, 0x4000000) (fail_nth: 1) 1.909655143s ago: executing program 0 (id=3209): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x5}, [{0x8, 0x7b020682f5afb87c}], {0x10, 0x2}, {0x20, 0x5}}, 0x2c, 0x1) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 1.908558493s ago: executing program 6 (id=3210): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095", @ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(0xffffffffffffffff) r4 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xf6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc91542382b09e080}, 0x40db, 0x0, 0x4, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0xa, 0x10}, 0xc) 1.778878675s ago: executing program 1 (id=3214): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x5}, [], {0x10, 0x2}, {0x20, 0x5}}, 0x24, 0x1) 1.733505446s ago: executing program 5 (id=3217): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1695458af2ac700, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_sfeatures={0x33, 0x1, [{0x8, 0x8}]}}) 1.485978579s ago: executing program 2 (id=3218): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1695458af2ac700, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_sfeatures={0x33, 0x1, [{0x8, 0x8}]}}) 1.483721329s ago: executing program 5 (id=3219): write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x6, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) 1.38985958s ago: executing program 5 (id=3220): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.351877261s ago: executing program 5 (id=3221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@mpls_newroute={0x58, 0x18, 0x2, 0x70bd26, 0x25dfdbfc, {0x1c, 0x14, 0x14, 0x3, 0xfd, 0x3, 0x0, 0x6, 0x2800}, [@RTA_MULTIPATH={0xc, 0x9, {0xff, 0x0, 0xe, r2}}, @RTA_VIA={0x14, 0x12, {0xa, "3cd08ac470782e2857772285a8ef"}}, @RTA_VIA={0x14, 0x12, {0x1, "c5ebe928b36696e5ff6d1021ae33"}}, @RTA_DST={0x8, 0x1, {0xb, 0x0, 0x1}}]}, 0x58}}, 0xc010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0xfe8e, 0x12) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r8}, 0x18) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r9) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmsg$NFC_CMD_DEP_LINK_UP(r9, 0x0, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) 1.246457842s ago: executing program 2 (id=3222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0xf365, 0x0, 0x9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 633.392461ms ago: executing program 2 (id=3223): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2d0, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x2bc, 0x1, [@m_gact={0x170, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x8, 0xb, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c5, 0x20000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xaeb, 0x20000000}}]}, {0xe1, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x74, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x3e, 0x6, "bd3a5376a2440c64d6314cc7f446e251aa486d1931d16d2a624d085a1be90b436fdedf917b760ef37b4272893313d629bb02bcd42142bb0469eb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xa4, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x8}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x1, 0x7, 0x187e, 0x8}}]}, {0x26, 0x6, "644cfabbe56830b72d4965b0f9c601f7e7e0a9dc5e0e1b03f719e150808ef459921b"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 436.010544ms ago: executing program 2 (id=3224): r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x28, 0x0, &(0x7f00000064c0)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000001c0)={0x6, 'vxcan1\x00', {0x4}, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xb, &(0x7f0000000300)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x7d49d05c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000010000000000000300000008000000f30000007f00000004000000040020000c00000000040000"], 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 402.632224ms ago: executing program 0 (id=3225): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x9}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101042, 0x114) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)=0x200000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x64040082}, 0x40) getpeername$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x10) r5 = dup(r1) write$P9_RLERRORu(r5, &(0x7f0000000500)=ANY=[@ANYBLOB='S'], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x10, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80003, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x98, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x10001, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 370.390595ms ago: executing program 2 (id=3226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 353.449115ms ago: executing program 5 (id=3227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x200000000003}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x1}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x4}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x781}, {}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff}, {}, {}, {0x5, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0xff}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xffffffff}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x0, 0x20000000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x4}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {0x3}, {0x1}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1856543da8958ada}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 352.469805ms ago: executing program 6 (id=3228): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000e40)) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x3, 0x3, 0x4, 0xfa, 0x0, 0x80000000, 0x200, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x18028, 0x200, 0x7, 0x1, 0x9, 0x2, 0x9, 0x0, 0x80000001, 0x0, 0x7ff}, 0xffffffffffffffff, 0x395e, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x2, 0xc, 0x1, 0x0, 0x87, 0x20080, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3df8c954, 0xfffffffffffffffc}, 0x118031, 0x7, 0x3, 0x3, 0x5, 0x5, 0x5690, 0x0, 0xe, 0x0, 0x5}, r1, 0x7, r2, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(r0, 0x0, 0x0, 0xccdd) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000500040000000000090002"], 0x5c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000000fc01000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000001540)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 322.661036ms ago: executing program 1 (id=3229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 238.480857ms ago: executing program 2 (id=3230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) write$selinux_user(r4, &(0x7f00000001c0)={'system_u:object_r:tzdata_exec_t:s0', 0x20, 'system_u\x00'}, 0x2c) readv(r3, &(0x7f0000001180)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f00000000c0)=0x32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100008330604b5668360a2666e1dd5e2d4ce900e1b9e0828904d2ac98845f3197891e098897912dcfdd9411cb70f09130494e0c0381c7f9c281de2d3f401a6d14cd74b0d214a7611d04abeeabe42d61ca99b22ed811251476dd4728dbdcf96c026dfc651ebcbe7f535850ca5350079871596d7ca390b3ee7310fc29b69e7d377087130c26615e9bb5d3f0087004f19f1fbed282271edfbb44f7fbe591ff9d280945765392c2b96b5ac7712ef802d75ed0b530a7300fea4825699dedde041333e66aa115c1e043b1e045d625108c3fbed97e60c6506b47b62c5fbb4f3ca85362808e23045ef76b8c3ed359fa815ed045d8", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000040), &(0x7f0000000200)=r6}, 0x20) syz_clone(0x200e1400, &(0x7f0000000180)="3bc4dc0a7c16f150d4aec4812f2f6e00a7453831d407002cd13d6302f71c44169280792f45dc8b6fbc061da7c931c18fd4b422ffb5", 0x35, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300)="e683d749e576969507eabed5e4826e66f9016fc84841617e0463d21653e7be5fbe7a6ca838070cf2a7bb987a190549415896b2fd9ee111a77f8d237919e3f687e39a06197eae1747faad749e6aea015bbdd7ff6eca6d51373352b2f714d17951c2c669d3255129f77cfd3b7b6c2337751adc7ca130726a087d4930e730681e09c09f7d2c2813282a26") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00'], 0x4c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) recvmsg(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 229.919047ms ago: executing program 5 (id=3231): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x880, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x9, 0x8207}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x415}, 0x18) unshare(0x64000600) 147.794758ms ago: executing program 6 (id=3232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f20e"]) stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$unix(r5, &(0x7f0000006000)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0xf}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)="3d53aba3be3b2bbfebdb4b806169e0199ee5bec08fb4e7bb33df9b6cc19f3027809e14c05edd4e09df1ef189fe6242f6869163f92072da386ed62238a44b2f1f8bd206f6487b2363b741c1e82bc8506d3cd6ad9b382bdc7af8e8333285ba948c1fb16bdd0a061a8e996baac02725dc0596e8a22542ba0f6a5613cc4e00e74e79505d8dc21b4fd53d33d0846e886f20c8066f5e", 0x93}], 0x1, &(0x7f0000004040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRESOCT=r2, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r5], 0x60, 0x48000}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)="2722818eba16e58bc302a2dbb2253752a04370d3e33c996e182933d07698eb7dc299b5da9d7467316239607b5a3f7de88190387d952718652a18262d621cda6b4bfd06b5957c37380b06a444e483671f471a092a0eda6f59573d6b6fa25a7a1d5d225b187b6c7a36f41bcf66d9a3f7e4bce6f6338da1a4463492d326b44ddba9bab66aa6572b40f529119bcbd7280de5944c40990b255308f9357112e3eddb8733b9af3eb6c44862f64e7231c00485ffa1b5fd6aadabb1a13f7c943814b6971d392abe7ec2c2756be57ab9c4cca95efd254af00529d715acf8cc5d88a80d804545588776b0f5bfd96d514591f3284b9363b9843a157af761978dea", 0xfb}], 0x1, &(0x7f0000004340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES64=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYBLOB="00000000a9f7593454b4e07e3383bc8de1cc449446323d7c71ff6f10821ebb5bd6d2bb2b06c97eddb0c35417a27a7f7f2327769474f37ecef7e92a51335df0463b58e02bd5e3bdce4ce0773840ac5fcfb1b91c400a8b9b21e623de535bf7bb5abbab7bef052a29e09decb498c9b59e019f5207033822358cee266e55888661ec4b0a3519"], 0xc0, 0x48040}}, {{&(0x7f0000000840)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000940)="ab78e7cd5139f2b11abd0f00d61417eb30381f135098145d130275e2c4b73b3ab9f194bc1f33708e57f552070329bd88c152a35ad20ca691f17935dce3a1e46fa404ca5bad74a90a9877559e60279b2b8b1cddee6c2ca619382242212aee52f2497ed8659cb3", 0x66}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f00000009c0)="77bc45804ad0d7d3d99ea206ab70f51eb0f372008cc5bf71edc480a9d2c18a8c1b34e67659c0203941a17bc429dbfed49296ec8eeafd96ce25641a93a86c71351835ff85167baa3d5d542201b3ec1964381a3abd44ec3e8558d53c858f2d679ff2ae0602662170ba2eda0b67b32c2d61a3ab1a9523be2a7324df25daeadaea42ea5e1254acbbc30d37adcd3d573b8c3f752bdaa7d706a02ea42ed3c3113c3af72ccd4aec81449b1fb1a84ae110273b488746f750ffcec083e4", 0xb9}, {&(0x7f0000000a80)="de73df948e62dcf22afd4e7ca9af108092d389e46c43968e24aa417684d95834b9febd5a0a6050ae7d348c534593e6ad7f17ab42a88d62953dfcc06f567e3d367386a967199cf73af96b1fa97ca4403b0f02f98f10832e1a46e5d121f7966f5589c3a66d182d13b2806e430b18812717f748bf36fb214516149f49e112192344dde365e6fb63ad134b035088703c8dd3e0ac5cebaffde6546e9a06a179952bf63d9212494bbefbb587f867e2e05db7cf89c826149c5de898", 0xb8}, {0x0}], 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES64=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000500000000000100", @ANYRES32=r6, @ANYRES32=r5, @ANYRES8, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x40010}}, {{&(0x7f0000000d40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f80)}], 0x1, &(0x7f0000001100)=[@cred={{0x1c}}], 0x20, 0x4000000}}, {{0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0, 0x0, 0x6008010}}, {{&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001640), 0x0, 0x0, 0x0, 0x4004000}}, {{&(0x7f0000004840)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000003f00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, r0, r5, r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r4]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120, 0x8840}}, {{&(0x7f0000005dc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000005f80), 0x0, &(0x7f0000005fc0)=[@cred={{0x1c}}], 0x20, 0x40}}], 0x8, 0x200000a0) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x5, 0x102e, [0x0, 0x200000000d80, 0x20000000192c, 0x20000000195c], 0x0, &(0x7f0000000180), &(0x7f0000000d80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x18, 0x4, 'pim6reg\x00', 'ip6gre0\x00', 'nicvf0\x00', 'veth0_vlan\x00', @multicast, [0x0, 0x0, 0xff, 0xff, 0x80], @random="cc9c74cd66db", [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x896, 0x9f6, 0xa3e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9cf1, 0x2}, {0x29, 0x3}, {0x8000, 0x2}, {0x101}, {0x0, 0x2}, {0x100, 0x2}, {0x8cb, 0x2}, {0x6, 0x2}, {0x0, 0x1}, {0x8, 0x3}, {0xb96, 0xd9d38f42c9a40c6d}], [{0x7f, 0x3}, {0x2, 0x4}, {0x80000001, 0x9}, {0x0, 0x3}, {0x8000, 0x8000}, {0x7fff, 0xff}, {0x9, 0x5}, {0xfff, 0x4}, {0x80fd}, {0x9, 0x5}, {0x9d, 0x2e026b9e}], 0x8, 0x5}, {[{0x4, 0x3}, {0xd, 0x2}, {0x6, 0x3}, {0x7, 0x3}, {0x4, 0x2}, {0x3ff, 0x3}, {0x9fc, 0x1}, {0x4, 0x2}, {0x6}, {0x79, 0x1}, {0x3, 0x2}], [{0x0, 0x9}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x10001}, {0x100, 0x7}, {0x51, 0x10000}, {0x5, 0x2}, {0xfc, 0xa6}, {0x3, 0x2}, {0x1, 0xffff322f}, {0x80, 0xd}], 0x5, 0x5}, {[{0x0, 0x2}, {0x7}, {0xfffffffd, 0x3}, {0x5, 0x3}, {0x9}, {0x6, 0x3}, {0x2, 0x2}, {0x1}, {0x5}, {0x0, 0x2}, {0x1000}], [{0x3, 0xd757}, {0x80000000, 0xfffffffe}, {0x3, 0x29}, {0x3, 0x10001}, {0x5, 0x2}, {0x6, 0x3}, {0x1, 0x2}, {0xe, 0xb5d}, {0x80, 0x9c6}, {0x7ff, 0x8}, {0x0, 0x7}], 0x6, 0x7}, {[{0x5, 0x1}, {0x8, 0x2}, {0x19, 0x3}, {0x80000000, 0x2}, {0x15d9, 0x3}, {0x8, 0x1}, {0x89, 0x1}, {0x4, 0x3}, {0x3}, {0x5, 0x3}, {0xfffffff9}], [{0x1, 0x6}, {0x4, 0x5}, {0x31, 0x18f}, {0x0, 0x9}, {0x4, 0xfffffff9}, {0x5, 0x7}, {0x14000, 0xffff}, {0xad, 0x5}, {0x5}, {0x0, 0x8}, {0xff, 0x7}], 0x7}, {[{0x4, 0x2}, {0x6}, {0x8, 0x2}, {0xf7a8, 0x2}, {0xa8a2dc1a, 0x1}, {0xfffffffd}, {0x1}, {0x0, 0x2}, {0x9cb}, {0x2, 0x2}, {0x65, 0x3}], [{0x2, 0x2}, {0x4, 0x7}, {0x7f, 0x7}, {0x3ff, 0x56}, {0x7, 0xfffffff7}, {0x7f45, 0x7}, {0x80000000, 0xe1ec}, {0x7}, {0x5, 0xa140}, {0xfa99, 0x3}, {0xc6e, 0x6}], 0x3, 0x6}, {[{0xfffffff9, 0x2}, {0x10000, 0x2}, {0xef8, 0x3}, {0x0, 0x2}, {0x7, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x2, 0x2}, {0xfffffffc, 0x2}, {0xffff}, {0x7, 0x3}], [{0x7fff, 0x7}, {0x36, 0x6}, {0x1ff, 0x2}, {0x40, 0x5}, {0x7fffffff, 0x7}, {0xfff, 0x3}, {0x80000001, 0x80}, {0x3, 0x8}, {0x9, 0x8}, {0xf59, 0x100}, {0x6, 0x82}], 0x5, 0x8}, {[{0xd}, {0xdbf00000}, {0xaa8675d7}, {0x5, 0x2}, {0xfffffff8}, {0x8000, 0x2}, {0x6, 0x3}, {0x1ff, 0x3}, {0x10001, 0x3}, {0x9, 0x3}, {0xc, 0x1}], [{0x1, 0x80}, {0x8a, 0x10001}, {0x4, 0x9}, {0x8, 0xfe8}, {0x8000, 0x73}, {0x10001, 0x101}, {0x0, 0x1}, {0x2}, {0x10, 0x1}, {0x6c, 0xaa9}, {0xab5a, 0xeb}], 0x6, 0x2}, {[{0x9, 0x3}, {0x12b, 0x2}, {0x6}, {0x2e8e, 0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x100, 0x1}, {0x9, 0x2}, {0x5, 0x2}, {0x53, 0x2}, {0x7, 0x1}], [{0x9, 0x100}, {0x6, 0x8}, {0x1000, 0xa4}, {0x8, 0x7}, {0x10000, 0x5}, {0x100, 0x9}, {0x1000, 0x3}, {0x1d5, 0x949}, {0x0, 0x3}, {0x80000000, 0x8}, {0x9, 0x5}], 0x2, 0x5}, {[{0x1}, {0xfffffffc}, {0x10000, 0x1}, {0xcb92, 0x1}, {0x80000}, {0x8, 0x2}, {0x5, 0x1}, {0x9, 0x3}, {0xcc75}, {0x51, 0x3}, {0x4, 0x3}], [{0x7, 0x7}, {0xa, 0xbfa9}, {0x9, 0x6}, {0x3, 0x1}, {0xc7b, 0x2}, {0x1, 0x80000000}, {0x7fff, 0x39}, {0x1}, {0x1236, 0x7}, {0x6, 0x4}, {0x0, 0xffffffff}], 0xb, 0x5}, {[{0x8}, {0x81}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0x1}, {0x8, 0x2}, {0x4, 0x3}, {0xfffffff7, 0x3}, {0xffffffff, 0x2}, {0x4, 0x3}, {0x1ff, 0x3}], [{0x800, 0x3}, {0x91fc, 0x5}, {0xdf, 0xfffffff9}, {0x9, 0x9}, {0x8, 0x18}, {0x7, 0x650}, {0x3ff, 0x6e8b}, {0xfffffff8, 0x2}, {0x0, 0x3ff}, {0x3, 0x80}, {0x724, 0x1}], 0x0, 0x7}, {[{0x7f}, {0xe63e, 0x2}, {0x100, 0x3}, {0x40, 0x2}, {0xfffffff7, 0x2}, {0x3, 0x1}, {0x200, 0x3}, {0xccf6}, {0x7, 0x3}, {0x6, 0x1}, {0x5, 0x1}], [{0x4, 0xd}, {0x806, 