last executing test programs: 15m44.046507853s ago: executing program 32 (id=2369): syz_init_net_socket$llc(0x1a, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xae00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x8, 0x2, {0xfffffffc, 0x0, 0x10000000}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6b}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r1}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x7}) fsmount(r4, 0x0, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) close(0x3) get_mempolicy(&(0x7f00000004c0), &(0x7f00000000c0), 0x7fff, &(0x7f0000ff1000/0x1000)=nil, 0x2) 14m21.101748093s ago: executing program 33 (id=2888): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) uname(&(0x7f0000019240)=""/129) 12m39.139325105s ago: executing program 5 (id=3338): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) 12m37.121179519s ago: executing program 5 (id=3350): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000048efa87e58a2470a0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x2) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x40400) read(r6, &(0x7f0000000240)=""/182, 0xb6) 12m36.435128143s ago: executing program 5 (id=3353): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 12m34.556545906s ago: executing program 34 (id=3353): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 12m26.389191992s ago: executing program 35 (id=3382): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280)={[{@user_xattr}]}, 0x9, 0x537, &(0x7f0000000fc0)="$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") r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 11m4.943666434s ago: executing program 36 (id=3786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 10m37.508025991s ago: executing program 37 (id=3898): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 10m36.567368759s ago: executing program 7 (id=3906): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x4, 0x6, 0x6d, @mcast1, @private0, 0x1, 0x8000, 0x7, 0x9}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='console\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000800000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nvram(0xffffffffffffff9c, 0x0, 0x12580, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x80002, 0x88) sendmsg$sock(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d2a1936f1019fe59ca076dd5dc54e2d64e74ee35f004bb544fda1c24b704ec8ce64e922ba5804243c11640f4cce1111ba8ac5a3770deb749a4fa46b0896a1e83a4cfff24256e929950939a449527c62b51cf8345ad0701c7df6722e9a47b8b30d1c55f0352f3bcc7f15ca2fbffa107894cd31e07b71a0b58f5b803a58230819b1b7a8a5d0024f9d52979697e76fb528926b3", 0x92}], 0x1, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfb}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0xd8}, 0x4) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x952) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x7e) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x42408058) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {}, {0xd1, 0x11, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x44088}, 0x4000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) r10 = syz_io_uring_setup(0x69fa, &(0x7f0000000040)={0x0, 0x361c, 0x8000, 0x3, 0x338, 0x0, r8}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r10, 0x3833, 0x813c, 0x10, &(0x7f0000000200), 0x8) sysfs$3(0x3) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r8, r11, 0x60000000000, 0x1000000000000000) sendmmsg$inet(r5, &(0x7f0000000b00), 0x0, 0x24040814) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 10m34.944226068s ago: executing program 7 (id=3909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x2801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x40}}, 0x0) 10m34.180898863s ago: executing program 7 (id=3911): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xac}}, './file1/file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7ccd, 0x0, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x1dc, 0x0, 0x0, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0x0, 0xff80}}]}]}}}}}}}, 0x0) 10m33.721729015s ago: executing program 4 (id=3913): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r1, 0x40187014, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) r3 = socket$inet6(0x10, 0x2, 0x4) waitid(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc879", 0x47, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000218e0000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, 0x0, 0x4886) socket$nl_netfilter(0x10, 0x3, 0xc) setreuid(0xee00, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 10m32.50281541s ago: executing program 4 (id=3918): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1], 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 10m32.278321975s ago: executing program 7 (id=3919): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) pwrite64(r1, 0x0, 0x0, 0x8000c61) 10m31.884361739s ago: executing program 4 (id=3921): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="b10af9eb61b461319313dde5d4b85baaefb7a4117a97708e89043ec42716e253e02d0b89a250e56cd722c234c006aae91d3653df738a35dd26e9b89fff2e6761dda07c010cc29430bdc1e8c2b2c84a0d", 0x50, r2) sendmsg$inet(r1, 0x0, 0x300048c1) sendto$l2tp6(r0, &(0x7f0000000840)="cbb238b1591ccc0c6009b852ad17af2646eab87e851cb31d04c3c47ee7d670996fa9b65f12ddc65c51662daaac0bb97ce4efadd823c87263583bb6590328942c2feb75524922896f89e3a43cf7f66a559144a713167031323c1b460b6fd29b774f25798e697e45a7ddad7ec6a107c90f2ede13f410eed3d46539d707fec1b87394a108c9c05f173469fea6b542df4ac58b6643c5f2e534cb0b330d72b02dfe3c31cd3d2498baf6193e794eba26619ec3d2047e9f2720ae56582bb184060523f4465c86ff4c1b99d2b36f", 0xca, 0x40000, &(0x7f0000000400)={0xa, 0x0, 0xf, @mcast1, 0xdff, 0x4}, 0x20) r3 = socket$inet(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r10, @ANYBLOB="438fcbe500f0000049fdaecc829a36f844480f0600"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0x4, 0xd83, 0x2, @private2, @remote, 0x8000, 0x40, 0x6, 0x87e}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x9c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8800}, 0x44801) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x0) 10m31.227974443s ago: executing program 7 (id=3923): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xf, 0x7}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "8b09da04e2e9355ed3f1bc7db63360be"}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 10m23.268302529s ago: executing program 4 (id=3941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB], 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 10m21.326483504s ago: executing program 39 (id=3941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB], 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 9m59.714368446s ago: executing program 5 (id=3942): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) pwrite64(r1, 0x0, 0x0, 0x8000c61) 9m58.80866021s ago: executing program 5 (id=3987): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49e1, 0x0, 0x2, 0xbfdf, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x800, 0x740, 0x22, "0000000000000000010000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x44) 9m58.227890157s ago: executing program 5 (id=3990): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000440)={0x200000, 0x200001, 0x4, 0x4000, 0x1}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x800) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r2) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f00000008c0)='wchan\x00') pread64(r4, &(0x7f0000000280)=""/252, 0xfc, 0x0) 9m56.573945539s ago: executing program 40 (id=3990): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000440)={0x200000, 0x200001, 0x4, 0x4000, 0x1}) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x800) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r2) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f00000008c0)='wchan\x00') pread64(r4, &(0x7f0000000280)=""/252, 0xfc, 0x0) 8m51.906076419s ago: executing program 2 (id=4339): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, r3, 0xb}}, 0x48) 8m51.371962245s ago: executing program 2 (id=4345): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 8m50.754613157s ago: executing program 2 (id=4350): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x3) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x7fff}) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000200)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 8m49.405072132s ago: executing program 2 (id=4359): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x558, &(0x7f00000009c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0xc000, 0x132) creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 8m48.382732403s ago: executing program 2 (id=4367): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="b10af9eb61b461319313dde5d4b85baaefb7a4117a97708e89043ec42716e253e02d0b89a250e56cd722c234c006aae91d3653df738a35dd26e9b89fff2e6761dda07c010cc29430bdc1e8c2b2c84a0d", 0x50, r3) sendmsg$inet(r2, 0x0, 0x300048c1) sendto$l2tp6(r0, &(0x7f0000000840)="cbb238b1591ccc0c6009b852ad17af2646eab87e851cb31d04c3c47ee7d670996fa9b65f12ddc65c51662daaac0bb97ce4efadd823c87263583bb6590328942c2feb75524922896f89e3a43cf7f66a559144a713167031323c1b460b6fd29b774f25798e697e45a7ddad7ec6a107c90f2ede13f410eed3d46539d707fec1b87394a108c9c05f173469fea6b542df4ac58b6643c5f2e534cb0b330d72b02dfe3c31cd3d2498baf6193e794eba26619ec3d2047e9f2720ae56582bb184060523f4465c86ff4c1b99d2b36f", 0xca, 0x40000, &(0x7f0000000400)={0xa, 0x0, 0xf, @mcast1, 0xdff, 0x4}, 0x20) r4 = socket$inet(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r10, @ANYBLOB="438fcbe500f0000049fdaecc829a36f844480f0600"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0x4, 0xd83, 0x2, @private2, @remote, 0x8000, 0x40, 0x6, 0x87e}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x9c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8800}, 0x44801) sendmsg$can_raw(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x1d, r10}, 0x10, &(0x7f0000000380)={&(0x7f0000000500)=@canfd={{0x1, 0x1}, 0x30, 0x1, 0x0, 0x0, "4f972225cb68929e5f923ba808d2e5cb9ceb371ecf27ee42803a000971ea6d925f48b8408f084232b69f3ddfddfce5128e7c3f8f002cad923fdada683db5ed86"}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x8010) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x0) 8m46.299557123s ago: executing program 2 (id=4378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127b, &(0x7f00000011c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r5 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r5, 0x3a, 0x50, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="2f0201060000000066affa88000000f8ff20ff7fffffff000101"], 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000f30040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x20040809}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m44.847989135s ago: executing program 41 (id=4378): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127b, &(0x7f00000011c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) r5 = socket$inet6(0xa, 0x80803, 0x84) getsockopt$inet6_int(r5, 0x3a, 0x50, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="2f0201060000000066affa88000000f8ff20ff7fffffff000101"], 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000f30040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x20040809}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m10.157430459s ago: executing program 1 (id=5553): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x0, 0x2d0, 0x2d0, 0x230, 0x138, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x7a00, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x7f00007f, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@multicast2, @multicast2, 0xff, 0x0, 'veth1_vlan\x00', 'veth1_macvtap\x00', {}, {0xff}, 0x0, 0x1, 0xc1513f04b421a003}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0x0, 0x5c6cad92e6a38bac], 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x56, 0x9, 0xb, 0x3, 0x7ff1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0xff}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 5m9.591007549s ago: executing program 1 (id=5557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49e1, 0x0, 0x2, 0xbfdf, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x800, 0x740, 0x22, "0000000000000000010000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x44) 5m9.108428044s ago: executing program 1 (id=5561): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, 0x0, 0x0) 5m8.660425963s ago: executing program 1 (id=5565): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x2900) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x10, 0x80003, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) 5m8.085193071s ago: executing program 1 (id=5567): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000844, &(0x7f00000001c0)={[{@noload}, {@sb}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xe2780, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000000)=0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r6, &(0x7f0000000b00), 0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x179, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x24000015}, 0x200400c4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x483, &(0x7f0000000200)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) readv(r9, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 5m6.758561961s ago: executing program 1 (id=5576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000e9, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x1000, @mcast2, 0x80ac}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGblE7hw4Xu4cy+48Q0EH8CdgxSO3NzbJLZp2rSmlfr7bXo45/vu+U7uabO43NPPXxsePHw6evz869+i1cqi1otevMiiE7U4lioBANwKL1KKPy71/V6vbaomAGCzFr7/G2eEbJ/uenvTZQEAG/ThRx+/f39/f++DPG9FDL8d97Mof5bj9x/HkxjEo7gb7TiaPwtIqWy/+97+XtTzQifuDCfjfpE5/OyXxccGRX432tFZnt/NSwv5k3G/ES9HZFnEk15RyL1oxyun8ovxvXtL8qPfjDda1SKL+XejHb9+EU9jEA+nzzTm83/TzfN30nd/fvVJEVzkZ5Nxf3saN5e2rvveAAAAAAAAAAAAAAAAAAAAAABwe+3mM524Myy6qvN3to6m47v/GJ+er1Objpf5WURz2jhxPtAkxQ/H5+vczfM8ZWX8/Hyferxaj/qNLRwAAAAAAAAAAAAAAAAAAAD+Q0bPvjx4MBg8OvxXGtVL/rPX+i97nd5Cz+uxOnh7rbliqwovaj0Z0/350+Gsp1jEZYofN/KIVTU3TvW8VNRz/pX/SimlLIu42m1qXGSucxo7q2OKD/in73fePHiQnfcZto5v3I+LQ804HD07cU8jW6fCtNb2a66IaVY75kLX2bniL9Fbv5eTVT3ZGqtoVI04a/u11trP1/c3CAAAAAAAAAAAAAAAAAAAKM1f+l0y+Hxlam1jRQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANZv///81GpMqeXlMSmky62nG4eiGlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wN8BAAD//7DYbww=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) setsockopt(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)="8b4ffb42c583d436", 0x8) socket$inet_udplite(0x2, 0x2, 0x88) 4m50.875126606s ago: executing program 42 (id=5576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000e9, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x1000, @mcast2, 0x80ac}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) setsockopt(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000080)="8b4ffb42c583d436", 0x8) socket$inet_udplite(0x2, 0x2, 0x88) 12.396317881s ago: executing program 3 (id=6782): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a"], 0x48}}, 0x40000) 11.80511384s ago: executing program 3 (id=6785): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @random="21e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0xb7, 0xb}}}}}, 0x0) 11.356526968s ago: executing program 3 (id=6788): io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0xffffffff, 0x2, 0x0, 0x302}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x63d, 0x0, 0xff, 0xc, "00000008000000fe630500000000000000001f"}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x7f}, 0x8) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000380)=0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r6, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 10.046918293s ago: executing program 3 (id=6792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001d0100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095aea4b500b6be32a335a123fbc253f5d4297b42a297cb4d0a164bf15bb22023a7c7d90bf2b6b7a0c9be893ebf39053e01f53af3d87f3c91908fde3ab7089b8a8c1efb9e5dc0e2378e3a4ef562e2785eb17af4673a65e98b6ab90734496e56801ae6ad6025570f6e1ccacd7ef47a5e9a9eb17fa88c8078639e9e115dc970925a05ba5df5b09cfb9897a985445fcbc7be45150b9976bb8e420ae4617c23944003d15dd885211ce076300240b6a2b34df776723f39210ee74a1591b067baa4c30dcc2e8b844b650b7a15130e58ea4f839bf8c2ea60a8df923e870ccbd588c3600ef3b1bd6f3852f0a62e58b345fdc07e", @ANYRESOCT=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000140)='netlink_extack\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d80080003"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 9.486983045s ago: executing program 3 (id=6796): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 8.836405774s ago: executing program 3 (id=6799): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000010000002000000a6000000ffffff859500007b100000008500000076000000"], &(0x7f0000000000)='GPL\x00', 0x7, 