last executing test programs: 2m17.556323987s ago: executing program 3 (id=11114): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000e9a96ef13e7352373d1399b09195de51793303ceca7f36fa0b3d19a41e6c6af2f675788082e00d37c5ce4f4e82d9e00137f4a71324fe7eee1178f72173e6de7b63cac5d72b47eb0209eb3be3cd8acb0da5f0a176c7e6c4c68d69d26e0f9af8486428fe6bdb457b84a83c7e0e8aca20f0ad1c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') fcntl$lock(r2, 0x24, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffff7f, 0xfffffffffffffffc}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000001400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xe8, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20040041}, 0x4004050) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x2}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r8, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x7}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20048000}, 0x44840) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x894, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x6, 0x1, 0xaa21, 0x8, 0xa, 0x6, 0x200, 0x1, 0x4, 0xcc37, 0x5, 0xb5, 0x649f, 0x4, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0x28d, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x80, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x4, 0x80000001, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x7329, 0x6, 0x3, 0x100, 0x2, 0x3, 0x6d3, 0x224, 0x7ff, 0x0, 0x6, 0x8, 0xfffff001, 0x6, 0x7eda, 0x3, 0xffff, 0x0, 0x7, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4f, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x8, 0x3, 0x4, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xc, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x6, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x2, 0x2, 0x4, 0xfff, 0x5, 0x1, 0x3, 0x3, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x4b1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x3, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x9, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc1, 0x200, 0x8, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x4, 0x800, 0x6, 0x31e1, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x7, 0x5, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0xb, 0x7, 0x5, 0x0, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xef4, 0xfffffff6]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffbff1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0x9, 0x6, 0x4, 0x7ffe, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x2, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0x3, 0x10001, 0xa, 0xfffff000, 0x7f, 0x5, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0x10000, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92b, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0x48000, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x4, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x0, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x1, 0x4, 0x5, 0x4, 0xffffff89, 0x8, 0xfffffff3, 0x2, 0x2, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0x3, 0x401, 0x401, 0xb, 0x8, 0x2, 0xb, 0xffffffff, 0x0, 0x9, 0xffffffff, 0x25f, 0x8, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x1ff, 0x9, 0x0, 0x8009, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0xfffffff8, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4fedcacd, 0x1, 0x4, 0x7f, 0x2, 0x7, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0x401, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffb, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x401, 0x631, 0x101, 0x3ff, 0x101, 0x0, 0x7fff, 0x80000000, 0x3, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x5, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef2, 0x0, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0x6, 0x400, 0x436, 0x3, 0x1ff, 0x0, 0xffff76a6, 0x0, 0xbc, 0xa5, 0x0, 0x6, 0x7, 0x1, 0x81, 0x3, 0x2, 0x3, 0x4, 0x6, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x4, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x2, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x6, 0x4, 0x923}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x20000800) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="b4020000", @ANYRES16=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB], 0x2b4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2m17.129525185s ago: executing program 3 (id=11119): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x10000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000010100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r4, &(0x7f0000001680), 