0x24e8}, {0x6, 0xee1f}, {0x3, 0x80000001}, {0x2, 0x100}, {0x6e833af1, 0x2}, {0x6, 0x91}, {0x5, 0xe22f}, {0x8001, 0x95}, {0x8, 0x5}, {0x3, 0x80000000}], 0x4, 0x9}], 0xa}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, r2, 0x0, r7, 0x2, 0x6}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6, 'system_u:system_r:kernel_t:s0\x00'}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x0, 0x1, {0x79641e55}}}}}, {0x11, 0xc, 0x6, 'ip6erspan0\x00', 'vlan1\x00', 'ip6tnl0\x00', 'batadv0\x00', @multicast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff], 0xbe, 0x106, 0x13e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x10000}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x7, 0x71, {0xd}}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0x0, 0x2, [{0x5, 0x2, 0x6003, 'vcan0\x00', 'ip6gre0\x00', 'vlan1\x00', 'vlan0\x00', @local, [0x0, 0x0, 0x0, 0x0, 0xff], @multicast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x10e, 0x13e, 0x16e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@mcast2, [0xffffff00, 0xff000000, 0xff000000, 0xffffff00], 0x4e22, 0x3c, 0x6, 0x4e21, 0x20, 0x8}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00'}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x8001}}}}, {0x5, 0x3b, 0x8808, 'netpci0\x00', 'vxcan1\x00', 'dummy0\x00', 'ip6gre0\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xbe, 0x146, 0x17e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x3}}}], [@common=@log={'log\x00', 0x28, {{0x3, "eb4db9ce34a2bc671ccc5970cec0c7ab6a2d6b5fee6b0428383a12fe52b9"}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x1, [{0x3, 0xf, 0x3, 'veth0_vlan\x00', 'xfrm0\x00', 'vlan0\x00', 'wg1\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xce, 0x106, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2c97}}}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@dnat={'dnat\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}}]}]}, 0x10a6) socketpair(0x3, 0x2, 0x5, &(0x7f00000007c0)) getpgid(0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000039c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) 20.38937ms ago: executing program 0 (id=3233): write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0x6, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) 19.26656ms ago: executing program 1 (id=3234): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) io_setup(0x3ff, &(0x7f0000000500)) 0s ago: executing program 6 (id=3235): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2d0, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x2bc, 0x1, [@m_gact={0x170, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x8, 0xb, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c5, 0x20000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xaeb, 0x20000000}}]}, {0xe1, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x74, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x3e, 0x6, "bd3a5376a2440c64d6314cc7f446e251aa486d1931d16d2a624d085a1be90b436fdedf917b760ef37b4272893313d629bb02bcd42142bb0469eb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xa4, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x8}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x1, 0x7, 0x187e, 0x8}}]}, {0x26, 0x6, "644cfabbe56830b72d4965b0f9c601f7e7e0a9dc5e0e1b03f719e150808ef459921b"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {0x0}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): date_block_bitmap:441: comm syz.6.2536: bg 0: block 361: padding at end of block bitmap is not set [ 325.932845][T11779] netlink: 'syz.5.2539': attribute type 1 has an invalid length. [ 325.956250][T11779] 8021q: adding VLAN 0 to HW filter on device bond4 [ 325.956264][T11786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 325.972906][T11769] EXT4-fs (loop6): Remounting filesystem read-only [ 325.980083][T11769] EXT4-fs (loop6): 1 truncate cleaned up [ 325.986350][T11769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 326.121852][T11801] loop1: detected capacity change from 0 to 512 [ 326.138568][T11799] SELinux: syz.0.2545 (11799) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 326.138894][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 326.218879][T11812] netlink: 'syz.2.2555': attribute type 1 has an invalid length. [ 326.269494][T11812] 8021q: adding VLAN 0 to HW filter on device bond16 [ 326.299987][T11817] loop1: detected capacity change from 0 to 512 [ 326.317908][T11817] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 326.429348][T11814] xt_CT: You must specify a L4 protocol and not use inversions on it [ 326.461507][T11817] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 326.473668][T11817] EXT4-fs (loop1): orphan cleanup on readonly fs [ 326.485550][T11817] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2556: bg 0: block 361: padding at end of block bitmap is not set [ 326.511962][T11817] EXT4-fs (loop1): Remounting filesystem read-only [ 326.521040][T11817] EXT4-fs (loop1): 1 truncate cleaned up [ 326.530435][T11817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 326.569802][T11833] loop6: detected capacity change from 0 to 512 [ 326.576770][T11833] EXT4-fs: Ignoring removed nobh option [ 326.715249][T11833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.737679][T11833] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.2551: iget: bad i_size value: 15393162788874 [ 326.835465][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 327.021023][T11850] netlink: 'syz.5.2567': attribute type 1 has an invalid length. [ 327.395628][T11850] 8021q: adding VLAN 0 to HW filter on device bond5 [ 327.425305][T11856] vlan3: entered promiscuous mode [ 327.453651][ T3392] usb 5-1: enqueue for inactive port 0 [ 327.468722][ T3392] usb 5-1: enqueue for inactive port 0 [ 327.553610][ T3392] vhci_hcd: vhci_device speed not set [ 327.589576][T11866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 327.646100][T11870] __nla_validate_parse: 8 callbacks suppressed [ 327.646121][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2574'. [ 327.719124][ T29] audit: type=1326 audit(1748699318.032:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920714e969 code=0x7ffc0000 [ 327.743001][ T29] audit: type=1326 audit(1748699318.032:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920714e969 code=0x7ffc0000 [ 327.842755][T11885] netlink: 'syz.1.2579': attribute type 1 has an invalid length. [ 327.874532][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2580'. [ 327.907682][T11885] 8021q: adding VLAN 0 to HW filter on device bond20 [ 327.993035][ T29] audit: type=1326 audit(1748699318.102:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f920714e969 code=0x7ffc0000 [ 328.016686][ T29] audit: type=1326 audit(1748699318.102:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920714e969 code=0x7ffc0000 [ 328.040487][ T29] audit: type=1326 audit(1748699318.102:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11871 comm="syz.0.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920714e969 code=0x7ffc0000 [ 328.127518][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2585'. [ 328.169333][T11898] vlan3: entered promiscuous mode [ 328.212842][T11902] loop1: detected capacity change from 0 to 512 [ 328.235194][T11902] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 328.264857][T11902] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 328.285138][T11902] EXT4-fs (loop1): orphan cleanup on readonly fs [ 328.311370][T11902] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2587: bg 0: block 361: padding at end of block bitmap is not set [ 328.328245][T11906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.345188][T11902] EXT4-fs (loop1): Remounting filesystem read-only [ 328.355351][T11902] EXT4-fs (loop1): 1 truncate cleaned up [ 328.394653][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2591'. [ 328.414269][T11902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 328.454108][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.487328][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2593'. [ 328.497908][T11915] SELinux: syz.2.2592 (11915) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 328.507578][T11902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2587'. [ 328.573943][T11925] netlink: 'syz.0.2595': attribute type 1 has an invalid length. [ 328.617935][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 328.715606][T11925] 8021q: adding VLAN 0 to HW filter on device bond16 [ 328.966245][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2604'. [ 329.089068][T11957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.097575][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2606'. [ 329.364818][T11974] SELinux: syz.0.2610 (11974) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 329.856057][T11985] netlink: 'syz.0.2615': attribute type 1 has an invalid length. [ 329.879539][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2616'. [ 329.914690][T11985] 8021q: adding VLAN 0 to HW filter on device bond17 [ 330.004466][T11996] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.048798][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2620'. [ 330.111526][T12008] loop5: detected capacity change from 0 to 512 [ 330.224780][T12005] SELinux: syz.6.2625 (12005) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 330.329638][T12017] loop1: detected capacity change from 0 to 512 [ 330.336485][T12017] EXT4-fs: Ignoring removed nobh option [ 330.948395][ T29] audit: type=1326 audit(1748699321.262:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.0.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920714e969 code=0x7ffc0000 [ 331.166035][ T29] audit: type=1326 audit(1748699321.292:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.0.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920714e969 code=0x7ffc0000 [ 331.189761][ T29] audit: type=1326 audit(1748699321.292:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.0.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f920714e969 code=0x7ffc0000 [ 331.213338][ T29] audit: type=1326 audit(1748699321.292:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.0.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920714e969 code=0x7ffc0000 [ 331.237185][ T29] audit: type=1326 audit(1748699321.292:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12024 comm="syz.0.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920714e969 code=0x7ffc0000 [ 331.419050][T12017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.433323][T12017] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.2623: iget: bad i_size value: 15393162788874 [ 331.664531][T12033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.929950][T12043] netlink: 'syz.5.2636': attribute type 1 has an invalid length. [ 332.005017][T12043] 8021q: adding VLAN 0 to HW filter on device bond6 [ 332.344251][T12053] loop6: detected capacity change from 0 to 1024 [ 332.413949][T12053] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 332.468832][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.514631][T12059] xt_TCPMSS: Only works on TCP SYN packets [ 332.556575][T12053] loop6: detected capacity change from 0 to 512 [ 332.906462][T12053] EXT4-fs (loop6): 1 orphan inode deleted [ 332.997560][T12053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.211381][T12053] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.594300][ T5508] __quota_error: 3 callbacks suppressed [ 333.594320][ T5508] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 333.609687][ T5508] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1 [ 333.979030][T12071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.238338][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.273481][T12075] netlink: 'syz.1.2648': attribute type 1 has an invalid length. [ 334.299645][T12077] __nla_validate_parse: 2 callbacks suppressed [ 334.299666][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2649'. [ 334.383893][T12075] 8021q: adding VLAN 0 to HW filter on device bond21 [ 334.451497][T12087] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2646'. [ 334.508968][T12094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.513156][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2652'. [ 334.630497][T12092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.641305][T12101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.780457][T12107] loop1: detected capacity change from 0 to 1024 [ 334.793641][T12109] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 334.800277][T12109] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 334.807830][T12109] vhci_hcd vhci_hcd.0: Device attached [ 334.994222][T12107] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 335.005217][T12109] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(13) [ 335.011947][T12109] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.019562][T12109] vhci_hcd vhci_hcd.0: Device attached [ 335.073094][T12107] loop1: detected capacity change from 0 to 512 [ 335.112165][T12115] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(16) [ 335.118811][T12115] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 335.126302][T12115] vhci_hcd vhci_hcd.0: Device attached [ 335.147913][T12107] EXT4-fs (loop1): 1 orphan inode deleted [ 335.163784][ T5508] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 335.173750][ T5508] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 1 [ 335.193386][T12107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.263652][T12107] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.291011][T12121] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(20) [ 335.297683][T12121] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.305451][T12121] vhci_hcd vhci_hcd.0: Device attached [ 335.436916][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.512189][T12124] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(25) [ 335.518837][T12124] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 335.526569][T12124] vhci_hcd vhci_hcd.0: Device attached [ 335.559514][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2661'. [ 335.578879][T12115] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 335.585735][T12115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 335.593569][T12115] vhci_hcd vhci_hcd.0: Device attached [ 335.686969][T12126] vhci_hcd: connection closed [ 335.687189][T12110] vhci_hcd: connection closed [ 335.691957][T12112] vhci_hcd: connection closed [ 335.697939][ T5508] vhci_hcd: stop threads [ 335.707151][ T5508] vhci_hcd: release socket [ 335.711652][ T5508] vhci_hcd: disconnect device [ 335.716790][T12117] vhci_hcd: connection closed [ 335.717025][T12125] vhci_hcd: connection closed [ 335.723722][T12122] vhci_hcd: connection closed [ 335.727379][ T3393] usb 13-1: new low-speed USB device number 3 using vhci_hcd [ 335.758105][ T5508] vhci_hcd: stop threads [ 335.762408][ T5508] vhci_hcd: release socket [ 335.766896][ T5508] vhci_hcd: disconnect device [ 335.792111][ T5508] vhci_hcd: stop threads [ 335.796427][ T5508] vhci_hcd: release socket [ 335.800872][ T5508] vhci_hcd: disconnect device [ 335.818581][T12142] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2666'. [ 335.834026][T12136] netlink: 'syz.1.2664': attribute type 1 has an invalid length. [ 335.852742][ T5508] vhci_hcd: stop threads [ 335.857146][ T5508] vhci_hcd: release socket [ 335.860997][ T3393] usb 13-1: enqueue for inactive port 0 [ 335.867226][ T5508] vhci_hcd: disconnect device [ 335.870690][ T3393] usb 13-1: enqueue for inactive port 0 [ 335.883655][ T3393] usb 13-1: enqueue for inactive port 0 [ 335.894982][T12136] 8021q: adding VLAN 0 to HW filter on device bond22 [ 335.953876][ T3393] vhci_hcd: vhci_device speed not set [ 336.053971][ T5508] vhci_hcd: stop threads [ 336.058288][ T5508] vhci_hcd: release socket [ 336.062775][ T5508] vhci_hcd: disconnect device [ 336.104720][T12149] loop5: detected capacity change from 0 to 512 [ 336.151484][T12149] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 336.161346][ T5508] vhci_hcd: stop threads [ 336.165717][ T5508] vhci_hcd: release socket [ 336.170153][ T5508] vhci_hcd: disconnect device [ 336.253958][T12149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 336.265803][T12149] EXT4-fs (loop5): orphan cleanup on readonly fs [ 336.282877][T12149] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2667: bg 0: block 361: padding at end of block bitmap is not set [ 336.318435][T12149] EXT4-fs (loop5): Remounting filesystem read-only [ 336.327597][T12152] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 336.334319][T12152] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 336.341906][T12152] vhci_hcd vhci_hcd.0: Device attached [ 336.349936][T12149] EXT4-fs (loop5): 1 truncate cleaned up [ 336.356341][T12149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 336.375206][T12152] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(13) [ 336.381850][T12152] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 336.389533][T12152] vhci_hcd vhci_hcd.0: Device attached [ 336.419187][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2667'. [ 336.467073][T12152] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 336.473725][T12152] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 336.481269][T12152] vhci_hcd vhci_hcd.0: Device attached [ 336.538975][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 336.540671][T12152] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 336.554599][T12152] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 336.562461][T12152] vhci_hcd vhci_hcd.0: Device attached [ 336.575112][T12171] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 336.581756][T12171] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 336.589703][T12171] vhci_hcd vhci_hcd.0: Device attached [ 336.597673][ T3392] usb 3-1: new low-speed USB device number 9 using vhci_hcd [ 336.614549][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2672'. [ 336.631466][T12168] loop6: detected capacity change from 0 to 1024 [ 336.641232][T12168] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 336.650150][T12152] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(20) [ 336.656829][T12152] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 336.664623][T12152] vhci_hcd vhci_hcd.0: Device attached [ 336.682501][T12168] loop6: detected capacity change from 0 to 512 [ 336.696292][T12166] vhci_hcd: connection closed [ 336.696329][T12172] vhci_hcd: connection closed [ 336.696538][ T12] vhci_hcd: stop threads [ 336.701108][T12180] vhci_hcd: connection closed [ 336.705768][ T12] vhci_hcd: release socket [ 336.719430][ T12] vhci_hcd: disconnect device [ 336.724879][T12153] vhci_hcd: connection reset by peer [ 336.725372][T12158] vhci_hcd: connection closed [ 336.730279][T12164] vhci_hcd: connection closed [ 336.748240][ T12] vhci_hcd: stop threads [ 336.757263][ T12] vhci_hcd: release socket [ 336.761721][ T12] vhci_hcd: disconnect device [ 336.768692][ T12] vhci_hcd: stop threads [ 336.772956][ T12] vhci_hcd: release socket [ 336.777487][ T12] vhci_hcd: disconnect device [ 336.795622][ T12] vhci_hcd: stop threads [ 336.799925][ T12] vhci_hcd: release socket [ 336.804471][ T12] vhci_hcd: disconnect device [ 336.840283][ T12] vhci_hcd: stop threads [ 336.844807][ T12] vhci_hcd: release socket [ 336.849515][ T12] vhci_hcd: disconnect device [ 336.860176][ T12] vhci_hcd: stop threads [ 336.864595][ T12] vhci_hcd: release socket [ 336.869141][ T12] vhci_hcd: disconnect device [ 336.875856][T12168] EXT4-fs (loop6): 1 orphan inode deleted [ 336.891002][T12168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.908456][ T2679] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 336.918284][ T2679] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 336.942325][T12168] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.966538][T12192] loop2: detected capacity change from 0 to 512 [ 337.025876][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.268879][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2685'. [ 337.353705][T12215] xt_TCPMSS: Only works on TCP SYN packets [ 337.679486][T12234] loop5: detected capacity change from 0 to 1024 [ 337.687026][T12234] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 337.709352][T12234] loop5: detected capacity change from 0 to 512 [ 337.722974][T12223] chnl_net:caif_netlink_parms(): no params data found [ 337.733073][T12234] EXT4-fs (loop5): 1 orphan inode deleted [ 337.740677][T12234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.753423][ T2679] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 337.753705][T12234] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.763489][ T2679] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 337.801917][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.818345][T12223] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.825499][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.833255][T12223] bridge_slave_0: entered allmulticast mode [ 337.839974][T12223] bridge_slave_0: entered promiscuous mode [ 337.847544][T12223] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.854690][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.862278][T12223] bridge_slave_1: entered allmulticast mode [ 337.869166][T12223] bridge_slave_1: entered promiscuous mode [ 337.895322][T12223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.908560][T12223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.947055][T12223] team0: Port device team_slave_0 added [ 337.961730][T12223] team0: Port device team_slave_1 added [ 337.977276][T12250] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.999218][T12223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.006459][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.032758][T12223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.044986][T12223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.051975][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.078181][T12223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.091067][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2696'. [ 338.127365][T12223] hsr_slave_0: entered promiscuous mode [ 338.132627][T12257] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 338.133956][T12223] hsr_slave_1: entered promiscuous mode [ 338.139607][T12257] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 338.145650][T12223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.152689][T12257] vhci_hcd vhci_hcd.0: Device attached [ 338.160514][T12223] Cannot create hsr debugfs directory [ 338.222482][T12260] netlink: 'syz.2.2695': attribute type 21 has an invalid length. [ 338.231178][T12260] netlink: 'syz.2.2695': attribute type 1 has an invalid length. [ 338.238927][T12260] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2695'. [ 338.288705][T12257] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(13) [ 338.295389][T12257] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 338.303120][T12257] vhci_hcd vhci_hcd.0: Device attached [ 338.403986][ T10] usb 11-1: new low-speed USB device number 5 using vhci_hcd [ 338.565624][T12267] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16) [ 338.572283][T12267] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 338.579843][T12267] vhci_hcd vhci_hcd.0: Device attached [ 338.659437][T12277] loop1: detected capacity change from 0 to 512 [ 338.683847][T12257] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(19) [ 338.690589][T12257] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 338.698256][T12257] vhci_hcd vhci_hcd.0: Device attached [ 338.703983][T12267] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(18) [ 338.710720][T12267] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 338.715746][T12277] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 338.718352][T12267] vhci_hcd vhci_hcd.0: Device attached [ 338.730868][T12277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 338.744718][T12277] EXT4-fs (loop1): orphan cleanup on readonly fs [ 338.751571][T12277] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2700: bg 0: block 361: padding at end of block bitmap is not set [ 338.771593][T12277] EXT4-fs (loop1): Remounting filesystem read-only [ 338.779810][T12257] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(21) [ 338.786560][T12257] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 338.794291][T12257] vhci_hcd vhci_hcd.0: Device attached [ 338.819409][T12284] vhci_hcd: connection closed [ 338.819551][T12278] vhci_hcd: connection closed [ 338.824672][T12261] vhci_hcd: connection closed [ 338.834975][T12268] vhci_hcd: connection closed [ 338.839758][T12258] vhci_hcd: connection reset by peer [ 338.849914][T12270] vhci_hcd: connection closed [ 338.851828][T12223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.856424][ T12] vhci_hcd: stop threads [ 338.866386][T12277] EXT4-fs (loop1): 1 truncate cleaned up [ 338.866846][ T12] vhci_hcd: release socket [ 338.871546][T12277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 338.876683][ T12] vhci_hcd: disconnect device [ 338.881348][T12286] loop6: detected capacity change from 0 to 1024 [ 338.923987][T12277] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.2700: dx entry: limit 0 != root limit 125 [ 338.935832][T12277] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2700: Corrupt directory, running e2fsck is recommended [ 338.962115][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 338.971895][ T12] vhci_hcd: stop threads [ 338.976316][ T12] vhci_hcd: release socket [ 338.980806][ T12] vhci_hcd: disconnect device [ 338.990133][T12286] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 339.003190][T12223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.022244][T12286] loop6: detected capacity change from 0 to 512 [ 339.028897][ T12] vhci_hcd: stop threads [ 339.033239][ T12] vhci_hcd: release socket [ 339.037709][ T12] vhci_hcd: disconnect device [ 339.043098][ T12] vhci_hcd: stop threads [ 339.047394][ T12] vhci_hcd: release socket [ 339.051962][ T12] vhci_hcd: disconnect device [ 339.057109][ T12] vhci_hcd: stop threads [ 339.061371][ T12] vhci_hcd: release socket [ 339.061960][T12286] EXT4-fs (loop6): 1 orphan inode deleted [ 339.065898][ T12] vhci_hcd: disconnect device [ 339.069623][T12292] SELinux: syz.1.2705 (12292) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 339.073677][ T5938] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 339.077295][T12286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.090164][ T5938] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 339.101786][ T12] vhci_hcd: stop threads [ 339.128165][ T12] vhci_hcd: release socket [ 339.132715][ T12] vhci_hcd: disconnect device [ 339.164001][T12286] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.272981][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.290080][T12223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.368851][T12223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.471901][T12302] __nla_validate_parse: 2 callbacks suppressed [ 339.471916][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2708'. [ 339.496789][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2706'. [ 339.544752][T12301] vlan2: entered promiscuous mode [ 339.603367][T12302] vlan2: entered promiscuous mode [ 339.608625][T12302] ip6gretap0: entered promiscuous mode [ 339.645767][T12223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 339.662852][T12223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 339.698183][T12223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 339.817149][T12311] netlink: 'syz.5.2712': attribute type 1 has an invalid length. [ 339.836610][T12223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 339.868506][T12313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2711'. [ 339.898310][T12311] 8021q: adding VLAN 0 to HW filter on device bond7 [ 339.907713][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2714'. [ 339.941143][T12324] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 339.947800][T12324] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 339.955423][T12324] vhci_hcd vhci_hcd.0: Device attached [ 339.961757][T12324] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(13) [ 339.962382][T12223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.968443][T12324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 339.968499][T12324] vhci_hcd vhci_hcd.0: Device attached [ 339.981090][T12223] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.005640][T12322] loop1: detected capacity change from 0 to 1024 [ 340.018768][T12322] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 340.036754][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.043883][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.053575][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.060663][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.155174][T12223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.165660][T12223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.197742][T12324] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(15) [ 340.204469][T12324] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 340.212169][T12324] vhci_hcd vhci_hcd.0: Device attached [ 341.254672][T12342] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 341.261312][T12342] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 341.268985][T12342] vhci_hcd vhci_hcd.0: Device attached [ 341.290846][T12324] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18) [ 341.297476][T12324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 341.305180][T12324] vhci_hcd vhci_hcd.0: Device attached [ 341.329455][T12322] loop1: detected capacity change from 0 to 512 [ 341.342374][T12342] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(23) [ 341.349023][T12342] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 341.356796][T12342] vhci_hcd vhci_hcd.0: Device attached [ 341.434759][T12322] EXT4-fs (loop1): 1 orphan inode deleted [ 341.441122][T12343] vhci_hcd: connection closed [ 341.441460][ T51] vhci_hcd: stop threads [ 341.450499][ T51] vhci_hcd: release socket [ 341.455099][ T51] vhci_hcd: disconnect device [ 341.460170][T12325] vhci_hcd: connection closed [ 341.460327][T12327] vhci_hcd: connection closed [ 341.466842][T12341] vhci_hcd: connection closed [ 341.471706][ T4655] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 341.486496][ T4655] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 341.500676][T12347] vhci_hcd: connection closed [ 341.511153][ T51] vhci_hcd: stop threads [ 341.520447][ T51] vhci_hcd: release socket [ 341.524934][ T51] vhci_hcd: disconnect device [ 341.532920][T12322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.547704][ T51] vhci_hcd: stop threads [ 341.551961][ T51] vhci_hcd: release socket [ 341.556594][ T51] vhci_hcd: disconnect device [ 341.581792][ T51] vhci_hcd: stop threads [ 341.586138][ T51] vhci_hcd: release socket [ 341.590638][ T51] vhci_hcd: disconnect device [ 341.601671][T12322] ext4 filesystem being mounted at /556/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.613127][ T51] vhci_hcd: stop threads [ 341.617674][ T51] vhci_hcd: release socket [ 341.622099][ T51] vhci_hcd: disconnect device [ 341.670190][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.683949][ T3392] usb 3-1: enqueue for inactive port 0 [ 341.689496][ T3392] usb 3-1: enqueue for inactive port 0 [ 341.699685][T12335] vhci_hcd: connection closed [ 341.702345][ T51] vhci_hcd: stop threads [ 341.711502][ T51] vhci_hcd: release socket [ 341.715980][ T51] vhci_hcd: disconnect device [ 341.723340][T12337] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 341.771741][ T3392] vhci_hcd: vhci_device speed not set [ 341.931065][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2719'. [ 342.161116][T12223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.344916][T12378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2725'. [ 342.494548][T12386] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 342.521273][T12386] 8021q: adding VLAN 0 to HW filter on device bond17 [ 342.535278][T12390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2727'. [ 342.610766][ T29] audit: type=1326 audit(1748699332.922:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.1.