0x92, &(0x7f0000000040)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 8.721065223s ago: executing program 0 (id=6800): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x144000, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.915053799s ago: executing program 0 (id=6802): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="b10af9eb61b461319313dde5d4b85baaefb7a4117a97708e89043ec42716e253e02d0b89a250e56cd722c234c006aae91d3653df738a35dd26e9b89fff2e6761dda07c010cc29430bdc1e8c2b2c84a0d", 0x50, r2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300048c1) sendto$l2tp6(r0, &(0x7f0000000840)="cbb238b1591ccc0c6009b852ad17af2646eab87e851cb31d04c3c47ee7d670996fa9b65f12ddc65c51662daaac0bb97ce4efadd823c87263583bb6590328942c2feb75524922896f89e3a43cf7f66a559144a713167031323c1b460b6fd29b774f25798e697e45a7ddad7ec6a107c90f2ede13f410eed3d46539d707fec1b87394a108c9c05f173469fea6b542df4ac58b6643c5f2e534cb0b330d72b02dfe3c31cd3d2498baf6193e794eba26619ec3d2047e9f2720ae56582bb184060523f446", 0xc1, 0x40000, &(0x7f0000000400)={0xa, 0x0, 0xf, @mcast1, 0xdff, 0x4}, 0x20) r3 = socket$inet(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r10, @ANYBLOB="438fcbe500f0000049fdaecc829a36f844480f0600"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0x4, 0xd83, 0x2, @private2, @remote, 0x8000, 0x40, 0x6, 0x87e}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x9c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8800}, 0x44801) sendmsg$can_raw(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x1d, r10}, 0x10, &(0x7f0000000380)={&(0x7f0000000500)=@canfd={{0x1, 0x1}, 0x30, 0x1, 0x0, 0x0, "4f972225cb68929e5f923ba808d2e5cb9ceb371ecf27ee42803a000971ea6d925f48b8408f084232b69f3ddfddfce5128e7c3f8f002cad923fdada683db5ed86"}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x8010) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x0) 6.608765768s ago: executing program 0 (id=6807): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.339837108s ago: executing program 8 (id=6808): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 5.311994468s ago: executing program 8 (id=6811): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r1) 5.167304121s ago: executing program 6 (id=6812): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xb6, &(0x7f0000000080)=""/182, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0xdb3a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.991763408s ago: executing program 9 (id=6813): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)}], 0x1) 4.575800682s ago: executing program 0 (id=6814): io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0xffffffff, 0x2, 0x0, 0x302}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x63d, 0x0, 0xff, 0xc, "00000008000000fe630500000000000000001f"}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x7f}, 0x8) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000380)=0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r6, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.996282343s ago: executing program 9 (id=6815): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, 0x0, 0x0) 3.995757668s ago: executing program 8 (id=6816): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="b10af9eb61b461319313dde5d4b85baaefb7a4117a97708e89043ec42716e253e02d0b89a250e56cd722c234c006aae91d3653df738a35dd26e9b89fff2e6761dda07c010cc29430bdc1e8c2b2c84a0d", 0x50, r2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300048c1) sendto$l2tp6(r0, &(0x7f0000000840)="cbb238b1591ccc0c6009b852ad17af2646eab87e851cb31d04c3c47ee7d670996fa9b65f12ddc65c51662daaac0bb97ce4efadd823c87263583bb6590328942c2feb75524922896f89e3a43cf7f66a559144a713167031323c1b460b6fd29b774f25798e697e45a7ddad7ec6a107c90f2ede13f410eed3d46539d707fec1b87394a108c9c05f173469fea6b542df4ac58b6643c5f2e534cb0b330d72b02dfe3c31cd3d2498baf6193e794eba26619ec3d2047e9f2720ae56582bb184060523f446", 0xc1, 0x40000, &(0x7f0000000400)={0xa, 0x0, 0xf, @mcast1, 0xdff, 0x4}, 0x20) r3 = socket$inet(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r10, @ANYBLOB="438fcbe500f0000049fdaecc829a36f844480f0600"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0x4, 0xd83, 0x2, @private2, @remote, 0x8000, 0x40, 0x6, 0x87e}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x9c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8800}, 0x44801) sendmsg$can_raw(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x1d, r10}, 0x10, &(0x7f0000000380)={&(0x7f0000000500)=@canfd={{0x1, 0x1}, 0x30, 0x1, 0x0, 0x0, "4f972225cb68929e5f923ba808d2e5cb9ceb371ecf27ee42803a000971ea6d925f48b8408f084232b69f3ddfddfce5128e7c3f8f002cad923fdada683db5ed86"}, 0x48}, 0x1, 0x0, 0x0, 0x24040800}, 0x8010) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) set_mempolicy_home_node(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x0) 3.618254762s ago: executing program 6 (id=6817): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) 3.285082625s ago: executing program 9 (id=6818): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a"], 0x48}}, 0x40000) 2.994208519s ago: executing program 0 (id=6819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000140)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d80080003"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 2.744064649s ago: executing program 6 (id=6820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.503863865s ago: executing program 9 (id=6821): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x200}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2.460160694s ago: executing program 8 (id=6822): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0xfffc, 0x2}, {}, {0x0, 0x0, 0x1}}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@dev, 0xffffffff}}, 0xe8) syz_emit_ethernet(0x0, 0x0, 0x0) 2.204056955s ago: executing program 0 (id=6823): unshare(0x68040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000008b, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getrusage(0xe31d3cf2295af082, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000bc0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="b8030000", @ANYRESHEX=r2, @ANYBLOB="080026bd7002fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="f000028008000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000040000100000001006c625f706f72745f737461747300000000000000000000000000000000000000000003000b000000000004000300000000000600", @ANYRESOCT=0x0, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000e1fd04000600000c0300000005000403070000000000080b01000100070001080300000008000100", @ANYRES32, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000", @ANYRES32=0x0, @ANYRESDEC=r1], 0x3b8}, 0x1, 0x0, 0x0, 0x4000014}, 0x200400c1) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 1.97467747s ago: executing program 6 (id=6824): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@block_validity}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)}], 0x1) 1.587546048s ago: executing program 9 (id=6825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 1.587334866s ago: executing program 8 (id=6826): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000500)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) 710.58213ms ago: executing program 6 (id=6827): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, 0x0, 0x0) 664.06879ms ago: executing program 8 (id=6828): io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0xffffffff, 0x2, 0x0, 0x302}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000240)={0x0, 0x63d, 0x0, 0xff, 0xc, "00000008000000fe630500000000000000001f"}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x7f}, 0x8) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000380)=0x1) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r6, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 420.305629ms ago: executing program 9 (id=6829): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) 0s ago: executing program 6 (id=6830): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000005000000bfa300000000000007030000007effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67dafe6c8dc525d78c07f34e4d5b3185b310efcfa89147a09000000f110026e6d2ef831ab7ea0c24f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd71a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f70700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba7da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babf8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa79fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007981699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a9825c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f54b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663e40a664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867db2f6f51ef5bac2c52c08c879a49f3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c02b53d44bd84bf6770157e96bbb96b5e1f165c87e7ad68a3600b3d357fa9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3d0bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9fd04bdc7e5fee4bd52db996e633792118efdb6b88023e80da74fdf723c7f0000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffff4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): utor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1440.386821][T21990] smc: net device bond0 erased user defined pnetid SYZ0 [ 1440.601432][ T30] audit: type=1326 audit(1741984711.522:14275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.3.5807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1440.790828][ T30] audit: type=1326 audit(1741984711.562:14276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.3.5807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1440.813816][ T30] audit: type=1326 audit(1741984711.562:14277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.3.5807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1440.837035][ T30] audit: type=1326 audit(1741984711.562:14278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21995 comm="syz.3.5807" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1441.141236][T21999] loop6: detected capacity change from 0 to 512 [ 1441.149956][T21999] EXT4-fs: quotafile must be on filesystem root [ 1441.655673][T22007] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1442.078560][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5813'. [ 1442.296404][T22017] blktrace: Concurrent blktraces are not allowed on sg0 [ 1442.527479][T22021] hsr_slave_0: left promiscuous mode [ 1442.551165][T22021] hsr_slave_1: left promiscuous mode [ 1442.571270][T22023] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5818'. [ 1442.581197][T22023] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5818'. [ 1442.592716][T22023] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5818'. [ 1442.653497][T22025] netlink: 'syz.0.5817': attribute type 4 has an invalid length. [ 1443.088338][T22029] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.244730][T22029] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.297182][T22031] smc: net device bond0 applied user defined pnetid SYZ0 [ 1443.327402][T22034] smc: net device bond0 erased user defined pnetid SYZ0 [ 1443.355036][T22029] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.437325][T22029] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.759140][T22029] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.791514][T22029] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.826708][T22029] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.861565][T22029] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.332478][T22044] loop8: detected capacity change from 0 to 512 [ 1444.373265][T22044] EXT4-fs: quotafile must be on filesystem root [ 1444.603797][T22044] serio: Serial port ptm0 [ 1444.658137][T22051] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1444.766681][T22049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5829'. [ 1444.843454][T22055] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5831'. [ 1444.852940][T22055] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5831'. [ 1444.862314][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5831'. [ 1445.125565][T22059] netlink: 'syz.0.5832': attribute type 4 has an invalid length. [ 1445.635145][T22066] smc: net device bond0 applied user defined pnetid SYZ0 [ 1445.665097][T22066] smc: net device bond0 erased user defined pnetid SYZ0 [ 1446.471626][T22074] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.635959][T22074] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.758078][T22074] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.895878][T22074] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1447.182536][T22074] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.213329][T22074] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.241646][T22074] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.269562][T22074] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.655587][T22086] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5843'. [ 1448.071427][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1448.150526][T22091] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5845'. [ 1448.159917][T22091] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5845'. [ 1448.169350][T22091] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5845'. [ 1448.785919][T22093] loop0: detected capacity change from 0 to 512 [ 1448.838293][T22093] EXT4-fs: quotafile must be on filesystem root [ 1449.003382][T22097] smc: net device bond0 applied user defined pnetid SYZ0 [ 1449.033142][T22097] smc: net device bond0 erased user defined pnetid SYZ0 [ 1449.114882][T22093] serio: Serial port ptm0 [ 1449.122077][ T5844] IPVS: starting estimator thread 0... [ 1449.174700][T22099] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1449.224745][ T4674] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.241304][T22098] IPVS: using max 240 ests per chain, 12000 per kthread [ 1449.300855][ T4674] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.361599][ T4674] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.495617][ T4674] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.743300][T22112] netlink: 'syz.3.5850': attribute type 4 has an invalid length. [ 1450.901286][ T4674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.957256][ T4674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1451.025547][ T4674] bond0 (unregistering): Released all slaves [ 1451.557607][T22120] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.209785][T22120] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.292348][ T4674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1452.303417][ T4674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1452.347315][T22128] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5858'. [ 1452.353845][ T4674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1452.357414][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5858'. [ 1452.364159][ T4674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1452.373212][T22128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5858'. [ 1452.456367][ T4674] veth1_macvtap: left promiscuous mode [ 1452.462384][ T4674] veth0_macvtap: left promiscuous mode [ 1452.468326][ T4674] veth1_vlan: left promiscuous mode [ 1452.474375][ T4674] veth0_vlan: left promiscuous mode [ 1453.158430][T22134] loop6: detected capacity change from 0 to 512 [ 1453.167482][T22134] EXT4-fs: quotafile must be on filesystem root [ 1453.183841][ T4674] team0 (unregistering): Port device team_slave_1 removed [ 1453.255690][ T4674] team0 (unregistering): Port device team_slave_0 removed [ 1453.277179][T22135] serio: Serial port ptm0 [ 1453.399135][T22137] serio: Serial port ptm0 [ 1453.453435][T22138] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1453.655331][T22120] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.677594][T22130] smc: net device bond0 applied user defined pnetid SYZ0 [ 1453.686367][T22131] smc: net device bond0 erased user defined pnetid SYZ0 [ 1453.858576][T22120] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.064747][T22120] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.092910][T22120] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.121888][T22120] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.150577][T22120] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1454.402894][ T4674] IPVS: stop unused estimator thread 0... [ 1454.545055][T22148] netlink: 'syz.0.5865': attribute type 4 has an invalid length. [ 1455.034713][T22158] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5870'. [ 1455.044539][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5870'. [ 1455.053872][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5870'. [ 1455.668633][T22171] loop0: detected capacity change from 0 to 512 [ 1455.714697][T22171] EXT4-fs: quotafile must be on filesystem root [ 1455.722516][T22174] smc: net device bond0 applied user defined pnetid SYZ0 [ 1455.747447][T22174] smc: net device bond0 erased user defined pnetid SYZ0 [ 