0x2, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r10, &(0x7f0000000380)) write$cgroup_subtree(r9, &(0x7f0000001480)=ANY=[@ANYBLOB="2d6370757365742037e90f7a3e6787eb6195a82348f84a874f7e5a89b22d49d07c6cbecb8c32daab7691b592084447586226b702908d445e61c7acec7fb2ee02274fb886b2d8ef27809c10d3b3e253a971"], 0x8) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f00000016c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000380)) 2m17.102992565s ago: executing program 3 (id=11122): open(&(0x7f0000000480)='./file0\x00', 0x2a4c0, 0xd2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=f', @ANYBLOB]) 2m17.048020405s ago: executing program 3 (id=11124): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x2c00, 0x3, 0xbfff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000080)={[{@resgid}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfb52, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m16.635844804s ago: executing program 3 (id=11128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000000b010400000000000000000200000a080002400000000008000340000000000d000100727066696c7465720000000028f5614f34d4bde48352b6268af7c004580fd9062627ffe368e44581215b22a5dd0da686d20410c736c9047903d9f57eacad2dbe"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000003200)='./file0\x00', 0x904624, &(0x7f0000003240)=ANY=[], 0x3, 0x332, &(0x7f0000001300)="$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") io_setup(0x7, &(0x7f0000000100)=0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r3, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080), 0x4, 0x4f3, &(0x7f00000012c0)="$eJzs3c9vVEUcAPDvbru0lEJBOahRQUTRELY/gIZwES4aQ0iMxJMHqO3SNN1lm26JtHIoR+8kknjSP8GbBxNOHrx505sXPJigEg018bDmvV3apb+1P9Z2P5/k9b2ZWfY702Vm9g3sTgAt62hEzEbEnoi4FhE99fxM/YgLtSN53ONHt4fnHt0ezkS1euW3TFqe5EXDn0nsqz9nZ0S8/07ER5mlcSvTM+NDxWJhsp7unSpN9FamZ06NZes5A4P9g33nTp8d2LS2Hil99fDtsUsffPP1Sw++n33zk6Ra3Z/uT8sa27GZak3PRXdDXntEXNqKYE3SXv/7w86T9LZnIuJY2v97oi19NQGA3axa7YlqT2MaANjtkvv/7shk8/W1gO7IZvP52hre4ejKFsuVqZM95Zs3RiJdwzoYuez1sWKhr75WeDBymSTdn14vpAeeSt8tnI6IQxFxt2NvWp4fLhdHmvnGBwBa2L5F8/+fHbX5HwDY5TqbXQEAYNuZ/wGg9Zj/AaD1/Iv536cDAWCXcP8PAK3H/A8ArWfN+f/O9tQDANgW712+nBzVudr3Xz/5pu5TI4XKeL50czg/XJ6cyI+Wy6PFQn64Wl3r+Yrl8kT/mflkZXrmaql888bU1bHS0GjhaiG3lY0BANbl0JH7PyaT/uz5vekRDXs5mKthd8s2uwJA07Q1uwJA0/g8D7SuddzjWwaAXW6ZLXqfsuJ/Ebpn81fYqU48b/0fWtVG1v+tHcDO9t/W/9/a9HoA288cDq2rWs3Y8x8AWow1fmBD//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALao7PTLZfLoX+GzyM5vPR+yPiIORy1wfKxb6IuJARPzQketI0v3NrjQAsEHZXzL1/b9O9BzvXly6J/NXR3qOiI8/v/LZraGpqcn+JP/3+fype/X8gT3NaAAA0OjC0qzaPF0/N9zIP350e/jJsZ1VfHixtrloEneuftRK2qM9PXdGLiK6/sjU0zXJ+5W2TYg/eycinlto/62GCN3pGkht59PF8ZPY+7cg/sLvf3H87FPxs2lZcs6lv4tnN6Eu0GruX6yNk/W+l3Sxev/LxtH0vHz/70xHqI1Lxr9kLJlbMv5l58e/tiXxM2mfPzqfXr0mD898++6SzGpPrexOxAvty8XPzMfPLD/+5o6vs40/vfjysZXKql9EnFi2/U92pC6lw2zvVGmitzI9c2qsNDRaGC3cGBgY7B/sO3f67EBvukZd+/ndcjF+PX/ywErxk/Z3rRC/c/X2x2vrbP+Xf1/78JVV4r/x6vKv/+FV4idz4uvrjD/UdWHF7buT+CMrtH+N1z9OrjP+g59nRtb5UABgG1SmZ8aHisXC5BoXyXvNtR7jYmdexGzEZj1huigREf+HdrnYyEWzRyZgqy10+mbXBAAAAAAAAAAAAAAAWEllema8Y4s/rdXsNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB7/RMAAP//TwTJNg==") sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e0001000000000000000000ac1e00010000000000000000000000000000000000000000ac1400020000000000000000000000000000020000000000"], 0x40}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x10, 0x3f8, 0x400, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4000091}, 0x4) 2m16.268003402s ago: executing program 3 (id=11132): open(&(0x7f0000000480)='./file0\x00', 0x2a4c0, 0xd2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) dup(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) 2m16.048109872s ago: executing program 32 (id=11132): open(&(0x7f0000000480)='./file0\x00', 0x2a4c0, 0xd2) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) dup(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) 34.246409989s ago: executing program 0 (id=12874): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000001c0)=[{{&(0x7f00000009c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x1, 0x0) 34.151958788s ago: executing program 0 (id=12876): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x2, 0x0, 0xfd, 0x82, 0x0, 0x8404, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) 34.010585928s ago: executing program 0 (id=12878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000080), &(0x7f0000000140)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, 0x0) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r6], 0x20}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000", @ANYRES32=r10, @ANYBLOB="380030803400018008000100", @ANYRES16=r7], 