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c25c1e969 code=0x7ffc0000 [ 342.674317][T12223] veth0_vlan: entered promiscuous mode [ 342.686000][T12223] veth1_vlan: entered promiscuous mode [ 342.701720][T12223] veth0_macvtap: entered promiscuous mode [ 342.839058][T12403] 8021q: adding VLAN 0 to HW filter on device bond8 [ 342.891718][T12223] veth1_macvtap: entered promiscuous mode [ 343.006323][T12223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.089797][ T29] audit: type=1326 audit(1748699332.982:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.1.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8c25c1e969 code=0x7ffc0000 [ 343.097709][T12223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.113603][ T29] audit: type=1326 audit(1748699332.982:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.1.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c25c1e969 code=0x7ffc0000 [ 343.113670][ T29] audit: type=1326 audit(1748699333.002:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12399 comm="syz.1.2732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c25c1e969 code=0x7ffc0000 [ 343.172249][T12223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.181033][T12223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.189856][T12223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.198623][T12223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.440276][T12423] loop1: detected capacity change from 0 to 512 [ 343.447115][T12423] EXT4-fs: Ignoring removed nobh option [ 343.498706][T12422] SELinux: syz.6.2739 (12422) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 343.655654][T12423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.670731][T12423] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.2737: iget: bad i_size value: 15393162788874 [ 343.692290][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2740'. [ 344.077635][ T10] usb 11-1: enqueue for inactive port 0 [ 344.083299][ T10] usb 11-1: enqueue for inactive port 0 [ 344.117289][T12440] netlink: 'syz.2.2744': attribute type 1 has an invalid length. [ 344.163679][ T10] vhci_hcd: vhci_device speed not set [ 344.199316][T12440] 8021q: adding VLAN 0 to HW filter on device bond18 [ 345.356572][T12457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.558064][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.582948][T12467] loop6: detected capacity change from 0 to 512 [ 345.809479][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2757'. [ 345.855047][T12480] loop5: detected capacity change from 0 to 512 [ 345.861925][T12480] EXT4-fs: Ignoring removed nobh option [ 345.902828][T12480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.918238][T12480] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.2755: iget: bad i_size value: 15393162788874 [ 345.969566][T12478] loop2: detected capacity change from 0 to 512 [ 345.977197][T12478] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 345.990873][T12478] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 346.000152][T12478] EXT4-fs (loop2): orphan cleanup on readonly fs [ 346.018226][T12478] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2758: bg 0: block 361: padding at end of block bitmap is not set [ 346.051783][T12487] netlink: 'syz.0.2759': attribute type 1 has an invalid length. [ 346.073379][T12478] EXT4-fs (loop2): Remounting filesystem read-only [ 346.148973][T12478] EXT4-fs (loop2): 1 truncate cleaned up [ 346.346782][T12478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 346.756530][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2758'. [ 347.426305][T12495] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.516349][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.521519][T12504] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 347.537968][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 347.556497][T12507] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2768'. [ 347.565572][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'. [ 347.608781][T12509] loop1: detected capacity change from 0 to 512 [ 347.634456][T12509] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 347.675988][T12509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 347.689686][T12509] EXT4-fs (loop1): orphan cleanup on readonly fs [ 347.702614][T12515] loop2: detected capacity change from 0 to 512 [ 347.746842][T12509] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2769: bg 0: block 361: padding at end of block bitmap is not set [ 347.780600][T12516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.983948][T12509] EXT4-fs (loop1): Remounting filesystem read-only [ 348.173115][T12509] EXT4-fs (loop1): 1 truncate cleaned up [ 348.195816][T12525] netlink: 'syz.5.2773': attribute type 1 has an invalid length. [ 348.232976][T12509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 348.251044][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2769'. [ 348.268662][T12525] 8021q: adding VLAN 0 to HW filter on device bond9 [ 348.336252][T12509] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.2769: dx entry: limit 0 != root limit 125 [ 348.348268][T12509] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2769: Corrupt directory, running e2fsck is recommended [ 348.455429][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2775'. [ 348.467230][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 348.630753][T12542] loop6: detected capacity change from 0 to 512 [ 348.699337][T12542] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 348.799966][T12542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 348.900443][T12542] EXT4-fs (loop6): orphan cleanup on readonly fs [ 348.921109][T12542] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2777: bg 0: block 361: padding at end of block bitmap is not set [ 348.940438][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2778'. [ 348.952937][T12551] vlan2: entered promiscuous mode [ 348.999389][T12555] loop1: detected capacity change from 0 to 512 [ 349.000730][T12542] EXT4-fs (loop6): Remounting filesystem read-only [ 349.207764][T12542] EXT4-fs (loop6): 1 truncate cleaned up [ 349.332731][T12562] loop2: detected capacity change from 0 to 512 [ 349.346490][T12542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 349.505664][T12562] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 349.539259][T12562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 349.654158][T12562] EXT4-fs (loop2): orphan cleanup on readonly fs [ 349.771159][T12568] 8021q: adding VLAN 0 to HW filter on device bond23 [ 349.802655][T12562] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2784: bg 0: block 361: padding at end of block bitmap is not set [ 349.850708][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2777'. [ 349.886675][T12562] EXT4-fs (loop2): Remounting filesystem read-only [ 349.916057][T12562] EXT4-fs (loop2): 1 truncate cleaned up [ 349.986987][T12562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 350.051882][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2784'. [ 350.103640][T12562] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.2784: dx entry: limit 0 != root limit 125 [ 350.115532][T12562] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2784: Corrupt directory, running e2fsck is recommended [ 350.142948][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 350.226001][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 350.311692][T12594] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 350.926081][T12609] SELinux: syz.5.2800 (12609) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 350.951841][T12615] loop6: detected capacity change from 0 to 512 [ 351.001874][T12615] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 351.026549][T12615] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 351.045620][T12615] EXT4-fs (loop6): orphan cleanup on readonly fs [ 351.125523][T12615] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2802: bg 0: block 361: padding at end of block bitmap is not set [ 351.142791][T12615] EXT4-fs (loop6): Remounting filesystem read-only [ 351.214011][T12615] EXT4-fs (loop6): 1 truncate cleaned up [ 351.248963][T12615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 351.408212][T12623] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.439988][T12626] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 351.446772][T12626] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 351.454530][T12626] vhci_hcd vhci_hcd.0: Device attached [ 351.547127][T12632] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 351.553841][T12632] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 351.561560][T12632] vhci_hcd vhci_hcd.0: Device attached [ 351.610401][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2802'. [ 351.771472][ T23] usb 5-1: new low-speed USB device number 6 using vhci_hcd [ 351.778989][T12626] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 351.785695][T12626] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 351.793190][T12626] vhci_hcd vhci_hcd.0: Device attached [ 351.804067][T12632] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 351.810755][T12632] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 351.818435][T12632] vhci_hcd vhci_hcd.0: Device attached [ 351.824002][T12643] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 351.830617][T12643] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 351.838318][T12643] vhci_hcd vhci_hcd.0: Device attached [ 351.847033][T12626] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(18) [ 351.853658][T12626] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 351.861358][T12626] vhci_hcd vhci_hcd.0: Device attached [ 351.872187][T12644] vhci_hcd: connection closed [ 351.872403][T12647] vhci_hcd: connection closed [ 351.872460][ T5938] vhci_hcd: stop threads [ 351.877350][T12638] vhci_hcd: connection closed [ 351.881960][ T5938] vhci_hcd: release socket [ 351.888469][T12633] vhci_hcd: connection closed [ 351.890956][ T5938] vhci_hcd: disconnect device [ 351.895673][T12630] vhci_hcd: connection reset by peer [ 351.906203][T12642] vhci_hcd: connection closed [ 351.970421][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 351.995443][ T5938] vhci_hcd: stop threads [ 351.999775][ T5938] vhci_hcd: release socket [ 352.004307][ T5938] vhci_hcd: disconnect device [ 352.024056][ T5938] vhci_hcd: stop threads [ 352.028564][ T5938] vhci_hcd: release socket [ 352.033169][ T5938] vhci_hcd: disconnect device [ 352.048044][T12652] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 352.054687][T12652] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 352.062276][T12652] vhci_hcd vhci_hcd.0: Device attached [ 352.073656][ T5938] vhci_hcd: stop threads [ 352.077942][ T5938] vhci_hcd: release socket [ 352.082377][ T5938] vhci_hcd: disconnect device [ 352.087699][T12652] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 352.094471][T12652] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 352.102554][T12652] vhci_hcd vhci_hcd.0: Device attached [ 352.109227][ T5938] vhci_hcd: stop threads [ 352.113603][ T5938] vhci_hcd: release socket [ 352.118046][ T5938] vhci_hcd: disconnect device [ 352.133120][ T5938] vhci_hcd: stop threads [ 352.137513][ T5938] vhci_hcd: release socket [ 352.141996][ T5938] vhci_hcd: disconnect device [ 352.146943][T12652] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(15) [ 352.153662][T12652] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 352.161255][T12652] vhci_hcd vhci_hcd.0: Device attached [ 352.300957][T12652] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 352.307675][T12652] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 352.315322][T12667] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 352.321936][T12667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 352.329620][T12667] vhci_hcd vhci_hcd.0: Device attached [ 352.329687][T12652] vhci_hcd vhci_hcd.0: Device attached [ 352.509368][ T3451] usb 1-1: new low-speed USB device number 7 using vhci_hcd [ 352.684579][T12652] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(20) [ 352.691225][T12652] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 352.698881][T12652] vhci_hcd vhci_hcd.0: Device attached [ 352.830688][T12673] vhci_hcd: connection closed [ 352.831032][ T8296] vhci_hcd: stop threads [ 352.840144][ T8296] vhci_hcd: release socket [ 352.844726][ T8296] vhci_hcd: disconnect device [ 352.851430][T12659] vhci_hcd: connection closed [ 352.851580][T12664] vhci_hcd: connection closed [ 352.851656][T12653] vhci_hcd: connection reset by peer [ 352.868245][T12656] vhci_hcd: connection closed [ 352.868351][T12668] vhci_hcd: connection closed [ 352.885764][ T8296] vhci_hcd: stop threads [ 352.894833][ T8296] vhci_hcd: release socket [ 352.899304][ T8296] vhci_hcd: disconnect device [ 352.912364][ T29] audit: type=1326 audit(1748699343.202:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67c26e969 code=0x7ffc0000 [ 352.936433][ T29] audit: type=1326 audit(1748699343.202:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fe67c26e969 code=0x7ffc0000 [ 352.960019][ T29] audit: type=1326 audit(1748699343.202:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12681 comm="syz.5.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67c26e969 code=0x7ffc0000 [ 352.999508][ T8296] vhci_hcd: stop threads [ 353.003937][ T8296] vhci_hcd: release socket [ 353.008373][ T8296] vhci_hcd: disconnect device [ 353.013308][ T8296] vhci_hcd: stop threads [ 353.017601][ T8296] vhci_hcd: release socket [ 353.022087][ T8296] vhci_hcd: disconnect device [ 353.027224][ T8296] vhci_hcd: stop threads [ 353.031482][ T8296] vhci_hcd: release socket [ 353.035939][ T8296] vhci_hcd: disconnect device [ 353.042395][ T8296] vhci_hcd: stop threads [ 353.046730][ T8296] vhci_hcd: release socket [ 353.051183][ T8296] vhci_hcd: disconnect device [ 353.139507][T12689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 353.404972][T12695] netlink: 'syz.6.2819': attribute type 21 has an invalid length. [ 353.412925][T12695] netlink: 'syz.6.2819': attribute type 1 has an invalid length. [ 353.420694][T12695] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2819'. [ 353.445532][T12694] 8021q: adding VLAN 0 to HW filter on device bond10 [ 353.527380][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2821'. [ 353.936343][ T29] audit: type=1326 audit(1748699344.252:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451f9ae969 code=0x7ffc0000 [ 354.090512][ T29] audit: type=1326 audit(1748699344.352:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451f9ae969 code=0x7ffc0000 [ 354.114188][ T29] audit: type=1326 audit(1748699344.352:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f451f9ae969 code=0x7ffc0000 [ 354.137812][ T29] audit: type=1326 audit(1748699344.352:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451f9ae969 code=0x7ffc0000 [ 354.161513][ T29] audit: type=1326 audit(1748699344.352:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12709 comm="syz.2.2827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451f9ae969 code=0x7ffc0000 [ 354.191494][T12714] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2828'. [ 354.238741][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2829'. [ 354.252291][T12714] vlan2: entered promiscuous mode [ 354.257646][T12714] ip6gretap0: entered promiscuous mode [ 354.264596][T12720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.300470][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2832'. [ 354.358256][T12728] loop6: detected capacity change from 0 to 512 [ 354.482391][T12734] loop2: detected capacity change from 0 to 512 [ 354.498836][T12734] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 354.518026][T12734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 354.532817][T12734] EXT4-fs (loop2): orphan cleanup on readonly fs [ 354.548918][T12734] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2836: bg 0: block 361: padding at end of block bitmap is not set [ 354.564899][T12734] EXT4-fs (loop2): Remounting filesystem read-only [ 354.573143][T12734] EXT4-fs (loop2): 1 truncate cleaned up [ 354.602207][T12734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 354.637561][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2836'. [ 354.695591][T12734] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.2836: dx entry: limit 0 != root limit 125 [ 354.707573][T12734] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2836: Corrupt directory, running e2fsck is recommended [ 354.773728][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 354.835996][ T29] audit: type=1326 audit(1748699345.152:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.2.