1455.907729][T22171] serio: Serial port ptm0 [ 1455.962708][T22177] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1456.145428][ T30] audit: type=1326 audit(1741984727.072:14279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22178 comm="syz.9.5877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1456.168450][ T30] audit: type=1326 audit(1741984727.072:14280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22178 comm="syz.9.5877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1456.191503][ T30] audit: type=1326 audit(1741984727.072:14281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22178 comm="syz.9.5877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1456.215833][ T30] audit: type=1326 audit(1741984727.102:14282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22178 comm="syz.9.5877" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1456.324875][T22181] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.423799][T22181] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.527454][T22181] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.673193][T22181] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.958652][T22192] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5883'. [ 1456.968806][T22192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5883'. [ 1456.978200][T22192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5883'. [ 1457.183335][T22195] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5884'. [ 1457.663709][T22181] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.691953][T22181] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.720443][T22181] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.750955][T22181] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.808802][T22206] smc: net device bond0 applied user defined pnetid SYZ0 [ 1457.819417][T22206] smc: net device bond0 erased user defined pnetid SYZ0 [ 1458.285331][T22212] loop0: detected capacity change from 0 to 128 [ 1458.386042][T22214] loop8: detected capacity change from 0 to 512 [ 1458.413434][T22214] EXT4-fs: quotafile must be on filesystem root [ 1458.529932][T22214] serio: Serial port ptm0 [ 1458.602221][T22219] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1458.797447][T22222] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1458.807946][T22222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1459.453429][T22234] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.549262][T22234] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.646819][T22234] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.733339][T22234] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.897487][T22238] loop8: detected capacity change from 0 to 1024 [ 1459.920880][T22238] EXT4-fs: inline encryption not supported [ 1459.935245][T22238] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1460.141193][T22238] EXT4-fs error (device loop8): ext4_map_blocks:705: inode #3: block 1: comm syz.8.5903: lblock 1 mapped to illegal pblock 1 (length 1) [ 1460.164057][T22238] Quota error (device loop8): write_blk: dquota write failed [ 1460.172378][T22238] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1460.182950][T22238] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.5903: Failed to acquire dquot type 0 [ 1460.219769][T22238] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.5903: Freeing blocks not in datazone - block = 0, count = 4096 [ 1460.241123][T22238] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.5903: Invalid inode bitmap blk 0 in block_group 0 [ 1460.261481][T22238] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 1460.275602][T22238] EXT4-fs (loop8): 1 orphan inode deleted [ 1460.284468][T22238] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1460.308477][ T4674] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 1460.330636][ T4674] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 1460.339685][ T4674] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:18: Failed to release dquot type 0 [ 1460.565288][T22238] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1461.021415][ T30] audit: type=1326 audit(1741984731.832:14283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22236 comm="syz.8.5903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1461.044411][ T30] audit: type=1326 audit(1741984731.862:14284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22236 comm="syz.8.5903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1461.067389][ T30] audit: type=1326 audit(1741984731.862:14285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22236 comm="syz.8.5903" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1461.938676][T15200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1462.220604][T22234] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.250969][T22234] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.278383][T22234] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.306220][T22234] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1462.591484][T22258] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5911'. [ 1462.601584][T22258] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5911'. [ 1463.074524][T22262] loop3: detected capacity change from 0 to 512 [ 1463.085199][T22262] EXT4-fs: quotafile must be on filesystem root [ 1463.293446][T22262] serio: Serial port ptm0 [ 1463.348657][T22267] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1463.589584][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1463.589660][ T30] audit: type=1326 audit(1741984734.512:14291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.8.5916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1463.691924][ T30] audit: type=1326 audit(1741984734.572:14292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.8.5916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1463.715533][ T30] audit: type=1326 audit(1741984734.572:14293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.8.5916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1463.743790][ T30] audit: type=1326 audit(1741984734.572:14294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.8.5916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1463.766580][ T30] audit: type=1326 audit(1741984734.582:14295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.8.5916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1463.790684][ T30] audit: type=1326 audit(1741984734.582:14296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.8.5916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1463.814259][ T30] audit: type=1326 audit(1741984734.582:14297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.8.5916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=326 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1463.836968][ T30] audit: type=1326 audit(1741984734.582:14298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22271 comm="syz.8.5916" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1464.832340][T22288] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.202455][T22288] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.503243][T22288] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.610903][T22293] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5925'. [ 1465.620450][T22293] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5925'. [ 1465.646081][T22288] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.315271][T22297] loop9: detected capacity change from 0 to 256 [ 1466.474707][ T30] audit: type=1804 audit(1741984737.392:14299): pid=22297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.5927" name="/newroot/435/file0/file0" dev="loop9" ino=217 res=1 errno=0 [ 1466.866360][T22288] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.893471][T22288] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.923595][T22288] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.967798][T22288] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.937008][T22302] loop3: detected capacity change from 0 to 512 [ 1467.985208][T22302] EXT4-fs: quotafile must be on filesystem root [ 1468.157353][T22302] serio: Serial port ptm0 [ 1468.332611][T22308] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1469.728854][T22323] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5937'. [ 1470.062192][T22325] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.202587][T22325] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.512068][T22325] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.989545][T22325] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.487544][T22325] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.515289][T22325] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.543372][T22325] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.574267][T22325] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.015743][T22339] loop9: detected capacity change from 0 to 512 [ 1472.067524][T22339] EXT4-fs: quotafile must be on filesystem root [ 1472.267190][T22339] serio: Serial port ptm0 [ 1472.360840][T22342] syz!: rxe_newlink: already configured on team_slave_0 [ 1472.421239][T22341] loop0: detected capacity change from 0 to 1024 [ 1472.455046][T22341] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c02c, mo2=0003] [ 1472.466161][T22341] System zones: 0-1, 3-36 [ 1472.480388][T22341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1472.518141][T22341] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.5946: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1472.585639][T22341] EXT4-fs (loop0): Remounting filesystem read-only [ 1472.788291][T21527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1473.100940][T22354] loop3: detected capacity change from 0 to 1024 [ 1473.145239][T22354] EXT4-fs: Ignoring removed bh option [ 1473.151278][T22354] EXT4-fs: Ignoring removed nobh option [ 1473.182508][T22359] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5951'. [ 1473.243459][T22354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1473.324392][T22356] loop6: detected capacity change from 0 to 2048 [ 1473.426491][T22356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1473.630423][ T30] audit: type=1800 audit(1741984744.552:14300): pid=22356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5952" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1473.689983][T16694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1473.798177][T22367] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5954'. [ 1473.807825][T22367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1473.815359][T22367] IPv6: NLM_F_CREATE should be set when creating new route [ 1473.951619][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.117018][T22371] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.297420][T22371] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.345124][T22376] loop9: detected capacity change from 0 to 128 [ 1474.412861][T22371] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.437970][T22376] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1474.493164][T22371] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.520904][T22376] ext4 filesystem being mounted at /443/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1474.612859][T22376] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5958'. [ 1474.777775][T22381] blktrace: Concurrent blktraces are not allowed on sg0 [ 1474.852612][T22371] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.880367][T22371] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.907422][T22371] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.935876][T22371] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.642281][T16343] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1476.464467][T22394] loop9: detected capacity change from 0 to 512 [ 1476.518116][T22394] EXT4-fs: quotafile must be on filesystem root [ 1476.579892][T22396] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5965'. [ 1476.825860][T22394] serio: Serial port ptm0 [ 1476.885933][T22400] random: crng reseeded on system resumption [ 1477.050734][T22401] syz!: rxe_newlink: already configured on team_slave_0 [ 1477.268194][ T30] audit: type=1326 audit(1741985004.163:14301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22404 comm="syz.8.5968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1477.291467][ T30] audit: type=1326 audit(1741985004.173:14302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22404 comm="syz.8.5968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1477.315629][ T30] audit: type=1326 audit(1741985004.173:14303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22404 comm="syz.8.5968" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1477.882529][T22414] program syz.9.5971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1477.912880][T22412] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.039243][T22412] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.162937][T22412] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.244149][T22412] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.479105][T22412] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.512660][T22412] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.546404][T22412] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.577279][T22412] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.238837][T22433] loop0: detected capacity change from 0 to 512 [ 1479.252433][T22434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5980'. [ 1479.289745][T22433] EXT4-fs: quotafile must be on filesystem root [ 1479.455881][T22433] serio: Serial port ptm0 [ 1479.510423][T22439] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1479.545857][T22440] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 2, id = 0 [ 1481.251447][T22424] blktrace: Concurrent blktraces are not allowed on sg0 [ 1481.328823][T22452] loop0: detected capacity change from 0 to 1024 [ 1481.353360][T22452] EXT4-fs: Ignoring removed nobh option [ 1481.435171][T22452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1482.123030][T22452] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.5987: Allocating blocks 497-513 which overlap fs metadata [ 1482.164378][T22452] EXT4-fs (loop0): pa ffff888124508770: logic 256, phys. 385, len 8 [ 1482.166848][T22463] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.173387][T22452] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 1482.331849][T22463] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.497096][T22463] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.636568][T22463] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.902027][T21527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1482.924044][T22463] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.955551][T22463] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.984790][T22463] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.012544][T22463] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.225347][T22473] netlink: 'syz.3.5994': attribute type 3 has an invalid length. [ 1483.439448][T22476] loop6: detected capacity change from 0 to 512 [ 1483.453034][T22476] EXT4-fs: quotafile must be on filesystem root [ 1483.509405][T22478] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5993'. [ 1483.688731][T22476] serio: Serial port ptm0 [ 1483.755880][T22486] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1486.778580][T22509] loop9: detected capacity change from 0 to 1024 [ 1486.937125][T22509] EXT4-fs: Ignoring removed orlov option [ 1486.944290][T22509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1487.324686][T22509] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1487.411200][T22506] EXT4-fs (loop9): shut down requested (2) [ 1488.999505][T22518] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.158432][T22519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1489.166218][T22519] IPv6: NLM_F_CREATE should be set when creating new route [ 1489.237816][T22518] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.274748][T16343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.413993][T22518] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.637574][T22518] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.118709][T22518] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.149036][T22518] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.178635][T22518] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.206157][T22518] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1491.671971][T22525] loop0: detected capacity change from 0 to 128 [ 1491.788580][T22525] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1491.839944][T22525] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1491.964907][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6009'. [ 1491.974366][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6009'. [ 1491.984078][T22525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6009'. [ 