0x54}}, 0x14) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r11}, &(0x7f0000000380), &(0x7f00000003c0)=r12}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 33.790502107s ago: executing program 0 (id=12881): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x3, 0x0, 0x0, 0xbf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xffffffffffffffb4}, 0x4, 0x0, 0x0, 0x7, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = eventfd2(0x0, 0x80001) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x3, 0xffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r4, @ANYRESDEC, @ANYRES32=r2, @ANYRESOCT=r3, @ANYBLOB="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"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000eb7a8af8ff0000000049ecbfa200000000000007020035bef506eb8833705200f8ffffffb703000008000000b7040000000000008563462fb9"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) request_key(0x0, 0x0, &(0x7f0000000440)='wfdno', 0xfffffffffffffffc) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000002040000000800638d650c000080000000559201fedcde45b7e8f1c0cc88e5becf4abe66e67adcd86e89deda02a0517831454ddfa33de53ca4ca7c1412f1e48208702ec9bcb8a228c78da23f6714772f7e1d64bc01fbaa224785331b921b50ff001991b87727cce9ffaf019db393de42286edcf6eb0613c03398d869b820d1885bdef94ee479662963bd0725b0c480801096e8c46bf4079a74a241234e90c3f4b384671b4b94b1ab87f7d6a4a014", @ANYBLOB="1da43100992360640439cf1d5880d6eeef239454ff57a3453af2184cb6fb7ccfe3c6b4cdc10df8222bdde7f1c2", @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000040000001000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}}, 0x40000000) 33.548220567s ago: executing program 0 (id=12885): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) syncfs(r0) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000580)=0x803, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x4, 0x54}, 0x9c) 31.983822401s ago: executing program 0 (id=12910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) 31.942506311s ago: executing program 33 (id=12910): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8000000000000000}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x0) 3.231317172s ago: executing program 4 (id=13227): symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='proc\x00', 0x144000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x12) 3.189223662s ago: executing program 4 (id=13228): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1000000, 0x200101, 0x0, 'queue1\x00', 0xffffffff}) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000001280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xf963}}) 3.101926501s ago: executing program 4 (id=13229): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, 0x0, &(0x7f0000000600)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000020850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r6}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = io_uring_setup(0x47ba, &(0x7f00000000c0)={0x0, 0xaa8b, 0x40, 0x0, 0x2b4, 0x0, r0}) io_uring_enter(r8, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) r9 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0xe, 0x0, r9, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r11}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000f93f1400e47f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000dc667a00"/28], 0x48) 3.041279501s ago: executing program 1 (id=13230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000ca6bdc839277867800000000000000000000cff7e350128f8f8058528361a6bf111facc3aff50b1f83c462e1d3cb7a4c04cfc6d1848f77843b186950a8e1af1ce0219a7bce60f4d397d425f7edb06af2edc780479860efd9289b1a9d01c6816e5cdf7fc1c348604a5d6e96650ea59330b817185ca89832120d209e1b73360c6ab3c1e89a7be2c68dd4986646b8b1685182deb1ae9a9b746aedfdecae989632fb8f58c75b44b41c27", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 2.956449371s ago: executing program 1 (id=13231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x45b, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0x1, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") (async) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="914257aa0100000000000000040000000040000010000300000000002000000000000000"], 0x24, 0x0) (async) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='devlink_hwerr\x00', r2}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xbe0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) syz_emit_ethernet(0x1f, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.91574782s ago: executing program 4 (id=13232): r0 = socket(0x2, 