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451f9ae969 code=0x7ffc0000 [ 354.859824][ T29] audit: type=1326 audit(1748699345.152:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.2.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451f9ae969 code=0x7ffc0000 [ 354.950867][T12749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 354.986912][T12752] loop5: detected capacity change from 0 to 128 [ 354.995988][T12752] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.009835][T12752] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 355.179788][T12758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2840'. [ 355.261238][ T9550] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.376666][T12763] loop6: detected capacity change from 0 to 512 [ 355.396213][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2845'. [ 355.457481][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2844'. [ 355.470287][T12767] vlan2: entered promiscuous mode [ 355.494324][T12771] loop6: detected capacity change from 0 to 512 [ 355.501330][T12771] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 355.511791][T12771] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 355.519897][T12771] EXT4-fs (loop6): orphan cleanup on readonly fs [ 355.529502][T12771] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2847: bg 0: block 361: padding at end of block bitmap is not set [ 355.544506][T12771] EXT4-fs (loop6): Remounting filesystem read-only [ 355.551373][T12771] EXT4-fs (loop6): 1 truncate cleaned up [ 355.557714][T12771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 355.576377][T12774] loop5: detected capacity change from 0 to 512 [ 355.583394][T12774] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 355.593707][T12774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 355.601740][T12774] EXT4-fs (loop5): orphan cleanup on readonly fs [ 355.608658][T12774] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2849: bg 0: block 361: padding at end of block bitmap is not set [ 355.623167][T12774] EXT4-fs (loop5): Remounting filesystem read-only [ 355.630041][T12774] EXT4-fs (loop5): 1 truncate cleaned up [ 355.639562][T12774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 355.656695][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 355.672016][T12774] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.2849: dx entry: limit 0 != root limit 125 [ 355.683987][T12774] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2849: Corrupt directory, running e2fsck is recommended [ 355.713037][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 355.888813][T12787] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 356.059846][T12796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.632162][T12815] __nla_validate_parse: 4 callbacks suppressed [ 356.632181][T12815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2862'. [ 356.657969][T12815] vlan2: entered promiscuous mode [ 356.758455][T12819] loop5: detected capacity change from 0 to 1024 [ 356.813727][ T23] usb 5-1: enqueue for inactive port 0 [ 356.819658][T12819] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 356.843919][ T23] usb 5-1: enqueue for inactive port 0 [ 356.868586][T12819] loop5: detected capacity change from 0 to 512 [ 357.020450][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2863'. [ 357.533214][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2869'. [ 357.700499][T12842] xt_TCPMSS: Only works on TCP SYN packets [ 357.726509][ T23] vhci_hcd: vhci_device speed not set [ 357.732038][ T3451] usb 1-1: enqueue for inactive port 0 [ 357.737623][ T3451] usb 1-1: enqueue for inactive port 0 [ 358.005709][T12819] EXT4-fs (loop5): 1 orphan inode deleted [ 358.021576][ T3451] vhci_hcd: vhci_device speed not set [ 358.032153][T12819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.053091][ T31] __quota_error: 5 callbacks suppressed [ 358.053108][ T31] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 358.068662][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 358.099496][T12819] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.137282][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.239263][T12855] SELinux: syz.6.2875 (12855) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 358.400403][T12863] 8021q: adding VLAN 0 to HW filter on device bond11 [ 358.548381][T12867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2878'. [ 358.651647][T12867] vlan2: entered promiscuous mode [ 358.656839][T12867] ip6gretap0: entered promiscuous mode [ 358.727689][T12872] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2880'. [ 358.790833][T12872] vlan3: entered promiscuous mode [ 358.958054][T12879] loop6: detected capacity change from 0 to 512 [ 358.966823][T12879] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 358.978117][T12879] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 358.988159][T12879] EXT4-fs (loop6): orphan cleanup on readonly fs [ 358.995313][T12879] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2883: bg 0: block 361: padding at end of block bitmap is not set [ 359.011944][T12879] EXT4-fs (loop6): Remounting filesystem read-only [ 359.162351][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2882'. [ 359.218724][T12883] loop5: detected capacity change from 0 to 1024 [ 359.261565][T12883] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 359.282628][T12879] EXT4-fs (loop6): 1 truncate cleaned up [ 359.313263][T12879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 359.427626][T12879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2883'. [ 359.498954][T12883] loop5: detected capacity change from 0 to 512 [ 359.516714][T12883] EXT4-fs (loop5): 1 orphan inode deleted [ 359.525031][T12883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.542170][ T31] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 359.552056][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 359.570363][T12883] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.609815][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 359.626361][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.990912][T12909] xt_CT: You must specify a L4 protocol and not use inversions on it [ 360.059954][T12911] loop5: detected capacity change from 0 to 512 [ 360.286615][ T29] audit: type=1326 audit(1748699350.602:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c25c1e969 code=0x7ffc0000 [ 360.310277][ T29] audit: type=1326 audit(1748699350.602:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c25c1e969 code=0x7ffc0000 [ 360.464171][ T29] audit: type=1326 audit(1748699350.602:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f8c25c1e969 code=0x7ffc0000 [ 360.487840][ T29] audit: type=1326 audit(1748699350.602:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c25c1e969 code=0x7ffc0000 [ 360.511424][ T29] audit: type=1326 audit(1748699350.602:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12923 comm="syz.1.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c25c1e969 code=0x7ffc0000 [ 360.550791][T12933] xt_TCPMSS: Only works on TCP SYN packets [ 360.836225][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2900'. [ 360.924875][T12937] xt_CT: You must specify a L4 protocol and not use inversions on it [ 360.998444][T12941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2906'. [ 361.007549][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2906'. [ 361.070975][T12943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.275864][T12959] loop1: detected capacity change from 0 to 512 [ 361.288516][T12958] xt_TCPMSS: Only works on TCP SYN packets [ 361.307136][T12959] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 361.351497][T12959] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 361.448156][T12959] EXT4-fs (loop1): orphan cleanup on readonly fs [ 361.473554][T12968] loop5: detected capacity change from 0 to 1024 [ 361.482038][T12959] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2913: bg 0: block 361: padding at end of block bitmap is not set [ 361.504386][T12968] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 361.518601][T12959] EXT4-fs (loop1): Remounting filesystem read-only [ 361.526723][T12968] loop5: detected capacity change from 0 to 512 [ 361.549710][T12959] EXT4-fs (loop1): 1 truncate cleaned up [ 361.555978][T12959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 361.578056][T12968] EXT4-fs (loop5): 1 orphan inode deleted [ 361.587834][T12968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.602236][ T5938] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 361.612147][ T5938] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 361.635691][T12979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 361.637471][T12968] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.722353][T12988] __nla_validate_parse: 3 callbacks suppressed [ 361.722375][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2925'. [ 361.777924][T12959] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.2913: dx entry: limit 0 != root limit 125 [ 361.789821][T12959] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2913: Corrupt directory, running e2fsck is recommended [ 361.808497][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.654504][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2926'. [ 362.768236][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 363.012766][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2933'. [ 363.029654][T13014] xt_TCPMSS: Only works on TCP SYN packets [ 363.334215][T13030] loop1: detected capacity change from 0 to 1024 [ 363.375180][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2936'. [ 363.581768][T13034] SELinux: syz.5.2938 (13034) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 364.004400][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2941'. [ 364.362412][T13058] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 364.421990][T13060] loop2: detected capacity change from 0 to 512 [ 364.442511][T13030] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 364.457480][T13060] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 364.580514][T13060] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 364.620392][T13060] EXT4-fs (loop2): orphan cleanup on readonly fs [ 364.647602][T13060] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2948: bg 0: block 361: padding at end of block bitmap is not set [ 364.697821][T13060] EXT4-fs (loop2): Remounting filesystem read-only [ 364.719672][T13060] EXT4-fs (loop2): 1 truncate cleaned up [ 364.741234][T13030] loop1: detected capacity change from 0 to 512 [ 364.754364][T13060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 364.771269][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'. [ 364.801533][T13030] EXT4-fs (loop1): 1 orphan inode deleted [ 364.818182][ T2679] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 364.828137][ T2679] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 364.859401][T13030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.881660][T13030] ext4 filesystem being mounted at /588/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.926790][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 364.937232][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.185370][T13094] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 365.574762][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2959'. [ 365.628113][T13099] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 365.634774][T13099] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 365.642500][T13099] vhci_hcd vhci_hcd.0: Device attached [ 365.706165][T13103] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 365.712818][T13103] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 365.720619][T13103] vhci_hcd vhci_hcd.0: Device attached [ 365.800705][T13105] vhci_hcd: connection closed [ 365.801261][ T4655] vhci_hcd: stop threads [ 365.810428][ T4655] vhci_hcd: release socket [ 365.814883][ T4655] vhci_hcd: disconnect device [ 365.852928][T13104] vhci_hcd: connection closed [ 365.949898][ T3968] usb 5-1: new low-speed USB device number 7 using vhci_hcd [ 365.962089][ T4655] vhci_hcd: stop threads [ 365.966388][ T4655] vhci_hcd: release socket [ 365.970876][ T4655] vhci_hcd: disconnect device [ 366.445482][T13117] loop5: detected capacity change from 0 to 512 [ 366.804465][T13120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2964'. [ 366.897840][T13117] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 367.027287][T13122] loop2: detected capacity change from 0 to 1024 [ 367.050858][T13117] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 367.096304][T13122] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 367.118384][T13117] EXT4-fs (loop5): orphan cleanup on readonly fs [ 367.215718][T13117] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2965: bg 0: block 361: padding at end of block bitmap is not set [ 367.260561][T13122] loop2: detected capacity change from 0 to 512 [ 367.293659][T13117] EXT4-fs (loop5): Remounting filesystem read-only [ 367.315244][T13122] EXT4-fs (loop2): 1 orphan inode deleted [ 367.325995][T13117] EXT4-fs (loop5): 1 truncate cleaned up [ 367.334075][ T4655] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 367.344237][ T4655] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 367.369077][T13122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.384436][T13117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 367.430387][T13117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2965'. [ 367.443684][T13122] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.516874][T13137] netlink: 'syz.1.2971': attribute type 21 has an invalid length. [ 367.527600][T13137] netlink: 'syz.1.2971': attribute type 1 has an invalid length. [ 367.535435][T13137] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2971'. [ 367.547910][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.602671][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 367.618107][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2977'. [ 367.662131][T13152] loop5: detected capacity change from 0 to 512 [ 367.689988][T13157] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 367.701636][T13154] xt_TCPMSS: Only works on TCP SYN packets [ 367.720414][T13158] loop6: detected capacity change from 0 to 1024 [ 367.732489][T13157] 8021q: adding VLAN 0 to HW filter on device bond3 [ 367.745862][T13158] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 367.831672][T13158] loop6: detected capacity change from 0 to 512 [ 367.861593][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2980'. [ 367.887249][T13158] EXT4-fs (loop6): 1 orphan inode deleted [ 367.894176][T13158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.962022][ T2679] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 367.971942][ T2679] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 367.993696][T13158] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.025769][T13180] netlink: 'syz.5.2986': attribute type 21 has an invalid length. [ 368.054663][T13180] netlink: 'syz.5.2986': attribute type 1 has an invalid length. [ 368.062530][T13180] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2986'. [ 368.134684][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.324444][T13184] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2988'. [ 368.333529][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2988'. [ 368.594666][T13199] loop5: detected capacity change from 0 to 512 [ 368.596303][T13201] netlink: 'syz.6.2994': attribute type 1 has an invalid length. [ 368.615560][T13201] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.702401][T13208] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 368.709066][T13208] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.716727][T13208] vhci_hcd vhci_hcd.0: Device attached [ 368.750436][T13215] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 368.757084][T13215] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 368.764738][T13215] vhci_hcd vhci_hcd.0: Device attached [ 368.782665][T13208] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16) [ 368.789366][T13208] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 368.796902][T13208] vhci_hcd vhci_hcd.0: Device attached [ 368.805536][T13186] chnl_net:caif_netlink_parms(): no params data found [ 368.825354][T13224] loop6: detected capacity change from 0 to 512 [ 368.835022][T13224] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 368.840230][T13231] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3001'. [ 368.850753][T13208] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(19) [ 368.853695][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3001'. [ 368.860232][T13208] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 368.877236][T13208] vhci_hcd vhci_hcd.0: Device attached [ 368.881015][T13224] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 368.891255][T13224] EXT4-fs (loop6): orphan cleanup on readonly fs [ 368.899035][T13224] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2999: bg 0: block 361: padding at end of block bitmap is not set [ 368.917357][T13224] EXT4-fs (loop6): Remounting filesystem read-only [ 368.924227][T13208] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 368.930864][T13208] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 368.936380][T13224] EXT4-fs (loop6): 1 truncate cleaned up [ 368.938588][T13208] vhci_hcd vhci_hcd.0: Device attached [ 368.952329][T13186] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.952767][T13224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 368.959615][T13186] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.971475][ T3395] usb 11-1: new low-speed USB device number 6 using vhci_hcd [ 368.978754][T13186] bridge_slave_0: entered allmulticast mode [ 368.992698][T13186] bridge_slave_0: entered promiscuous mode [ 368.999651][T13186] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.006786][T13186] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.014260][T13186] bridge_slave_1: entered allmulticast mode [ 369.020497][T13208] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(23) [ 369.027149][T13208] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 369.031541][T13186] bridge_slave_1: entered promiscuous mode [ 369.034824][T13208] vhci_hcd vhci_hcd.0: Device attached [ 369.062789][T13241] vhci_hcd: connection closed [ 369.063485][T13237] vhci_hcd: connection closed [ 369.063564][T13229] vhci_hcd: connection closed [ 369.068552][ T4655] vhci_hcd: stop threads [ 369.074561][T13186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.077751][ T4655] vhci_hcd: release socket [ 369.082253][T13218] vhci_hcd: connection closed [ 369.091042][ T4655] vhci_hcd: disconnect device [ 369.095672][T13223] vhci_hcd: connection closed [ 369.100604][T13210] vhci_hcd: connection reset by peer [ 369.107085][T13186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.134073][ T4655] vhci_hcd: stop threads [ 369.138378][ T4655] vhci_hcd: release socket [ 369.142848][ T4655] vhci_hcd: disconnect device [ 369.153118][ T4655] vhci_hcd: stop threads [ 369.157480][ T4655] vhci_hcd: release socket [ 369.161992][ T4655] vhci_hcd: disconnect device [ 369.165258][T13224] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.2999: dx entry: limit 0 != root limit 125 [ 369.167194][ T4655] vhci_hcd: stop threads [ 369.178506][T13224] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.2999: Corrupt directory, running e2fsck is recommended [ 369.182856][ T4655] vhci_hcd: release socket [ 369.182871][ T4655] vhci_hcd: disconnect device [ 369.183286][ T4655] vhci_hcd: stop threads [ 369.209256][ T4655] vhci_hcd: release socket [ 369.213793][ T4655] vhci_hcd: disconnect device [ 369.218778][ T4655] vhci_hcd: stop threads [ 369.223050][ T4655] vhci_hcd: release socket [ 369.227543][ T4655] vhci_hcd: disconnect device [ 369.227611][T13186] team0: Port device team_slave_0 added [ 369.239372][T13186] team0: Port device team_slave_1 added [ 369.260391][T13186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.267420][T13186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.293610][T13186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.304826][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 369.312078][T13186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.320811][T13186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.347587][T13186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.372990][T13248] loop6: detected capacity change from 0 to 512 [ 369.393941][T13186] hsr_slave_0: entered promiscuous mode [ 369.400543][T13186] hsr_slave_1: entered promiscuous mode [ 369.401330][T13250] netlink: 'syz.6.3005': attribute type 1 has an invalid length. [ 369.406720][T13186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.421661][T13186] Cannot create hsr debugfs directory [ 369.438222][T13250] 8021q: adding VLAN 0 to HW filter on device bond4 [ 369.620862][T13186] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.684113][T13268] loop5: detected capacity change from 0 to 512 [ 369.691323][T13268] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 369.703978][T13268] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 369.712180][T13268] EXT4-fs (loop5): orphan cleanup on readonly fs [ 369.936958][T13186] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.957220][T13268] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3010: bg 0: block 361: padding at end of block bitmap is not set [ 370.409559][T13268] EXT4-fs (loop5): Remounting filesystem read-only [ 370.416870][T13268] EXT4-fs (loop5): 1 truncate cleaned up [ 370.436745][T13268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 370.501126][T13186] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.565621][T13292] netlink: 'syz.6.3016': attribute type 1 has an invalid length. [ 370.582663][T13292] 8021q: adding VLAN 0 to HW filter on device bond5 [ 370.597323][T13268] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.3010: dx entry: limit 0 != root limit 125 [ 370.609271][T13268] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3010: Corrupt directory, running e2fsck is recommended [ 370.666100][T13297] loop1: detected capacity change from 0 to 512 [ 370.672936][T13297] EXT4-fs: Ignoring removed nobh option [ 370.881754][T13297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.906813][T13297] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.3013: iget: bad i_size value: 15393162788874 [ 370.930494][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 371.040019][T13186] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.510429][T13186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 371.545973][T13186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 371.567409][T13186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 371.574249][ T3968] usb 5-1: enqueue for inactive port 0 [ 371.579833][ T3968] usb 5-1: enqueue for inactive port 0 [ 371.663585][ T3968] vhci_hcd: vhci_device speed not set [ 371.701557][T13186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 371.762273][T13186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.774627][T13186] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.786032][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.793230][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.738563][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.822092][T13186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 372.832845][T13186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 372.891632][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.898830][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.985007][T13332] netlink: 'syz.0.3027': attribute type 1 has an invalid length. [ 373.058616][T13332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.144164][T13340] loop1: detected capacity change from 0 to 512 [ 373.151112][T13340] EXT4-fs: Ignoring removed nobh option [ 373.363372][T13345] __nla_validate_parse: 5 callbacks suppressed [ 373.363436][T13345] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3029'. [ 373.445434][T13186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.473795][ T3395] usb 11-1: enqueue for inactive port 0 [ 374.511988][T13340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.527753][T13340] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.3024: iget: bad i_size value: 15393162788874 [ 374.555830][ T3395] usb 11-1: enqueue for inactive port 0 [ 374.727181][T13364] loop5: detected capacity change from 0 to 1024 [ 374.762539][T13186] veth0_vlan: entered promiscuous mode [ 374.786156][T13364] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 374.835075][T13186] veth1_vlan: entered promiscuous mode [ 374.870712][T13186] veth0_macvtap: entered promiscuous mode [ 374.912567][T13186] veth1_macvtap: entered promiscuous mode [ 374.950151][T13186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.973093][T13186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.996512][T13186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.005472][T13186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.014216][T13186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.023001][T13186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.067137][T13364] loop5: detected capacity change from 0 to 512 [ 375.111151][T13364] EXT4-fs (loop5): 1 orphan inode deleted [ 375.123569][ T3395] vhci_hcd: vhci_device speed not set [ 375.124327][T13364] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.141856][ T12] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 375.151737][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 375.168337][T13364] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.311228][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.488245][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.882186][T13393] loop6: detected capacity change from 0 to 512 [ 376.385425][T13417] loop5: detected capacity change from 0 to 512 [ 376.395922][T13420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3050'. [ 376.407457][T13388] chnl_net:caif_netlink_parms(): no params data found [ 376.470234][T13432] xt_TCPMSS: Only works on TCP SYN packets [ 376.470887][T13431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3054'. [ 376.491423][T13388] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.498685][T13388] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.506085][T13388] bridge_slave_0: entered allmulticast mode [ 376.512816][T13388] bridge_slave_0: entered promiscuous mode [ 376.521395][T13388] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.528537][T13388] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.551051][T13388] bridge_slave_1: entered allmulticast mode [ 376.558033][T13388] bridge_slave_1: entered promiscuous mode [ 376.567129][T13431] vlan2: entered promiscuous mode [ 376.572219][T13431] syz_tun: entered promiscuous mode [ 376.611777][T13437] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 376.646294][T13388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.661344][T13388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.698957][T13388] team0: Port device team_slave_0 added [ 376.710068][T13388] team0: Port device team_slave_1 added [ 376.882125][T13388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.889173][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.893289][T13452] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3062'. [ 376.915188][T13388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.922839][T13388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.924344][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3062'. [ 376.950785][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.976953][T13388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.048057][T13388] hsr_slave_0: entered promiscuous mode [ 377.059909][T13388] hsr_slave_1: entered promiscuous mode [ 377.069221][T13458] loop5: detected capacity change from 0 to 512 [ 377.075762][T13388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.083370][T13388] Cannot create hsr debugfs directory [ 377.174762][T13469] xt_TCPMSS: Only works on TCP SYN packets [ 377.202922][T13466] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 377.252411][T13473] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 377.259099][T13473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.266676][T13473] vhci_hcd vhci_hcd.0: Device attached [ 377.285587][T13473] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 377.292238][T13473] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 377.300202][T13473] vhci_hcd vhci_hcd.0: Device attached [ 377.308944][T13388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.325975][T13473] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16) [ 377.332628][T13473] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 377.340120][T13473] vhci_hcd vhci_hcd.0: Device attached [ 377.349107][T13473] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(19) [ 377.355811][T13473] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 377.363604][T13473] vhci_hcd vhci_hcd.0: Device attached [ 377.384223][T13388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.405545][T13483] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(21) [ 377.412201][T13483] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 377.419910][T13483] vhci_hcd vhci_hcd.0: Device attached [ 377.450448][T13487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3072'. [ 377.459531][T13487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3072'. [ 377.472880][T13473] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(23) [ 377.479601][T13473] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 377.487346][T13473] vhci_hcd vhci_hcd.0: Device attached [ 377.500925][T13388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.511670][ T3395] usb 11-1: new low-speed USB device number 7 using vhci_hcd [ 377.526016][T13489] vhci_hcd: connection closed [ 377.526183][ T5938] vhci_hcd: stop threads [ 377.526266][T13484] vhci_hcd: connection closed [ 377.530886][ T5938] vhci_hcd: release socket [ 377.530906][ T5938] vhci_hcd: disconnect device [ 377.530948][T13481] vhci_hcd: connection closed [ 377.535681][T13474] vhci_hcd: connection reset by peer [ 377.540347][T13477] vhci_hcd: connection closed [ 377.559675][T13479] vhci_hcd: connection closed [ 377.564032][ T5938] vhci_hcd: stop threads [ 377.573431][ T5938] vhci_hcd: release socket [ 377.577922][ T5938] vhci_hcd: disconnect device [ 377.635807][ T5938] vhci_hcd: stop threads [ 377.640096][ T5938] vhci_hcd: release socket [ 377.644702][ T5938] vhci_hcd: disconnect device [ 377.654832][ T5938] vhci_hcd: stop threads [ 377.659109][ T5938] vhci_hcd: release socket [ 377.663738][ T5938] vhci_hcd: disconnect device [ 377.673373][T13388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.673582][ T5938] vhci_hcd: stop threads [ 377.688064][ T5938] vhci_hcd: release socket [ 377.692545][ T5938] vhci_hcd: disconnect device [ 377.723887][ T5938] vhci_hcd: stop threads [ 377.728201][ T5938] vhci_hcd: release socket [ 377.732659][ T5938] vhci_hcd: disconnect device [ 377.810031][T13499] loop2: detected capacity change from 0 to 512 [ 377.872235][T13388] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.896927][T13388] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.906907][T13388] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.923069][T13388] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.010391][T13388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.090336][T13388] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.104237][T13515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3083'. [ 