1492.422819][T21527] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1492.553813][T22533] loop8: detected capacity change from 0 to 512 [ 1492.593086][T22533] EXT4-fs: quotafile must be on filesystem root [ 1492.731108][T22533] serio: Serial port ptm0 [ 1492.800728][T22535] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1497.238528][T22548] loop8: detected capacity change from 0 to 512 [ 1497.261522][T22548] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1497.343291][T22548] EXT4-fs (loop8): 1 truncate cleaned up [ 1497.351667][T22548] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1497.782937][T22556] 9pnet_fd: Insufficient options for proto=fd [ 1499.246255][T15200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.328399][T22573] loop0: detected capacity change from 0 to 512 [ 1499.406916][T22573] EXT4-fs: Ignoring removed orlov option [ 1499.561353][T22573] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.6021: corrupted in-inode xattr: invalid ea_ino [ 1499.630852][T22573] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.6021: couldn't read orphan inode 15 (err -117) [ 1499.694007][T22573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1500.030245][T22572] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6021: bg 0: block 411: padding at end of block bitmap is not set [ 1500.158481][T22583] loop6: detected capacity change from 0 to 512 [ 1500.213585][T22583] EXT4-fs: quotafile must be on filesystem root [ 1500.560789][T22587] serio: Serial port ptm0 [ 1500.809760][T21527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.392927][T22583] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1502.026552][T22597] loop0: detected capacity change from 0 to 2048 [ 1502.233025][T22597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1502.415247][T22601] 9pnet_fd: Insufficient options for proto=fd [ 1503.253127][T21527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.100524][T22615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6036'. [ 1504.207163][T22615] batadv_slave_0: entered promiscuous mode [ 1505.890504][ T30] audit: type=1326 audit(1741985032.813:14304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1505.913757][ T30] audit: type=1326 audit(1741985032.813:14305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1505.936659][ T30] audit: type=1326 audit(1741985032.823:14306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1506.095208][ T30] audit: type=1326 audit(1741985032.933:14307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1506.118465][ T30] audit: type=1326 audit(1741985032.933:14308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1506.141554][ T30] audit: type=1326 audit(1741985032.993:14309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1506.164219][ T30] audit: type=1326 audit(1741985033.003:14310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1506.188539][ T30] audit: type=1326 audit(1741985033.003:14311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1506.212248][ T30] audit: type=1326 audit(1741985033.003:14312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1506.234894][ T30] audit: type=1326 audit(1741985033.003:14313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22625 comm="syz.0.6040" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1506.488990][T22631] loop3: detected capacity change from 0 to 512 [ 1506.538830][T22631] EXT4-fs: quotafile must be on filesystem root [ 1506.596627][T22633] loop8: detected capacity change from 0 to 512 [ 1506.624695][T22633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1506.725215][T22633] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1506.738539][T22633] ext4 filesystem being mounted at /548/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1506.760920][T22631] serio: Serial port ptm0 [ 1506.821881][T22639] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1506.989914][T15200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.493736][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1509.998783][T22668] loop0: detected capacity change from 0 to 512 [ 1510.050395][T22668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1510.131182][T22668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1510.144378][T22668] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1510.528404][T21527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.845749][T22675] loop6: detected capacity change from 0 to 8192 [ 1510.909288][T22675] loop6: p2 p3 p4 [ 1510.913683][T22675] loop6: p2 size 130943 extends beyond EOD, truncated [ 1510.963158][T22675] loop6: p3 size 16776960 extends beyond EOD, truncated [ 1510.978779][T22675] loop6: p4 size 3599499392 extends beyond EOD, truncated [ 1512.195256][T22696] futex_wake_op: syz.0.6066 tries to shift op by -1; fix this program [ 1512.301576][T22694] loop6: detected capacity change from 0 to 2048 [ 1512.347691][T22694] ext4: Unknown parameter 'obj_user' [ 1513.765910][T22713] loop0: detected capacity change from 0 to 512 [ 1513.834110][T22713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1513.863643][T22715] loop6: detected capacity change from 0 to 512 [ 1513.879977][T22715] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1513.937220][T22715] EXT4-fs (loop6): 1 truncate cleaned up [ 1513.945137][T22715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1513.952945][T22713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1513.973206][T22713] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1514.199971][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1514.206431][ T30] audit: type=1800 audit(1741985041.123:14324): pid=22726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6071" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1514.311683][ T30] audit: type=1800 audit(1741985041.163:14325): pid=22713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6071" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1514.666649][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.708126][T21527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.966461][ T30] audit: type=1326 audit(1741985041.863:14326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22730 comm="syz.8.6075" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1516.005083][T22745] loop6: detected capacity change from 0 to 2048 [ 1516.052043][T22745] EXT4-fs: Ignoring removed orlov option [ 1516.231907][T22747] team0 (unregistering): Port device team_slave_0 removed [ 1516.262658][T22747] team0 (unregistering): Port device team_slave_1 removed [ 1516.321494][T22745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1516.905796][T18109] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1517.122058][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.093982][T22762] loop3: detected capacity change from 0 to 512 [ 1518.127343][T22762] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1518.173638][T22762] EXT4-fs (loop3): 1 truncate cleaned up [ 1518.181325][T22762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1518.277219][T22765] loop8: detected capacity change from 0 to 512 [ 1518.306925][T22765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1518.383947][T22765] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1518.397316][T22765] ext4 filesystem being mounted at /559/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1518.537617][ T30] audit: type=1800 audit(1741985045.463:14327): pid=22765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6089" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1518.630405][ T30] audit: type=1800 audit(1741985045.493:14328): pid=22765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6089" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1518.928405][T15200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.550160][T16694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.095441][T22800] loop8: detected capacity change from 0 to 512 [ 1523.148940][T22802] loop0: detected capacity change from 0 to 512 [ 1523.204596][T22802] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1523.215535][T22800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1523.309825][T22802] EXT4-fs (loop0): 1 truncate cleaned up [ 1523.317874][T22802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1523.388408][T22800] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1523.402113][T22800] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1523.558432][ T30] audit: type=1800 audit(1741985050.483:14329): pid=22812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6100" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1523.581833][ T30] audit: type=1800 audit(1741985050.483:14330): pid=22800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6100" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1524.268775][T15200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.673894][T21527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.686980][T22837] random: crng reseeded on system resumption [ 1526.978582][T21528] Bluetooth: hci5: command 0x0406 tx timeout [ 1527.530282][T22838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6113'. [ 1527.539752][T22838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1527.547560][T22838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.556390][T22847] relay: one or more items not logged [item size (56) > sub-buffer size (1)] [ 1527.701061][T22851] loop6: detected capacity change from 0 to 512 [ 1527.719383][T22838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1527.728055][T22838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.741821][T22851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1527.808594][T22851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1527.822119][T22851] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1527.947844][ T30] audit: type=1800 audit(1741985054.853:14331): pid=22857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6118" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1527.970533][ T30] audit: type=1800 audit(1741985054.863:14332): pid=22851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6118" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1528.087408][T22853] loop3: detected capacity change from 0 to 512 [ 1528.208298][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1529.369169][T22866] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1529.474162][T22868] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.108171][T22868] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.183759][T22868] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.301419][T22868] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.494338][T22868] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.522147][T22868] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.553034][T22868] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.581036][T22868] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.113811][T22880] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1531.124029][T22880] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1531.442030][T22882] loop6: detected capacity change from 0 to 512 [ 1531.534784][T22882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1532.081736][T22882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.097488][T22882] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1532.192857][ T30] audit: type=1800 audit(1741985059.123:14333): pid=22882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6130" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1532.266017][T22893] loop0: detected capacity change from 0 to 512 [ 1532.336395][ T30] audit: type=1800 audit(1741985059.143:14334): pid=22882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6130" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1532.621841][T22893] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.635076][T22893] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1532.859661][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.049634][T22913] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6139'. [ 1534.074842][T22913] dummy0: entered promiscuous mode [ 1534.088372][T22913] dummy0: left promiscuous mode [ 1534.853545][T22927] loop6: detected capacity change from 0 to 512 [ 1534.893309][T22927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1535.010786][T22927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1535.023970][T22927] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1535.161881][ T30] audit: type=1800 audit(1741985062.083:14335): pid=22927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6146" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1535.239813][ T30] audit: type=1800 audit(1741985062.113:14336): pid=22927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6146" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1535.524117][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.514349][T22951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6153'. [ 1537.071587][T22953] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6155'. [ 1537.766910][T22963] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6159'. [ 1537.917247][T22963] loop8: detected capacity change from 0 to 512 [ 1538.009957][T22963] EXT4-fs error (device loop8): ext4_quota_enable:7101: comm syz.8.6159: inode #33554432: comm syz.8.6159: iget: illegal inode # [ 1538.169557][T22963] EXT4-fs error (device loop8): ext4_quota_enable:7104: comm syz.8.6159: Bad quota inode: 33554432, type: 2 [ 1538.221609][T22963] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=33554432). Please run e2fsck to fix. [ 1538.364156][T22963] EXT4-fs (loop8): mount failed [ 1538.919710][T22975] loop8: detected capacity change from 0 to 512 [ 1538.960688][T22975] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1539.050223][T22975] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.063866][T22975] ext4 filesystem being mounted at /575/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1539.091588][T21527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.114967][T22977] loop3: detected capacity change from 0 to 2048 [ 1539.170150][T22973] loop9: detected capacity change from 0 to 8192 [ 1539.209888][ T30] audit: type=1800 audit(1741985066.133:14337): pid=22975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6162" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1539.232089][ T30] audit: type=1800 audit(1741985066.143:14338): pid=22975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6162" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1539.268681][T22977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1539.345371][T15200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.721544][T16694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.790721][ T30] audit: type=1326 audit(1741985068.713:14339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23015 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1541.815154][ T30] audit: type=1326 audit(1741985068.723:14340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23015 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1541.839293][ T30] audit: type=1326 audit(1741985068.753:14341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23015 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1541.862791][ T30] audit: type=1326 audit(1741985068.753:14342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23015 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1541.886811][ T30] audit: type=1326 audit(1741985068.763:14343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23015 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1541.909574][ T30] audit: type=1326 audit(1741985068.773:14344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23015 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1542.030718][T23019] loop6: detected capacity change from 0 to 512 [ 1542.115382][T23019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1542.230485][ T30] audit: type=1326 audit(1741985069.053:14345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23015 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1542.253656][ T30] audit: type=1326 audit(1741985069.063:14346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23015 comm="syz.8.6174" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1542.399333][T23019] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1542.412836][T23019] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1542.523438][T23023] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1543.073050][T23029] 9pnet_fd: Insufficient options for proto=fd [ 1543.073623][T23026] loop9: detected capacity change from 0 to 2048 [ 1543.156006][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1543.226691][T23026] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1543.712543][T16343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1544.057347][T23049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6186'. [ 1544.353158][T23055] loop0: detected capacity change from 0 to 764 [ 1544.731862][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1544.731943][ T30] audit: type=1326 audit(1741985071.663:14349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23059 comm="syz.9.