378.113361][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'. [ 378.128083][ T2679] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.135286][ T2679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.146136][ T2679] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.153257][ T2679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.190411][T13519] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 378.206253][T13388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.242191][T13522] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 378.329010][T13388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.412405][T13541] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 378.419118][T13541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.427051][T13541] vhci_hcd vhci_hcd.0: Device attached [ 378.440209][T13541] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(14) [ 378.446959][T13541] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 378.454887][T13541] vhci_hcd vhci_hcd.0: Device attached [ 378.468098][T13541] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(16) [ 378.474742][T13541] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 378.482319][T13541] vhci_hcd vhci_hcd.0: Device attached [ 378.517873][T13541] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(19) [ 378.524603][T13541] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 378.532300][T13541] vhci_hcd vhci_hcd.0: Device attached [ 378.597989][T13556] SELinux: syz.0.3094 (13556) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 378.620201][T13541] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(21) [ 378.626856][T13541] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 378.634590][T13541] vhci_hcd vhci_hcd.0: Device attached [ 378.643029][T13550] loop5: detected capacity change from 0 to 512 [ 378.649687][T13550] EXT4-fs: Ignoring removed nobh option [ 378.652934][T13388] veth0_vlan: entered promiscuous mode [ 378.665950][T13550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.679483][ T10] usb 13-1: new low-speed USB device number 4 using vhci_hcd [ 378.687226][T13550] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.3091: iget: bad i_size value: 15393162788874 [ 378.712573][T13541] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(23) [ 378.719309][T13541] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 378.727021][T13541] vhci_hcd vhci_hcd.0: Device attached [ 378.740549][T13570] loop2: detected capacity change from 0 to 512 [ 378.747771][T13570] EXT4-fs: Ignoring removed nobh option [ 378.760199][T13388] veth1_vlan: entered promiscuous mode [ 378.778251][T13570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.800103][T13570] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.3092: iget: bad i_size value: 15393162788874 [ 378.869002][T13388] veth0_macvtap: entered promiscuous mode [ 378.911228][T13388] veth1_macvtap: entered promiscuous mode [ 378.935724][T13563] vhci_hcd: connection closed [ 378.936184][ T4655] vhci_hcd: stop threads [ 378.945242][ T4655] vhci_hcd: release socket [ 378.949730][ T4655] vhci_hcd: disconnect device [ 378.983929][T13542] vhci_hcd: connection closed [ 378.984183][T13545] vhci_hcd: connection closed [ 378.989191][T13548] vhci_hcd: connection closed [ 378.994420][T13552] vhci_hcd: connection closed [ 379.013679][T13559] vhci_hcd: connection closed [ 379.029168][T13388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.181628][ T4655] vhci_hcd: stop threads [ 379.186122][ T4655] vhci_hcd: release socket [ 379.190663][ T4655] vhci_hcd: disconnect device [ 379.640047][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.046766][T13388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.092592][T13388] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.101745][T13388] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.110693][T13388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.119870][T13388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.764280][ T4655] vhci_hcd: stop threads [ 380.768655][ T4655] vhci_hcd: release socket [ 380.772112][T13186] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.773099][ T4655] vhci_hcd: disconnect device [ 380.793763][ T4655] vhci_hcd: stop threads [ 380.798050][ T4655] vhci_hcd: release socket [ 380.802543][ T4655] vhci_hcd: disconnect device [ 380.823811][ T4655] vhci_hcd: stop threads [ 380.828094][ T4655] vhci_hcd: release socket [ 380.832550][ T4655] vhci_hcd: disconnect device [ 380.854836][T13588] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3096'. [ 380.864717][ T4655] vhci_hcd: stop threads [ 380.869042][ T4655] vhci_hcd: release socket [ 380.873588][ T4655] vhci_hcd: disconnect device [ 380.918299][T13596] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 380.933679][T13594] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 380.940329][T13594] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 380.947954][T13594] vhci_hcd vhci_hcd.0: Device attached [ 380.964407][T13594] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 380.971068][T13594] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 380.978866][T13594] vhci_hcd vhci_hcd.0: Device attached [ 380.996446][T13603] loop5: detected capacity change from 0 to 512 [ 381.007921][T13594] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 381.014573][T13594] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 381.022115][T13594] vhci_hcd vhci_hcd.0: Device attached [ 381.053763][T13606] SELinux: syz.1.3104 (13606) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 381.143671][T13613] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(22) [ 381.150756][T13613] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.158460][T13613] vhci_hcd vhci_hcd.0: Device attached [ 381.203926][ T9] usb 5-1: new low-speed USB device number 8 using vhci_hcd [ 381.221793][T13594] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 381.228440][T13594] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.236125][T13594] vhci_hcd vhci_hcd.0: Device attached [ 381.333556][T13618] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(25) [ 381.340206][T13618] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 381.347911][T13618] vhci_hcd vhci_hcd.0: Device attached [ 381.402436][T13622] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 381.409076][T13622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.416748][T13622] vhci_hcd vhci_hcd.0: Device attached [ 381.454146][T13624] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 381.460806][T13624] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.468539][T13624] vhci_hcd vhci_hcd.0: Device attached [ 381.515285][T13627] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 381.522030][T13627] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 381.529591][T13627] vhci_hcd vhci_hcd.0: Device attached [ 381.535881][T13620] vhci_hcd: connection closed [ 381.536331][ T12] vhci_hcd: stop threads [ 381.545359][ T12] vhci_hcd: release socket [ 381.549940][ T12] vhci_hcd: disconnect device [ 381.557393][T13610] vhci_hcd: connection closed [ 381.557605][T13604] vhci_hcd: connection closed [ 381.573572][T13600] vhci_hcd: connection closed [ 381.578621][T13597] vhci_hcd: connection reset by peer [ 381.589142][T13614] vhci_hcd: connection closed [ 381.621362][ T12] vhci_hcd: stop threads [ 381.630379][ T12] vhci_hcd: release socket [ 381.635053][ T12] vhci_hcd: disconnect device [ 381.640062][T13622] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 381.646708][T13622] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.653630][ T3392] usb 1-1: new low-speed USB device number 8 using vhci_hcd [ 381.654491][T13622] vhci_hcd vhci_hcd.0: Device attached [ 381.663995][ T12] vhci_hcd: stop threads [ 381.671477][ T12] vhci_hcd: release socket [ 381.676017][ T12] vhci_hcd: disconnect device [ 381.690883][ T12] vhci_hcd: stop threads [ 381.695535][ T12] vhci_hcd: release socket [ 381.700011][ T12] vhci_hcd: disconnect device [ 381.762232][ T12] vhci_hcd: stop threads [ 381.766625][ T12] vhci_hcd: release socket [ 381.771514][ T12] vhci_hcd: disconnect device [ 381.799615][T13637] loop1: detected capacity change from 0 to 512 [ 381.831936][ T12] vhci_hcd: stop threads [ 381.836471][ T12] vhci_hcd: release socket [ 381.840912][ T12] vhci_hcd: disconnect device [ 381.845783][T13624] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22) [ 381.852416][T13624] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 381.860116][T13624] vhci_hcd vhci_hcd.0: Device attached [ 381.870994][T13637] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 381.981185][T13637] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 381.999934][T13622] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(24) [ 382.006658][T13622] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 382.014394][T13622] vhci_hcd vhci_hcd.0: Device attached [ 382.041146][T13637] EXT4-fs (loop1): orphan cleanup on readonly fs [ 382.056195][T13638] vhci_hcd: connection closed [ 382.063580][T13625] vhci_hcd: connection reset by peer [ 382.073647][T13629] vhci_hcd: connection closed [ 382.073807][T13626] vhci_hcd: connection closed [ 382.078649][T13634] vhci_hcd: connection closed [ 382.092933][ T2679] vhci_hcd: stop threads [ 382.101983][ T2679] vhci_hcd: release socket [ 382.106442][ T2679] vhci_hcd: disconnect device [ 382.111302][T13643] vhci_hcd: connection closed [ 382.136032][ T2679] vhci_hcd: stop threads [ 382.145105][ T2679] vhci_hcd: release socket [ 382.149541][ T2679] vhci_hcd: disconnect device [ 382.215871][T13637] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3108: bg 0: block 361: padding at end of block bitmap is not set [ 382.231048][ T2679] vhci_hcd: stop threads [ 382.235398][ T2679] vhci_hcd: release socket [ 382.239952][ T2679] vhci_hcd: disconnect device [ 382.280419][ T2679] vhci_hcd: stop threads [ 382.284748][ T2679] vhci_hcd: release socket [ 382.289194][ T2679] vhci_hcd: disconnect device [ 382.296132][T13637] EXT4-fs (loop1): Remounting filesystem read-only [ 382.303812][ T2679] vhci_hcd: stop threads [ 382.308158][ T2679] vhci_hcd: release socket [ 382.312596][ T2679] vhci_hcd: disconnect device [ 382.317543][ T2679] vhci_hcd: stop threads [ 382.321795][ T2679] vhci_hcd: release socket [ 382.322611][T13637] EXT4-fs (loop1): 1 truncate cleaned up [ 382.326266][ T2679] vhci_hcd: disconnect device [ 382.405727][T13637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 382.463742][T13658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3113'. [ 382.534428][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3108'. [ 382.573707][ T3395] usb 11-1: enqueue for inactive port 0 [ 382.583603][ T3395] usb 11-1: enqueue for inactive port 0 [ 382.975162][T13665] loop2: detected capacity change from 0 to 512 [ 383.015107][ T3395] vhci_hcd: vhci_device speed not set [ 383.046971][T13637] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.3108: dx entry: limit 0 != root limit 125 [ 383.059225][T13637] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3108: Corrupt directory, running e2fsck is recommended [ 383.139337][T13388] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 383.758199][T13687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3123'. [ 384.149754][T13696] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3124'. [ 384.171636][T13698] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 384.259877][ T10] usb 13-1: enqueue for inactive port 0 [ 384.274075][ T10] usb 13-1: enqueue for inactive port 0 [ 384.358673][ T10] vhci_hcd: vhci_device speed not set [ 385.513366][T13717] loop5: detected capacity change from 0 to 512 [ 385.604398][T13717] EXT4-fs (loop5): 1 orphan inode deleted [ 385.610604][T13717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.635883][ T4655] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 385.645754][ T4655] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 385.766988][T13717] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.994345][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.434522][ T9] usb 5-1: enqueue for inactive port 0 [ 386.457303][ T9] usb 5-1: enqueue for inactive port 0 [ 386.743723][ T9] vhci_hcd: vhci_device speed not set [ 386.804030][T13741] SELinux: syz.6.3139 (13741) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 386.817949][ T3392] usb 1-1: enqueue for inactive port 0 [ 386.828241][ T3392] usb 1-1: enqueue for inactive port 0 [ 386.871545][T13745] loop1: detected capacity change from 0 to 512 [ 386.899275][T13745] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 386.903576][ T3392] vhci_hcd: vhci_device speed not set [ 387.040263][T13745] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 387.051043][T13745] EXT4-fs (loop1): orphan cleanup on readonly fs [ 387.061424][T13745] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3140: bg 0: block 361: padding at end of block bitmap is not set [ 387.108701][T13754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3142'. [ 387.263707][T13745] EXT4-fs (loop1): Remounting filesystem read-only [ 387.316122][T13745] EXT4-fs (loop1): 1 truncate cleaned up [ 387.362104][T13745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 387.443528][T13758] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 387.489531][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3140'. [ 387.638645][T13745] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.3140: dx entry: limit 0 != root limit 125 [ 387.650553][T13745] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3140: Corrupt directory, running e2fsck is recommended [ 387.848574][T13764] loop6: detected capacity change from 0 to 512 [ 387.855481][T13764] EXT4-fs: Ignoring removed nobh option [ 387.914353][T13388] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 388.020370][T13764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.039626][T13764] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.3144: iget: bad i_size value: 15393162788874 [ 388.271211][T13771] SELinux: syz.2.3148 (13771) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 388.408421][T13774] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 388.943393][T13784] loop1: detected capacity change from 0 to 512 [ 388.998397][T13788] loop5: detected capacity change from 0 to 512 [ 389.057997][T13784] EXT4-fs (loop1): 1 orphan inode deleted [ 389.083359][T13788] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 389.106082][T13784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.161832][T13788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 389.205532][T13784] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.228362][T13788] EXT4-fs (loop5): orphan cleanup on readonly fs [ 389.235470][T13793] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 389.275838][T13788] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3154: bg 0: block 361: padding at end of block bitmap is not set [ 389.365513][T13788] EXT4-fs (loop5): Remounting filesystem read-only [ 389.398421][T13788] EXT4-fs (loop5): 1 truncate cleaned up [ 389.424975][T13788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 389.506199][T13788] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3154'. [ 389.675700][T13788] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.3154: dx entry: limit 0 != root limit 125 [ 389.687542][T13788] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3154: Corrupt directory, running e2fsck is recommended [ 389.753613][ T8296] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 389.763440][ T8296] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 1 [ 389.812830][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 389.837843][T13388] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.847889][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.871284][T13799] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3159'. [ 390.610380][T13807] loop6: detected capacity change from 0 to 512 [ 390.636594][T13807] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 390.663145][T13807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 390.684221][T13807] EXT4-fs (loop6): orphan cleanup on readonly fs [ 390.703110][T13807] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3158: bg 0: block 361: padding at end of block bitmap is not set [ 390.739090][T13807] EXT4-fs (loop6): Remounting filesystem read-only [ 390.755291][T13807] EXT4-fs (loop6): 1 truncate cleaned up [ 390.761384][T13807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 390.806942][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3158'. [ 390.996452][T13807] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.3158: dx entry: limit 0 != root limit 125 [ 391.008308][T13807] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.3158: Corrupt directory, running e2fsck is recommended [ 391.048445][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 391.128936][T13825] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 391.195707][T13830] SELinux: syz.6.3169 (13830) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 391.344192][T13837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3170'. [ 391.390234][T13839] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 391.614631][T13852] loop5: detected capacity change from 0 to 512 [ 392.331012][T13864] loop5: detected capacity change from 0 to 512 [ 392.338094][T13864] EXT4-fs: Ignoring removed nobh option [ 392.460884][T13864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.481190][T13864] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.3180: iget: bad i_size value: 15393162788874 [ 392.856645][T13869] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3182'. [ 393.111313][T13877] xt_TCPMSS: Only works on TCP SYN packets [ 393.123949][T13880] netlink: 'syz.1.3187': attribute type 21 has an invalid length. [ 393.392481][T13880] netlink: 'syz.1.3187': attribute type 1 has an invalid length. [ 393.400287][T13880] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3187'. [ 394.174657][T13888] loop1: detected capacity change from 0 to 512 [ 394.204601][T13886] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 394.211255][T13886] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 394.218830][T13886] vhci_hcd vhci_hcd.0: Device attached [ 394.262740][T13888] EXT4-fs (loop1): 1 orphan inode deleted [ 394.288324][ T4655] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 394.298309][ T4655] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 394.320315][T13895] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(18) [ 394.320622][T13888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.326938][T13895] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 394.327010][T13895] vhci_hcd vhci_hcd.0: Device attached [ 394.369966][T13891] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(15) [ 394.376615][T13891] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 394.384986][T13891] vhci_hcd vhci_hcd.0: Device attached [ 394.410604][T13888] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.458636][T13901] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(20) [ 394.465288][T13901] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 394.473482][T13901] vhci_hcd vhci_hcd.0: Device attached [ 394.479018][ T9] usb 13-1: new low-speed USB device number 5 using vhci_hcd [ 394.492467][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.505083][T13388] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.546731][T13906] loop1: detected capacity change from 0 to 512 [ 394.576063][T13886] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(14) [ 394.582777][T13886] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 394.590507][T13886] vhci_hcd vhci_hcd.0: Device attached [ 394.612860][ T29] audit: type=1400 audit(1748699384.922:1996): avc: denied { watch watch_reads } for pid=13910 comm="syz.5.3191" path="/288" dev="tmpfs" ino=1544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 394.636284][ T29] audit: type=1326 audit(1748699384.922:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67c26e969 code=0x7ffc0000 [ 394.660013][ T29] audit: type=1326 audit(1748699384.922:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe67c26e969 code=0x7ffc0000 [ 394.683738][ T29] audit: type=1326 audit(1748699384.922:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe67c26e9a3 code=0x7ffc0000 [ 394.707280][ T29] audit: type=1326 audit(1748699384.922:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe67c26e9a3 code=0x7ffc0000 [ 394.730825][ T29] audit: type=1326 audit(1748699384.922:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67c26e969 code=0x7ffc0000 [ 394.754496][ T29] audit: type=1326 audit(1748699384.922:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67c26e969 code=0x7ffc0000 [ 394.778022][ T29] audit: type=1326 audit(1748699384.922:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe67c26e969 code=0x7ffc0000 [ 394.801649][ T29] audit: type=1326 audit(1748699384.922:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13910 comm="syz.5.3191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe67c26e9a3 code=0x7ffc0000 [ 394.840263][T13906] EXT4-fs (loop1): 1 orphan inode deleted [ 394.840500][T13891] vhci_hcd vhci_hcd.0: pdev(6) rhport(5) sockfd(26) [ 394.846730][T13906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.852608][T13891] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 394.852738][T13891] vhci_hcd vhci_hcd.0: Device attached [ 394.878453][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 394.890300][T13906] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.948449][T13916] vhci_hcd: connection closed [ 394.948537][T13897] vhci_hcd: connection closed [ 394.948569][T13902] vhci_hcd: connection closed [ 394.958629][T13909] vhci_hcd: connection closed [ 394.959039][ T8296] vhci_hcd: stop threads [ 394.970021][T13896] vhci_hcd: connection closed [ 394.972424][ T8296] vhci_hcd: release socket [ 394.981601][ T8296] vhci_hcd: disconnect device [ 394.986502][T13889] vhci_hcd: connection reset by peer [ 395.016581][ T8296] vhci_hcd: stop threads [ 395.020903][ T8296] vhci_hcd: release socket [ 395.025422][ T8296] vhci_hcd: disconnect device [ 395.038442][ T8296] vhci_hcd: stop threads [ 395.042747][ T8296] vhci_hcd: release socket [ 395.047237][ T8296] vhci_hcd: disconnect device [ 395.052990][T13388] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.065870][ T8296] vhci_hcd: stop threads [ 395.070149][ T8296] vhci_hcd: release socket [ 395.074689][ T8296] vhci_hcd: disconnect device [ 395.093900][ T8296] vhci_hcd: stop threads [ 395.098185][ T8296] vhci_hcd: release socket [ 395.102680][ T8296] vhci_hcd: disconnect device [ 395.128198][ T8296] vhci_hcd: stop threads [ 395.132508][ T8296] vhci_hcd: release socket [ 395.136966][ T8296] vhci_hcd: disconnect device [ 395.322636][T13931] loop5: detected capacity change from 0 to 512 [ 395.329630][T13931] EXT4-fs: Ignoring removed nobh option [ 395.378084][T13931] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.404970][T13931] EXT4-fs error (device loop5): ext4_lookup:1787: inode #15: comm syz.5.3198: iget: bad i_size value: 15393162788874 [ 396.236382][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3199'. [ 396.291376][T13937] loop6: detected capacity change from 0 to 512 [ 396.396625][T13943] loop2: detected capacity change from 0 to 512 [ 396.428497][T13947] loop1: detected capacity change from 0 to 512 [ 396.452337][T13943] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 396.476612][T13945] SELinux: syz.0.3203 (13945) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 396.504678][T13943] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 396.531139][T13943] EXT4-fs (loop2): orphan cleanup on readonly fs [ 396.547326][T13943] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3202: bg 0: block 361: padding at end of block bitmap is not set [ 396.606595][T13943] EXT4-fs (loop2): Remounting filesystem read-only [ 396.616702][T13937] EXT4-fs (loop6): 1 orphan inode deleted [ 396.628659][T13943] EXT4-fs (loop2): 1 truncate cleaned up [ 396.640461][T13943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 396.652723][ T37] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 396.686182][T13956] tipc: Started in network mode [ 396.691194][T13956] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 396.702878][T13937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.843670][T13956] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:ffff:ffff [ 396.851774][T13956] tipc: Enabled bearer , priority 10 [ 396.901146][T13961] FAULT_INJECTION: forcing a failure. [ 396.901146][T13961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.914415][T13961] CPU: 1 UID: 0 PID: 13961 Comm: syz.0.3207 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 396.914446][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.914463][T13961] Call Trace: [ 396.914470][T13961] [ 396.914480][T13961] __dump_stack+0x1d/0x30 [ 396.914503][T13961] dump_stack_lvl+0xe8/0x140 [ 396.914522][T13961] dump_stack+0x15/0x1b [ 396.914568][T13961] should_fail_ex+0x265/0x280 [ 396.914653][T13961] should_fail+0xb/0x20 [ 396.914692][T13961] should_fail_usercopy+0x1a/0x20 [ 396.914739][T13961] _copy_from_user+0x1c/0xb0 [ 396.914769][T13961] ___sys_sendmsg+0xc1/0x1d0 [ 396.914834][T13961] __sys_sendmmsg+0x178/0x300 [ 396.914962][T13961] __x64_sys_sendmmsg+0x57/0x70 [ 396.914993][T13961] x64_sys_call+0x2f2f/0x2fb0 [ 396.915015][T13961] do_syscall_64+0xd2/0x200 [ 396.915065][T13961] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 396.915100][T13961] ? clear_bhb_loop+0x40/0x90 [ 396.915128][T13961] ? clear_bhb_loop+0x40/0x90 [ 396.915158][T13961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.915194][T13961] RIP: 0033:0x7fb9996ce969 [ 396.915214][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.915234][T13961] RSP: 002b:00007fb997d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 396.915253][T13961] RAX: ffffffffffffffda RBX: 00007fb9998f5fa0 RCX: 00007fb9996ce969 [ 396.915266][T13961] RDX: 0000000000000002 RSI: 0000200000001500 RDI: 0000000000000003 [ 396.915278][T13961] RBP: 00007fb997d37090 R08: 0000000000000000 R09: 0000000000000000 [ 396.915305][T13961] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.915321][T13961] R13: 0000000000000000 R14: 00007fb9998f5fa0 R15: 00007ffce2b8df88 [ 396.915346][T13961] [ 396.916214][T13186] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 397.106815][T13937] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.283832][ T9550] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.315900][ T9981] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.404232][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3213'. [ 397.429887][T13977] FAULT_INJECTION: forcing a failure. [ 397.429887][T13977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.443016][T13977] CPU: 0 UID: 0 PID: 13977 Comm: syz.2.3216 Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 397.443055][T13977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.443068][T13977] Call Trace: [ 397.443075][T13977] [ 397.443099][T13977] __dump_stack+0x1d/0x30 [ 397.443127][T13977] dump_stack_lvl+0xe8/0x140 [ 397.443152][T13977] dump_stack+0x15/0x1b [ 397.443174][T13977] should_fail_ex+0x265/0x280 [ 397.443213][T13977] should_fail+0xb/0x20 [ 397.443257][T13977] should_fail_usercopy+0x1a/0x20 [ 397.443282][T13977] _copy_from_user+0x1c/0xb0 [ 397.443312][T13977] ___sys_sendmsg+0xc1/0x1d0 [ 397.443360][T13977] __x64_sys_sendmsg+0xd4/0x160 [ 397.443424][T13977] x64_sys_call+0x2999/0x2fb0 [ 397.443453][T13977] do_syscall_64+0xd2/0x200 [ 397.443486][T13977] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 397.443527][T13977] ? clear_bhb_loop+0x40/0x90 [ 397.443600][T13977] ? clear_bhb_loop+0x40/0x90 [ 397.443622][T13977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.443651][T13977] RIP: 0033:0x7f7bc194e969 [ 397.443669][T13977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.443687][T13977] RSP: 002b:00007f7bbffb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.443778][T13977] RAX: ffffffffffffffda RBX: 00007f7bc1b75fa0 RCX: 00007f7bc194e969 [ 397.443795][T13977] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 397.443808][T13977] RBP: 00007f7bbffb7090 R08: 0000000000000000 R09: 0000000000000000 [ 397.443820][T13977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.443834][T13977] R13: 0000000000000000 R14: 00007f7bc1b75fa0 R15: 00007ffe4668cb38 [ 397.443858][T13977] [ 397.639992][T13980] netdevsim netdevsim5: Direct firmware load for  failed with error -2 [ 397.688462][T13988] netlink: 'syz.5.3219': attribute type 21 has an invalid length. [ 397.689532][T13987] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 397.703588][T13988] netlink: 'syz.5.3219': attribute type 1 has an invalid length. [ 397.712518][T13988] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3219'. [ 398.450982][ T3451] tipc: Node number set to 1 [ 398.893908][T14009] loop6: detected capacity change from 0 to 764 [ 398.923381][T14009] Symlink component flag not implemented [ 398.944334][T14009] Symlink component flag not implemented (7) [ 398.950815][T14009] Symlink component flag not implemented (7) [ 398.966686][T14014] xt_TCPMSS: Only works on TCP SYN packets [ 399.064911][T14013] SELinux: syz.2.3230 (14013) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 399.079714][T14022] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 399.232049][T14032] netlink: 'syz.0.3233': attribute type 21 has an invalid length. [ 399.256128][T13186] ================================================================== [ 399.264380][T13186] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 399.271909][T13186] [ 399.274260][T13186] read-write to 0xffff88811901d848 of 8 bytes by task 14027 on cpu 1: [ 399.282450][T13186] inode_add_bytes+0x47/0xe0 [ 399.287098][T13186] __dquot_alloc_space+0x180/0x8a0 [ 399.292253][T13186] shmem_inode_acct_blocks+0x129/0x240 [ 399.297756][T13186] shmem_get_folio_gfp+0x5a7/0xd60 [ 399.302924][T13186] shmem_write_begin+0xa8/0x190 [ 399.307841][T13186] generic_perform_write+0x184/0x490 [ 399.313173][T13186] shmem_file_write_iter+0xc5/0xf0 [ 399.318503][T13186] __kernel_write_iter+0x256/0x4c0 [ 399.323658][T13186] dump_user_range+0x407/0x8c0 [ 399.328473][T13186] elf_core_dump+0x1dc2/0x1f80 [ 399.333354][T13186] do_coredump+0x1dfa/0x27b0 [ 399.337994][T13186] get_signal+0xd85/0xf70 [ 399.342366][T13186] arch_do_signal_or_restart+0x96/0x480 [ 399.347948][T13186] irqentry_exit_to_user_mode+0x5e/0xa0 [ 399.353535][T13186] irqentry_exit+0x12/0x50 [ 399.357976][T13186] asm_exc_page_fault+0x26/0x30 [ 399.362839][T13186] [ 399.365166][T13186] read to 0xffff88811901d848 of 8 bytes by task 13186 on cpu 0: [ 399.372845][T13186] generic_fillattr+0x27d/0x340 [ 399.377715][T13186] shmem_getattr+0x181/0x200 [ 399.382319][T13186] vfs_getattr_nosec+0x143/0x1e0 [ 399.387276][T13186] vfs_statx+0x113/0x390 [ 399.391530][T13186] vfs_fstatat+0x115/0x170 [ 399.395961][T13186] __se_sys_newfstatat+0x55/0x260 [ 399.400999][T13186] __x64_sys_newfstatat+0x55/0x70 [ 399.406038][T13186] x64_sys_call+0x2c22/0x2fb0 [ 399.410748][T13186] do_syscall_64+0xd2/0x200 [ 399.415266][T13186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.421186][T13186] [ 399.423523][T13186] value changed: 0x0000000000003b60 -> 0x0000000000003b80 [ 399.430632][T13186] [ 399.432954][T13186] Reported by Kernel Concurrency Sanitizer on: [ 399.439106][T13186] CPU: 0 UID: 0 PID: 13186 Comm: syz-executor Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 399.451452][T13186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.461527][T13186] ================================================================== [ 399.521927][T14032] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 399.529749][T14032] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3233'. [ 399.613633][ T9] usb 13-1: enqueue for inactive port 0 [ 399.837324][ T9] usb 13-1: enqueue for inactive port 0 [ 399.916161][ T9] vhci_hcd: vhci_device speed not set