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1544.761337][ T30] audit: type=1326 audit(1741985071.663:14350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23059 comm="syz.9.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1544.793161][ T30] audit: type=1326 audit(1741985071.713:14351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23059 comm="syz.9.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1544.816251][ T30] audit: type=1326 audit(1741985071.713:14352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23059 comm="syz.9.6190" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 1544.848817][T23062] loop3: detected capacity change from 0 to 512 [ 1544.860946][T23062] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1545.039152][T23062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1545.052917][T23062] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1545.161174][ T30] audit: type=1800 audit(1741985072.083:14353): pid=23062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6191" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 1545.182922][ T30] audit: type=1800 audit(1741985072.093:14354): pid=23062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6191" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1545.488093][T23072] loop8: detected capacity change from 0 to 2048 [ 1545.528471][T16694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.572461][T23072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1545.995286][T23084] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1546.029899][T15200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1546.473844][T23094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6203'. [ 1546.494550][T23094] vxcan6: entered allmulticast mode [ 1546.516038][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6202'. [ 1547.039504][T23105] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 1547.039504][T23105] program syz.3.6207 not setting count and/or reply_len properly [ 1547.338538][T23109] loop3: detected capacity change from 0 to 512 [ 1547.432901][T23109] EXT4-fs: Ignoring removed nobh option [ 1547.644250][T23118] loop8: detected capacity change from 0 to 2048 [ 1547.697621][T23118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1547.787589][T23109] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #16: comm syz.3.6207: corrupted inode contents [ 1547.864323][T23109] EXT4-fs (loop3): Remounting filesystem read-only [ 1547.904410][T23109] EXT4-fs (loop3): 1 truncate cleaned up [ 1547.912206][T23109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1547.925722][T23109] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1547.945756][ T5003] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1547.959207][ T5003] Quota error (device loop3): write_blk: dquota write failed [ 1547.967485][ T5003] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 1547.977802][ T5003] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1547.988776][ T5003] Quota error (device loop3): write_blk: dquota write failed [ 1547.996528][ T5003] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 1548.007189][ T5003] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 1548.130522][T15200] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1548.460148][T23131] loop9: detected capacity change from 0 to 512 [ 1548.488732][T23131] EXT4-fs: quotafile must be on filesystem root [ 1548.757536][T23131] serio: Serial port ptm0 [ 1548.884245][T23139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6219'. [ 1548.952581][T23140] syz!: rxe_newlink: already configured on team_slave_0 [ 1549.867059][T23148] loop9: detected capacity change from 0 to 128 [ 1550.766382][ T4674] kworker/u8:18: attempt to access beyond end of device [ 1550.766382][ T4674] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1550.969051][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6225'. [ 1550.979752][T23152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1550.987275][T23152] IPv6: NLM_F_CREATE should be set when creating new route [ 1552.020340][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1552.020416][ T30] audit: type=1326 audit(1741985078.943:14355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1552.049722][ T30] audit: type=1326 audit(1741985078.943:14356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1552.073905][ T30] audit: type=1326 audit(1741985078.983:14357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1552.097118][ T30] audit: type=1326 audit(1741985079.003:14358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1552.120287][ T30] audit: type=1326 audit(1741985079.003:14359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1552.152414][ T30] audit: type=1326 audit(1741985079.083:14360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1552.176844][ T30] audit: type=1326 audit(1741985079.083:14361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1552.207405][T23165] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6230'. [ 1552.219714][ T30] audit: type=1326 audit(1741985079.133:14362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1552.219941][ T30] audit: type=1326 audit(1741985079.133:14363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1552.267176][ T30] audit: type=1326 audit(1741985079.133:14364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23164 comm="syz.8.6230" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1552.297820][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6231'. [ 1552.643922][T23171] loop9: detected capacity change from 0 to 512 [ 1552.663105][T23171] EXT4-fs: quotafile must be on filesystem root [ 1552.829667][T23171] serio: Serial port ptm0 [ 1552.895206][T23176] syz!: rxe_newlink: already configured on team_slave_0 [ 1553.249777][T23180] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6237'. [ 1553.259729][T23180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1553.267294][T23180] IPv6: NLM_F_CREATE should be set when creating new route [ 1554.065102][T23190] netlink: 'syz.9.6240': attribute type 4 has an invalid length. [ 1555.457358][T23201] loop9: detected capacity change from 0 to 2048 [ 1555.515018][T23201] loop9: p1 < > p4 [ 1555.523013][T23201] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1555.882552][T23205] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6246'. [ 1555.904744][T23205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1555.913072][T23205] batadv_slave_0: entered promiscuous mode [ 1556.630672][T23216] tipc: New replicast peer: 255.255.255.255 [ 1556.640525][T23216] tipc: Enabled bearer , priority 10 [ 1556.938131][T23222] netlink: 'syz.0.6253': attribute type 4 has an invalid length. [ 1557.089091][T23224] loop9: detected capacity change from 0 to 512 [ 1557.193897][T23224] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1557.231903][T23224] EXT4-fs (loop9): mount failed [ 1557.683307][T23236] loop0: detected capacity change from 0 to 512 [ 1557.750459][T13672] tipc: Node number set to 3505006975 [ 1557.765389][T23236] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1557.784610][T23236] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.6257: invalid indirect mapped block 2683928664 (level 1) [ 1557.807846][T23236] EXT4-fs (loop0): Remounting filesystem read-only [ 1557.815605][T23236] EXT4-fs (loop0): 1 truncate cleaned up [ 1557.823441][T23236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1557.854838][T23236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6257'. [ 1557.897348][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6259'. [ 1557.974004][T23243] netlink: 'syz.0.6257': attribute type 10 has an invalid length. [ 1557.982268][T23243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6257'. [ 1558.183104][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1558.183182][ T30] audit: type=1326 audit(1741985085.113:14384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23244 comm="syz.8.6260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1558.214361][ T30] audit: type=1326 audit(1741985085.113:14385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23244 comm="syz.8.6260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1558.237594][ T30] audit: type=1326 audit(1741985085.113:14386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23244 comm="syz.8.6260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1558.260329][ T30] audit: type=1326 audit(1741985085.113:14387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23244 comm="syz.8.6260" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7ffc0000 [ 1558.293531][T21527] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1558.958549][T16694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1559.212468][T21528] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1559.223152][T21528] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1559.237517][T21528] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1559.254993][T21528] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1559.266200][T21528] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1559.275695][T21528] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1561.340795][T21528] Bluetooth: hci4: command tx timeout [ 1561.487719][T23273] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6270'. [ 1561.505860][T23273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1561.514638][T23273] batadv_slave_0: entered promiscuous mode [ 1561.720649][T23249] chnl_net:caif_netlink_parms(): no params data found [ 1561.840793][ T3480] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.902969][ T3480] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.049477][ T3480] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.168307][ T3480] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.219700][T23279] usb usb8: usbfs: process 23279 (syz.3.6272) did not claim interface 0 before use [ 1562.794798][ T3808] smc: removing ib device syz0 [ 1562.816474][ T3480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1562.921888][ T3480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.944388][ T3480] bond0 (unregistering): Released all slaves [ 1563.450271][T21528] Bluetooth: hci4: command tx timeout [ 1564.309832][T23249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.336504][T23249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.359302][T23249] bridge_slave_0: entered allmulticast mode [ 1564.395059][T23249] bridge_slave_0: entered promiscuous mode [ 1564.559880][T23249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.567928][T23249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.576916][T23249] bridge_slave_1: entered allmulticast mode [ 1564.586299][T23249] bridge_slave_1: entered promiscuous mode [ 1565.090697][ T3480] tipc: Left network mode [ 1565.202127][T23304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6283'. [ 1565.470588][T21528] Bluetooth: hci4: command tx timeout [ 1566.527439][T23249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.538681][T23307] batadv_slave_0: entered promiscuous mode [ 1566.642734][ T3480] IPVS: stopping master sync thread 21305 ... [ 1566.655130][ T3480] IPVS: stopping backup sync thread 22440 ... [ 1566.674234][T23249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.146024][T23249] team0: Port device team_slave_0 added [ 1567.178994][T23249] team0: Port device team_slave_1 added [ 1567.554065][T21528] Bluetooth: hci4: command tx timeout [ 1567.602443][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.664700][ T3480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.672628][ T3480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1567.735777][ T3480] veth1_macvtap: left promiscuous mode [ 1567.742084][ T3480] veth0_macvtap: left promiscuous mode [ 1567.748064][ T3480] veth1_vlan: left promiscuous mode [ 1567.753805][ T3480] veth0_vlan: left promiscuous mode [ 1568.855107][T23249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1568.862654][T23249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.889755][T23249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.956144][T23249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1568.963705][T23249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.991684][T23249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.164419][ T3480] IPVS: stop unused estimator thread 0... [ 1569.348335][T23249] hsr_slave_0: entered promiscuous mode [ 1569.361742][T23249] hsr_slave_1: entered promiscuous mode [ 1569.496080][T23348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6299'. [ 1570.444725][ T30] audit: type=1326 audit(1741985097.373:14388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.6304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1570.467813][ T30] audit: type=1326 audit(1741985097.373:14389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.6304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=187 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1570.492890][ T30] audit: type=1326 audit(1741985097.373:14390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.6304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1570.611917][ T30] audit: type=1326 audit(1741985097.473:14391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23359 comm="syz.0.6304" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 1570.732183][T23249] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1570.800803][T23249] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1570.850553][T23249] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1570.907725][T23249] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1570.956175][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1571.023710][T23367] loop6: detected capacity change from 0 to 2048 [ 1571.124357][T23367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1571.284060][ T30] audit: type=1800 audit(1741985098.193:14392): pid=23367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6307" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1571.571846][T23249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.708960][T23249] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.753322][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.761079][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.828016][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.835858][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.942714][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.566153][T23394] loop9: detected capacity change from 0 to 128 [ 1572.629521][T23394] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1572.919690][ T4674] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1573.187858][T23249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1575.525775][ T30] audit: type=1326 audit(1741985102.423:14393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.3.6331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1575.548812][ T30] audit: type=1326 audit(1741985102.423:14394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.3.6331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1575.571762][ T30] audit: type=1326 audit(1741985102.483:14395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.3.6331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1575.594516][ T30] audit: type=1326 audit(1741985102.483:14396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.3.6331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1575.618764][ T30] audit: type=1326 audit(1741985102.483:14397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.3.6331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1575.822161][T23249] veth0_vlan: entered promiscuous mode [ 1575.885230][T23249] veth1_vlan: entered promiscuous mode [ 1575.938190][ T30] audit: type=1326 audit(1741985102.583:14398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.3.6331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1575.961252][ T30] audit: type=1326 audit(1741985102.583:14399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.3.6331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1575.984589][ T30] audit: type=1326 audit(1741985102.603:14400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.3.6331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1576.007287][ T30] audit: type=1326 audit(1741985102.603:14401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.3.6331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1576.031568][ T30] audit: type=1326 audit(1741985102.603:14402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23432 comm="syz.3.6331" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 1576.138934][T23249] veth0_macvtap: entered promiscuous mode [ 1576.176308][T23249] veth1_macvtap: entered promiscuous mode [ 1576.256841][T23249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1576.338658][T23249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1576.349504][T23249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.359847][T23249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1576.370731][T23249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1576.385976][T23249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.463157][T23249] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.472409][T23249] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.481518][T23249] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.490639][T23249] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.921722][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6337'. [ 1580.503981][T23496] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6352'. [ 1580.701896][T23503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6353'. [ 1581.097614][T23507] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.307195][T23507] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.379764][T23507] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.478796][T23507] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.797882][T23507] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.826681][T23507] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.856639][T23507] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1581.890786][T23507] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.775553][ T5003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.784157][ T5003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.022908][ T4674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.031308][ T4674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.014626][T23539] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6365'. [ 1584.117446][T23547] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6366'. [ 1584.655924][T23552] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.777412][T23552] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.865860][T23552] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.017565][T23552] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.279203][T23552] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.311313][T23552] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.344197][T23552] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.374819][T23552] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1586.534633][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1586.534709][ T30] audit: type=1326 audit(1741985113.463:14444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1586.693553][ T30] audit: type=1326 audit(1741985113.513:14445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=349 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1586.716458][ T30] audit: type=1326 audit(1741985113.513:14446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1586.739292][ T30] audit: type=1326 audit(1741985113.513:14447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1586.762037][ T30] audit: type=1326 audit(1741985113.533:14448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1586.786252][ T30] audit: type=1326 audit(1741985113.543:14449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23574 comm="syz.6.6377" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1587.555696][T23590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6381'. [ 1588.630327][T23601] netlink: 'syz.6.6385': attribute type 4 has an invalid length. [ 1589.606814][T23627] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6392'. [ 1589.652879][T23620] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6392'. [ 1590.094957][T23637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6397'. [ 1590.152233][T23636] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6398'. [ 1590.263908][T23643] loop8: detected capacity change from 0 to 512 [ 1590.291452][T23643] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1590.418578][T23643] EXT4-fs (loop8): 1 truncate cleaned up [ 1590.427641][T23643] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1590.969793][T23657] netlink: 'syz.9.6404': attribute type 4 has an invalid length. [ 1591.570777][T23249] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.732142][ T30] audit: type=1326 audit(1741985118.643:14450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23668 comm="syz.6.6407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1591.755081][ T30] audit: type=1326 audit(1741985118.653:14451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23668 comm="syz.6.6407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=108 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1591.777914][ T30] audit: type=1326 audit(1741985118.653:14452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23668 comm="syz.6.6407" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1591.878000][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6409'. [ 1591.891497][T23671] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1591.898916][T23671] IPv6: NLM_F_CREATE should be set when creating new route [ 1592.765698][T23689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6415'. [ 1593.471696][T23704] netlink: 'syz.6.6420': attribute type 4 has an invalid length. [ 1593.765463][T23712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6423'. [ 1593.775374][T23712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1595.292055][T23723] loop9: detected capacity change from 0 to 8192 [ 1595.407115][T23723] syz.9.6429: attempt to access beyond end of device [ 1595.407115][T23723] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1595.422255][T23723] Buffer I/O error on dev loop9, logical block 57847, async page read [ 1595.423139][T23735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6432'. [ 1595.495438][T23723] syz.9.6429: attempt to access beyond end of device [ 1595.495438][T23723] loop9: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1595.509436][T23723] Buffer I/O error on dev loop9, logical block 57847, async page read [ 1595.526292][ T30] audit: type=1800 audit(1741985122.453:14453): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.6429" name="file2" dev="loop9" ino=220 res=0 errno=0 [ 1596.557610][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6437'. [ 1596.567130][T23747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1596.574644][T23747] IPv6: NLM_F_CREATE should be set when creating new route [ 1596.771370][T23752] netlink: 'syz.3.6438': attribute type 4 has an invalid length. [ 1596.967244][T23754] syzkaller0: entered promiscuous mode [ 1596.973177][T23754] syzkaller0: entered allmulticast mode [ 1598.829526][T23786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6448'. [ 1598.876218][T23785] loop8: detected capacity change from 0 to 512 [ 1598.941055][T23785] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1599.091481][T23785] EXT4-fs (loop8): 1 truncate cleaned up [ 1599.099238][T23785] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1599.248296][T23788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6451'. [ 1599.258134][T23788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1599.896342][T23249] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.979678][T23803] netlink: 'syz.3.6453': attribute type 4 has an invalid length. [ 1600.102344][T23802] loop6: detected capacity change from 0 to 2048 [ 1600.213063][T23802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1600.375328][ T30] audit: type=1800 audit(1741985127.303:14454): pid=23802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6454" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 1601.046965][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1601.564423][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6463'. [ 1601.999509][T23832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6465'. [ 1602.009409][T23832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1602.017004][T23832] IPv6: NLM_F_CREATE should be set when creating new route [ 1602.715593][T23842] loop9: detected capacity change from 0 to 512 [ 1602.751629][T23842] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1602.870424][T23842] EXT4-fs (loop9): 1 truncate cleaned up [ 1602.878079][T23842] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1602.952440][T23850] netlink: 'syz.3.6469': attribute type 4 has an invalid length. [ 1603.392094][T23859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6472'. [ 1603.743912][T16343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1604.823704][T23881] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6479'. [ 1605.392201][T23881] hsr_slave_1 (unregistering): left promiscuous mode [ 1606.376240][T23892] loop3: detected capacity change from 0 to 512 [ 1606.418626][T23892] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1606.510578][T23892] EXT4-fs (loop3): 1 truncate cleaned up [ 1606.518501][T23892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1606.862349][T23899] netlink: 'syz.9.6485': attribute type 4 has an invalid length. [ 1607.634141][T16694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1607.684673][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6487'. [ 1610.736995][T23936] loop3: detected capacity change from 0 to 512 [ 1610.801534][T23936] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1611.160284][T23936] EXT4-fs (loop3): 1 truncate cleaned up [ 1611.184057][T23936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1611.548620][T23949] netlink: 'syz.0.6501': attribute type 4 has an invalid length. [ 1611.737325][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6502'. [ 1612.323149][T16694] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1613.170636][ T30] audit: type=1326 audit(1741985140.093:14455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23961 comm="syz.8.6506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1613.197345][ T30] audit: type=1326 audit(1741985140.093:14456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23961 comm="syz.8.6506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1613.222431][ T30] audit: type=1326 audit(1741985140.093:14457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23961 comm="syz.8.6506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1613.246262][ T30] audit: type=1326 audit(1741985140.093:14458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23961 comm="syz.8.6506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1613.269227][ T30] audit: type=1326 audit(1741985140.093:14459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23961 comm="syz.8.6506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1614.321640][T23981] loop6: detected capacity change from 0 to 512 [ 1614.353122][T23983] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.377561][T23981] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1614.485228][T23981] EXT4-fs (loop6): 1 truncate cleaned up [ 1614.493018][T23981] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1614.537017][T23983] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.573040][T23977] loop3: detected capacity change from 0 to 8192 [ 1614.668404][T23988] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6515'. [ 1614.797035][T23983] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.955144][T23983] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.522140][T23983] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.554162][T23983] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.582139][T23983] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.609912][T23983] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.733215][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1616.790337][T24013] loop6: detected capacity change from 0 to 512 [ 1617.090478][T24021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6528'. [ 1617.148997][T24013] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1617.172957][T24013] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1617.222380][T24013] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1617.233602][T24013] EXT4-fs warning (device loop6): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1617.253205][T24013] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 1617.276709][T24013] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6525: bg 0: block 40: padding at end of block bitmap is not set [ 1617.302317][T24013] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1617.331295][T24013] EXT4-fs (loop6): 1 truncate cleaned up [ 1617.339031][T24013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1617.586421][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.746516][T24017] loop9: detected capacity change from 0 to 8192 [ 1618.232185][T24030] loop6: detected capacity change from 0 to 512 [ 1618.309223][T24031] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.337834][T24030] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1618.469185][T24030] EXT4-fs (loop6): 1 truncate cleaned up [ 1618.477590][T24030] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1618.532743][T24031] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.626891][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6534'. [ 1618.657820][T24031] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.832999][T24031] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.058064][T24031] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.089641][T24031] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.117215][T24031] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.148379][T24031] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.475072][T18109] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.716969][T24054] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6540'. [ 1619.828265][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6541'. [ 1619.951862][T24054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6540'. [ 1620.635862][T24071] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6546'. [ 1620.965907][T24077] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.029006][T24079] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6550'. [ 1621.077766][T24070] loop9: detected capacity change from 0 to 8192 [ 1621.102452][T24077] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.219545][T24077] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.420256][T24077] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.773002][T24093] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6554'. [ 1622.118829][T24077] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.146795][T24077] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.177316][T24077] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1622.212938][T24077] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.612584][T24118] loop9: detected capacity change from 0 to 512 [ 1623.627413][T24118] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1623.730500][T24118] EXT4-fs (loop9): 1 truncate cleaned up [ 1623.746763][T24118] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1623.915063][ T30] audit: type=1326 audit(1741985150.843:14460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24122 comm="syz.8.6564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1623.992508][ T30] audit: type=1326 audit(1741985150.873:14461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24122 comm="syz.8.6564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1624.015982][ T30] audit: type=1326 audit(1741985150.883:14462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24122 comm="syz.8.6564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1624.038983][ T30] audit: type=1326 audit(1741985150.883:14463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24122 comm="syz.8.6564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1624.066318][ T30] audit: type=1326 audit(1741985150.883:14464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24122 comm="syz.8.6564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1624.089112][ T30] audit: type=1326 audit(1741985150.893:14465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24122 comm="syz.8.6564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1624.112027][ T30] audit: type=1326 audit(1741985150.893:14466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24122 comm="syz.8.6564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1624.135185][ T30] audit: type=1326 audit(1741985150.893:14467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24122 comm="syz.8.6564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1624.160964][ T30] audit: type=1326 audit(1741985150.893:14468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24122 comm="syz.8.6564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1624.184809][ T30] audit: type=1326 audit(1741985150.903:14469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24122 comm="syz.8.6564" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 1624.377830][T16343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1624.607707][T24132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6568'. [ 1624.725972][T24134] loop9: detected capacity change from 0 to 128 [ 1624.865418][T24134] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1624.910597][T24134] ext4 filesystem being mounted at /566/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1625.009499][T24137] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.039136][T24139] loop6: detected capacity change from 0 to 128 [ 1625.180783][T24137] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.218052][T16343] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1625.317251][T24137] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.413341][T24137] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1625.662604][T24137] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.696606][T24137] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.727671][T24137] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.759616][T24137] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1625.803499][T24147] smc: net device bond0 applied user defined pnetid SYZ0 [ 1626.218009][T24154] netlink: 'syz.9.6576': attribute type 21 has an invalid length. [ 1626.226451][T24154] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6576'. [ 1626.370348][T13672] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1626.511196][T13672] usb 4-1: device descriptor read/64, error -71 [ 1626.774566][T13672] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1626.827752][T24171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6582'. [ 1626.937799][T13672] usb 4-1: device descriptor read/64, error -71 [ 1627.052766][T13672] usb usb4-port1: attempt power cycle [ 1627.417653][T13672] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1627.482881][T13672] usb 4-1: device descriptor read/8, error -71 [ 1627.592749][T24181] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.617446][T24184] netlink: 'syz.8.6588': attribute type 1 has an invalid length. [ 1627.712454][T24184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1627.758080][T24181] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.792010][T13672] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1627.840335][T13672] usb 4-1: device descriptor read/8, error -71 [ 1627.886740][T24184] bond1: (slave gretap1): making interface the new active one [ 1627.898923][T24184] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1627.917210][T24181] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.975397][T13672] usb usb4-port1: unable to enumerate USB device [ 1627.994831][T24181] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.254696][T24181] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.285861][T24181] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.317506][T24181] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1628.355563][T24181] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.368449][T24208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6595'. [ 1629.789148][T24213] loop9: detected capacity change from 0 to 512 [ 1629.853567][T24211] bond2: entered promiscuous mode [ 1629.858887][T24211] bond2: entered allmulticast mode [ 1629.866451][T24211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1629.918669][T24213] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1629.938212][T24211] bond2 (unregistering): Released all slaves [ 1629.967918][T24213] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1629.992099][T24213] __quota_error: 44 callbacks suppressed [ 1629.992180][T24213] Quota error (device loop9): find_block_dqentry: Quota for id 0 referenced but not present [ 1630.010942][T24213] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 1630.022794][T24213] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.6598: Failed to acquire dquot type 1 [ 1630.048263][T24213] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6598: bg 0: block 40: padding at end of block bitmap is not set [ 1630.104320][T24213] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1630.137954][T24213] EXT4-fs (loop9): 1 truncate cleaned up [ 1630.145993][T24213] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1630.446596][T16343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.589776][T24221] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.735929][T24221] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.853016][T24231] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6605'. [ 1630.891775][T24221] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.987868][T24221] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.647627][T24247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6611'. [ 1631.842542][T24221] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.876789][T24221] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.905365][T24221] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.936687][T24221] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1632.389316][T24255] loop8: detected capacity change from 0 to 128 [ 1632.398994][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1632.542022][T24257] bond_slave_1: entered promiscuous mode [ 1632.552039][T24257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6615'. [ 1632.613674][T24257] bond0: (slave bond_slave_1): Releasing backup interface [ 1632.688319][T24257] bond_slave_1 (unregistering): left promiscuous mode [ 1633.262280][T24265] loop8: detected capacity change from 0 to 512 [ 1633.291898][T24265] EXT4-fs: Ignoring removed orlov option [ 1633.350474][T24265] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.6619: corrupted in-inode xattr: invalid ea_ino [ 1633.420716][T24265] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.6619: couldn't read orphan inode 15 (err -117) [ 1633.484656][T24265] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1633.548051][T24265] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6619: bg 0: block 411: padding at end of block bitmap is not set [ 1633.729393][T23249] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.320769][T24281] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.414108][T24281] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.501493][T24281] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.576999][T24281] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1634.708422][T24290] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6626'. [ 1634.746935][T24284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1634.754284][T24284] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1634.760865][T24284] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1634.866934][T24281] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.901313][T24281] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.934198][T24281] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.962577][T24281] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.022145][T24284] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1635.028579][T24284] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1635.075311][T24284] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1636.525630][T21528] Bluetooth: hci2: command 0x0c1a tx timeout [ 1636.837880][T21528] Bluetooth: hci5: command 0x0406 tx timeout [ 1637.070611][T21528] Bluetooth: hci4: command 0x0c1a tx timeout [ 1637.933706][T24313] loop9: detected capacity change from 0 to 512 [ 1637.979059][T24313] EXT4-fs: Ignoring removed orlov option [ 1638.113770][T24313] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.6634: corrupted in-inode xattr: invalid ea_ino [ 1638.220754][T24313] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.6634: couldn't read orphan inode 15 (err -117) [ 1638.274642][T24313] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1638.501937][T24313] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6634: bg 0: block 411: padding at end of block bitmap is not set [ 1638.711727][T24322] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.819734][T24322] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.898782][T16343] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1638.911669][T21528] Bluetooth: hci5: command 0x0406 tx timeout [ 1638.946716][T24322] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.069268][T24322] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.153892][T21528] Bluetooth: hci4: command 0x0c1a tx timeout [ 1639.189326][T24339] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6638'. [ 1639.438936][T24342] netlink: 'syz.9.6640': attribute type 1 has an invalid length. [ 1639.440208][T24322] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.478743][T24322] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.634547][T24322] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.662734][T24322] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.634050][T24359] netlink: 'syz.3.6646': attribute type 4 has an invalid length. [ 1641.232192][T21528] Bluetooth: hci4: command 0x0c1a tx timeout [ 1642.138988][T24377] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6652'. [ 1642.867586][T24383] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.999323][T24383] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.110866][T24383] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.261605][T24383] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.588082][T24383] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.619536][T24383] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.648117][T24383] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1643.677504][T24383] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.467405][T24401] netlink: 'syz.9.6660': attribute type 4 has an invalid length. [ 1645.452541][T24418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6665'. [ 1645.933605][T24426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6657'. [ 1646.786281][T24430] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.883075][T24430] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.989166][T24430] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.116047][T24430] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1647.283153][T24436] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6671'. [ 1647.331459][T24435] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6671'. [ 1647.466039][T24430] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.502301][T24430] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.534860][T24430] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1647.565230][T24430] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.242807][T24458] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6678'. [ 1650.298475][T24466] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.6683'. [ 1650.375681][T24465] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.6683'. [ 1650.405038][T24469] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6685'. [ 1650.485372][T24470] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.618728][T24470] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.675014][T24474] netlink: 62967 bytes leftover after parsing attributes in process `syz.8.6686'. [ 1650.732718][T24470] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.811886][T24470] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.358196][T24470] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.389027][T24470] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.421206][T24470] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.449385][T24470] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.333546][T24501] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6693'. [ 1652.705208][T24504] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6695'. [ 1652.879732][T24511] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6698'. [ 1652.939047][T24512] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6697'. [ 1653.012607][T24509] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6697'. [ 1653.709126][T24518] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1653.854202][T24518] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.049092][T24518] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.174596][T24518] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.490234][T24518] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.525268][T24518] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.561321][T24518] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.591746][T24518] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1655.510599][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6709'. [ 1655.643966][T24545] netlink: 'syz.0.6710': attribute type 4 has an invalid length. [ 1655.765602][T24548] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.6712'. [ 1655.891979][T24546] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.6712'. [ 1657.721946][T24572] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6719'. [ 1657.735676][T24572] netlink: 'syz.3.6719': attribute type 5 has an invalid length. [ 1657.744922][T24572] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6719'. [ 1658.336796][T16698] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1658.351757][T16698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1658.361545][T16698] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1658.375190][T16698] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1658.387384][T16698] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1658.396948][T16698] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1658.573599][T24584] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6724'. [ 1658.594672][T24583] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6724'. [ 1658.839305][T24586] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6725'. [ 1659.184693][T24592] netlink: 'syz.0.6726': attribute type 4 has an invalid length. [ 1659.725032][T24595] bond0: (slave bond_slave_0): Releasing backup interface [ 1659.765522][T24595] bond0: (slave bond_slave_1): Releasing backup interface [ 1659.858813][T24595] team0: Port device team_slave_0 removed [ 1659.914634][T24595] team0: Port device team_slave_1 removed [ 1660.342637][T24580] chnl_net:caif_netlink_parms(): no params data found [ 1660.512075][T16698] Bluetooth: hci3: command tx timeout [ 1661.074145][ T1826] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.207627][ T1826] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.305518][ T1826] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.437347][ T1826] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.751462][T24580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.759187][T24580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.767273][T24580] bridge_slave_0: entered allmulticast mode [ 1661.776790][T24580] bridge_slave_0: entered promiscuous mode [ 1661.809472][T24580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.817409][T24580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.830988][T24580] bridge_slave_1: entered allmulticast mode [ 1661.840433][T24580] bridge_slave_1: entered promiscuous mode [ 1662.112878][T24580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1662.185168][T24580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1662.601240][T16698] Bluetooth: hci3: command tx timeout [ 1662.779771][ T1826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1662.932161][ T1826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1662.959696][ T1826] bond0 (unregistering): Released all slaves [ 1663.112375][T24633] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6736'. [ 1663.127459][T24630] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6736'. [ 1663.234474][T24580] team0: Port device team_slave_0 added [ 1663.268656][T24580] team0: Port device team_slave_1 added [ 1663.292814][ T1826] tipc: Disabling bearer [ 1663.298805][ T1826] tipc: Left network mode [ 1663.385074][T24639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6738'. [ 1663.425084][ T1826] IPVS: stopping master sync thread 21270 ... [ 1663.526484][T24580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.535280][T24580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.562244][T24580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1663.709980][T24580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1663.717487][T24580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.743856][T24580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.490495][ T1826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.528808][ T1826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1664.536716][ T1826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.631883][ T1826] veth1_macvtap: left promiscuous mode [ 1664.637652][ T1826] veth0_macvtap: left promiscuous mode [ 1664.643670][ T1826] veth1_vlan: left promiscuous mode [ 1664.649210][ T1826] veth0_vlan: left promiscuous mode [ 1664.677013][T16698] Bluetooth: hci3: command tx timeout [ 1664.893626][T24651] netlink: 'syz.3.6739': attribute type 4 has an invalid length. [ 1665.654842][ T1826] team0 (unregistering): Port device team_slave_0 removed [ 1665.665508][ T3808] smc: removing ib device syz! [ 1666.536818][T24655] syzkaller0: entered promiscuous mode [ 1666.543219][T24655] syzkaller0: entered allmulticast mode [ 1666.916922][T24580] hsr_slave_0: entered promiscuous mode [ 1666.926987][T24580] hsr_slave_1: entered promiscuous mode [ 1666.935676][T24580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1666.943804][T24580] Cannot create hsr debugfs directory [ 1666.970789][T16698] Bluetooth: hci3: command tx timeout [ 1668.135174][T24690] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6748'. [ 1668.439525][ T30] audit: type=1326 audit(1741985195.363:14514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24691 comm="syz.6.6749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1668.494421][T24689] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6748'. [ 1668.610686][ T30] audit: type=1326 audit(1741985195.393:14515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24691 comm="syz.6.6749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1668.634695][ T30] audit: type=1326 audit(1741985195.393:14516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24691 comm="syz.6.6749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1668.657944][ T30] audit: type=1326 audit(1741985195.403:14517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24691 comm="syz.6.6749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1668.680953][ T30] audit: type=1326 audit(1741985195.403:14518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24691 comm="syz.6.6749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1668.706752][ T30] audit: type=1326 audit(1741985195.403:14519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24691 comm="syz.6.6749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1668.731101][ T30] audit: type=1326 audit(1741985195.403:14520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24691 comm="syz.6.6749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1668.753921][ T30] audit: type=1326 audit(1741985195.403:14521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24691 comm="syz.6.6749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1668.776884][ T30] audit: type=1326 audit(1741985195.403:14522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24691 comm="syz.6.6749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1668.802581][ T30] audit: type=1326 audit(1741985195.403:14523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24691 comm="syz.6.6749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fe3579 code=0x7ffc0000 [ 1669.229357][T24698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6750'. [ 1669.365313][ T1826] IPVS: stop unused estimator thread 0... [ 1670.424521][T24580] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1670.471713][T24580] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1670.506837][T24580] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1670.552969][T24580] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1670.645478][T24711] netlink: 'syz.3.6755': attribute type 4 has an invalid length. [ 1671.373385][T24580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1671.521156][T24580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1671.590866][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.598530][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1671.642611][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.650515][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.378873][T24736] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1672.423661][T24734] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1673.251169][T24751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6764'. [ 1673.415684][T24580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1673.795141][T24757] hsr_slave_0: left promiscuous mode [ 1673.889833][T24759] netlink: 'syz.8.6766': attribute type 4 has an invalid length. [ 1675.605961][T14322] IPVS: starting estimator thread 0... [ 1675.613540][T24781] serio: Serial port ptm0 [ 1675.729525][T24785] IPVS: using max 288 ests per chain, 14400 per kthread [ 1676.053811][T24580] veth0_vlan: entered promiscuous mode [ 1676.098124][T24787] infiniband syz!: set active [ 1676.103211][T24787] infiniband syz!: added team_slave_0 [ 1676.187917][T24580] veth1_vlan: entered promiscuous mode [ 1676.360805][T24787] RDS/IB: syz!: added [ 1676.365060][T24787] smc: adding ib device syz! with port count 1 [ 1676.373718][T24787] smc: ib device syz! port 1 has pnetid [ 1676.619021][T24580] veth0_macvtap: entered promiscuous mode [ 1676.641876][T24580] veth1_macvtap: entered promiscuous mode [ 1676.700334][T24580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1676.712091][T24580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.727096][T24580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.960554][T24580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.971462][T24580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1676.984177][T24580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1676.997664][T24580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1677.012993][T24580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1677.059971][T24580] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.069380][T24580] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.081270][T24580] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.094019][T24580] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.859340][T24804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6776'. [ 1678.122552][T24803] netlink: 'syz.6.6777': attribute type 4 has an invalid length. [ 1679.483161][T24824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6782'. [ 1680.718094][T24848] netlink: 'syz.6.6789': attribute type 4 has an invalid length. [ 1680.753228][T24849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6788'. [ 1682.550474][ T1826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.558709][ T1826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.655997][ T1826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.664485][ T1826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.623356][T24894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6801'. [ 1684.092163][T24899] netlink: 'syz.0.6802': attribute type 4 has an invalid length. [ 1685.633066][T21528] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1685.662230][T21528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1685.680540][T21528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1685.724029][T21528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1685.751484][T21528] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1685.768788][T21528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1687.704939][T24931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6814'. [ 1687.872179][T21528] Bluetooth: hci0: command tx timeout [ 1687.927478][T24910] chnl_net:caif_netlink_parms(): no params data found [ 1687.986627][ T79] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.037101][T24939] netlink: 'syz.8.6816': attribute type 4 has an invalid length. [ 1688.093587][ T79] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.217438][ T79] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.299028][ T79] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.050868][ T79] bond0 (unregistering): Released all slaves [ 1689.378552][ T79] tipc: Left network mode [ 1689.417998][ T79] IPVS: stopping master sync thread 21235 ... [ 1689.994420][T21528] Bluetooth: hci0: command tx timeout [ 1690.481003][ T79] veth1_macvtap: left promiscuous mode [ 1690.486966][ T79] veth0_macvtap: left promiscuous mode [ 1690.493328][ T79] veth1_vlan: left promiscuous mode [ 1690.505103][ T79] veth0_vlan: left promiscuous mode [ 1691.566605][T24974] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6828'. [ 1692.004581][T22163] infiniband syz1: ib_query_port failed (-19) [ 1692.056240][T24979] ===================================================== [ 1692.063656][T24979] BUG: KMSAN: uninit-value in erspan_build_header+0x170/0x2f0 [ 1692.064504][T21528] Bluetooth: hci0: command tx timeout [ 1692.071507][T24979] erspan_build_header+0x170/0x2f0 [ 1692.082336][T24979] erspan_xmit+0x1252/0x1cd0 [ 1692.087136][T24979] dev_hard_start_xmit+0x247/0xa20 [ 1692.092518][T24979] sch_direct_xmit+0x399/0xd40 [ 1692.097474][T24979] __dev_queue_xmit+0x30b9/0x57d0 [ 1692.102776][T24979] __bpf_redirect+0x1511/0x1690 [ 1692.107889][T24979] bpf_clone_redirect+0x37e/0x500 [ 1692.113231][T24979] ___bpf_prog_run+0x13fe/0xe0f0 [ 1692.118383][T24979] __bpf_prog_run512+0xc5/0xf0 [ 1692.123541][T24979] bpf_test_run+0x546/0xd20 [ 1692.128244][T24979] bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1692.134015][T24979] bpf_prog_test_run+0x5e5/0xa30 [ 1692.139193][T24979] __sys_bpf+0x6aa/0xd90 [ 1692.143711][T24979] __ia32_sys_bpf+0xa0/0xe0 [ 1692.148404][T24979] ia32_sys_call+0x394d/0x4180 [ 1692.153450][T24979] __do_fast_syscall_32+0xb0/0x110 [ 1692.158766][T24979] do_fast_syscall_32+0x38/0x80 [ 1692.163898][T24979] do_SYSENTER_32+0x1f/0x30 [ 1692.168596][T24979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1692.175257][T24979] [ 1692.177680][T24979] Uninit was created at: [ 1692.182253][T24979] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 1692.188344][T24979] kmalloc_reserve+0x13d/0x4a0 [ 1692.193432][T24979] pskb_expand_head+0x21f/0x1b70 [ 1692.198560][T24979] erspan_xmit+0x8e2/0x1cd0 [ 1692.203363][T24979] dev_hard_start_xmit+0x247/0xa20 [ 1692.208654][T24979] sch_direct_xmit+0x399/0xd40 [ 1692.213691][T24979] __dev_queue_xmit+0x30b9/0x57d0 [ 1692.218889][T24979] __bpf_redirect+0x1511/0x1690 [ 1692.223988][T24979] bpf_clone_redirect+0x37e/0x500 [ 1692.229191][T24979] ___bpf_prog_run+0x13fe/0xe0f0 [ 1692.234416][T24979] __bpf_prog_run512+0xc5/0xf0 [ 1692.239389][T24979] bpf_test_run+0x546/0xd20 [ 1692.244201][T24979] bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1692.249883][T24979] bpf_prog_test_run+0x5e5/0xa30 [ 1692.255139][T24979] __sys_bpf+0x6aa/0xd90 [ 1692.259585][T24979] __ia32_sys_bpf+0xa0/0xe0 [ 1692.264359][T24979] ia32_sys_call+0x394d/0x4180 [ 1692.269325][T24979] __do_fast_syscall_32+0xb0/0x110 [ 1692.274739][T24979] do_fast_syscall_32+0x38/0x80 [ 1692.279791][T24979] do_SYSENTER_32+0x1f/0x30 [ 1692.284586][T24979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1692.291255][T24979] [ 1692.293717][T24979] CPU: 1 UID: 0 PID: 24979 Comm: syz.6.6830 Not tainted 6.14.0-rc6-syzkaller-00145-g695caca9345a #0 [ 1692.304780][T24979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1692.315085][T24979] ===================================================== [ 1692.322228][T24979] Disabling lock debugging due to kernel taint [ 1692.328531][T24979] Kernel panic - not syncing: kmsan.panic set ... [ 1692.335091][T24979] CPU: 1 UID: 0 PID: 24979 Comm: syz.6.6830 Tainted: G B 6.14.0-rc6-syzkaller-00145-g695caca9345a #0 [ 1692.347549][T24979] Tainted: [B]=BAD_PAGE [ 1692.351810][T24979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1692.362015][T24979] Call Trace: [ 1692.365412][T24979] [ 1692.368449][T24979] dump_stack_lvl+0x216/0x2d0 [ 1692.373299][T24979] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1692.379327][T24979] dump_stack+0x1e/0x24 [ 1692.383633][T24979] panic+0x4e2/0xcf0 [ 1692.387732][T24979] ? kmsan_get_metadata+0x61/0x1c0 [ 1692.393073][T24979] kmsan_report+0x2c7/0x2d0 [ 1692.397787][T24979] ? __msan_warning+0x95/0x120 [ 1692.402731][T24979] ? erspan_build_header+0x170/0x2f0 [ 1692.408235][T24979] ? erspan_xmit+0x1252/0x1cd0 [ 1692.413208][T24979] ? dev_hard_start_xmit+0x247/0xa20 [ 1692.418661][T24979] ? sch_direct_xmit+0x399/0xd40 [ 1692.423780][T24979] ? __dev_queue_xmit+0x30b9/0x57d0 [ 1692.429153][T24979] ? __bpf_redirect+0x1511/0x1690 [ 1692.434340][T24979] ? bpf_clone_redirect+0x37e/0x500 [ 1692.439700][T24979] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 1692.445024][T24979] ? __bpf_prog_run512+0xc5/0xf0 [ 1692.450181][T24979] ? bpf_test_run+0x546/0xd20 [ 1692.455062][T24979] ? bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1692.460902][T24979] ? bpf_prog_test_run+0x5e5/0xa30 [ 1692.466223][T24979] ? __sys_bpf+0x6aa/0xd90 [ 1692.470827][T24979] ? __ia32_sys_bpf+0xa0/0xe0 [ 1692.475684][T24979] ? ia32_sys_call+0x394d/0x4180 [ 1692.480811][T24979] ? __do_fast_syscall_32+0xb0/0x110 [ 1692.486299][T24979] ? do_fast_syscall_32+0x38/0x80 [ 1692.491511][T24979] ? do_SYSENTER_32+0x1f/0x30 [ 1692.496375][T24979] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1692.503106][T24979] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1692.509146][T24979] ? kfree+0x3ad/0xdb0 [ 1692.513376][T24979] ? pskb_expand_head+0x707/0x1b70 [ 1692.518675][T24979] ? kmsan_get_metadata+0x13e/0x1c0 [ 1692.524085][T24979] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1692.530111][T24979] ? pskb_expand_head+0x1909/0x1b70 [ 1692.535506][T24979] ? kmsan_get_metadata+0x13e/0x1c0 [ 1692.540909][T24979] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1692.546928][T24979] __msan_warning+0x95/0x120 [ 1692.551709][T24979] erspan_build_header+0x170/0x2f0 [ 1692.557052][T24979] erspan_xmit+0x1252/0x1cd0 [ 1692.561859][T24979] ? kmsan_get_metadata+0x13e/0x1c0 [ 1692.567282][T24979] ? __pfx_erspan_xmit+0x10/0x10 [ 1692.572427][T24979] dev_hard_start_xmit+0x247/0xa20 [ 1692.577728][T24979] sch_direct_xmit+0x399/0xd40 [ 1692.582678][T24979] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1692.589217][T24979] __dev_queue_xmit+0x30b9/0x57d0 [ 1692.594422][T24979] ? kmsan_get_metadata+0x13e/0x1c0 [ 1692.599823][T24979] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1692.605830][T24979] ? __dev_queue_xmit+0x3d6/0x57d0 [ 1692.611149][T24979] __bpf_redirect+0x1511/0x1690 [ 1692.616188][T24979] bpf_clone_redirect+0x37e/0x500 [ 1692.621390][T24979] ___bpf_prog_run+0x13fe/0xe0f0 [ 1692.626552][T24979] __bpf_prog_run512+0xc5/0xf0 [ 1692.631526][T24979] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1692.638055][T24979] ? kmsan_internal_poison_memory+0x7d/0x90 [ 1692.644145][T24979] ? kmsan_internal_poison_memory+0x49/0x90 [ 1692.650227][T24979] ? kmsan_slab_alloc+0xdf/0x160 [ 1692.655355][T24979] ? kmem_cache_alloc_noprof+0x915/0xe10 [ 1692.661191][T24979] ? slab_build_skb+0x5c/0x560 [ 1692.666176][T24979] ? kmsan_get_metadata+0x13e/0x1c0 [ 1692.671579][T24979] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1692.677592][T24979] ? bpf_test_run+0x101/0xd20 [ 1692.682464][T24979] ? filter_irq_stacks+0x60/0x1a0 [ 1692.687679][T24979] ? kmsan_get_metadata+0x13e/0x1c0 [ 1692.693087][T24979] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1692.699104][T24979] ? kmsan_get_metadata+0x13e/0x1c0 [ 1692.704514][T24979] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1692.710537][T24979] ? ktime_get+0x4c4/0x520 [ 1692.715138][T24979] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1692.721157][T24979] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1692.726828][T24979] bpf_test_run+0x546/0xd20 [ 1692.731522][T24979] ? kmsan_get_metadata+0x13e/0x1c0 [ 1692.736919][T24979] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1692.743455][T24979] ? kmsan_get_metadata+0x13e/0x1c0 [ 1692.748856][T24979] ? bpf_test_run+0x3af/0xd20 [ 1692.753748][T24979] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1692.759780][T24979] bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1692.765492][T24979] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1692.771523][T24979] bpf_prog_test_run+0x5e5/0xa30 [ 1692.776684][T24979] __sys_bpf+0x6aa/0xd90 [ 1692.781154][T24979] __ia32_sys_bpf+0xa0/0xe0 [ 1692.785856][T24979] ia32_sys_call+0x394d/0x4180 [ 1692.790815][T24979] __do_fast_syscall_32+0xb0/0x110 [ 1692.796140][T24979] ? switch_fpu_return+0x17/0x20 [ 1692.801300][T24979] do_fast_syscall_32+0x38/0x80 [ 1692.806347][T24979] do_SYSENTER_32+0x1f/0x30 [ 1692.811039][T24979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1692.817604][T24979] RIP: 0023:0xf7fe3579 [ 1692.821804][T24979] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1692.841614][T24979] RSP: 002b:00000000f510655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1692.850208][T24979] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000900 [ 1692.858327][T24979] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1692.866435][T24979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1692.874539][T24979] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1692.882644][T24979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1692.890765][T24979] [ 1692.894164][T24979] Kernel Offset: disabled [ 1692.898552][T24979] Rebooting in 86400 seconds..