0x80805, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000002100)=@assoc_value, &(0x7f0000000180)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "49258a4bd282e3c1", "b3c97f661ba7d1b2598d741c674b9023499f874df7284d1b46314e964b1fb54f", "579c08c7", "91795560826eeb5c"}, 0x38) writev(r1, &(0x7f0000000080), 0x0) close(r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r3, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f0000001040)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18601d475395cda7c50000000000000071181a00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x14, 0x18, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x95}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x1, 0xc, 0x9, 0x1, 0x10}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000011c0)='syzkaller\x00', 0xf2a9, 0x1a, &(0x7f0000001240)=""/26, 0x41000, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001280)={0x3, 0x2, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000012c0)=[r3, r3, r3, 0x1, r3, r3], &(0x7f0000001300)=[{0x0, 0x1, 0x8, 0x6}, {0x3, 0x5, 0xc, 0xa}, {0x0, 0x4, 0x6, 0x6}, {0x5, 0x5, 0x2, 0x4}, {0x4, 0x3, 0xb, 0x9}, {0x3, 0x4, 0x6}, {0x3, 0x2, 0x1, 0xb}, {0x0, 0x3, 0x8, 0xb}, {0x0, 0x5, 0x10, 0xc}], 0x10, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{r4}, &(0x7f00000010c0), &(0x7f0000001480)=r5}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000040)=""/107, 0x6b, 0x0, &(0x7f00000001c0)=""/66, 0x42}}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000004c0)={[{@grpquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@errors_continue}, {@lazytime}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@noload}, {@data_err_abort}]}, 0x1, 0x5e1, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0xd12db77, 0x400000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x9d}) lchown(&(0x7f0000000340)='./file0\x00', 0x0, 0xee00) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/157, 0x9d}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0x10, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @exit, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000700)='GPL\x00', 0x6, 0xf8, &(0x7f0000000740)=""/248, 0x41100, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x5, 0x4, 0x3, 0x5}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000880)=[r7], 0x0, 0x10, 0x5, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000004000000000000000", @ANYBLOB="e4ea2012a0a29ed40bab15194b78a9f540889e894afaf9a12378c965f9162250f5c5fb8d71a825d7122bd6f4df6b06b58a55ab1ebfde5a5c88de86894c73e3561cb7076106c6baa668d3556446520f225db2cefbb9e8f96e9d2df08e8a8718886ebbb4a228c125fa1e1dd2eb0e72d90481546e85a727a91925c97c47664af2bcbbb4130b9b1dd049400b527d31ed9295d4a770efacfce480707cb82258e76f2c9e355668eaea0011bcaf7fd9cdd8a7a59dfd41d10f48251bd4436418c800723b4a80af5504be1a353dbc28e7ee4e673ea8b47e42097e6abe8970d9c29c2214613b7200411205c4b3", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 2.88303157s ago: executing program 6 (id=13233): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, 0x0, &(0x7f0000000600)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000020850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r6}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = io_uring_setup(0x47ba, &(0x7f00000000c0)={0x0, 0xaa8b, 0x40, 0x0, 0x2b4, 0x0, r0}) io_uring_enter(r8, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) r9 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0xe, 0x0, r9, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r11}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000f93f1400e47f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000dc667a00"/28], 0x48) 2.65221006s ago: executing program 4 (id=13235): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, 0x0, &(0x7f0000000600)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/11], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000020850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r6}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = io_uring_setup(0x47ba, &(0x7f00000000c0)={0x0, 0xaa8b, 0x40, 0x0, 0x2b4, 0x0, r0}) io_uring_enter(r8, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) r9 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0xe, 0x0, r9, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r11}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000f93f1400e47f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000dc667a00"/28], 0x48) 2.587454089s ago: executing program 1 (id=13236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000ca6bdc839277867800000000000000000000cff7e350128f8f8058528361a6bf111facc3aff50b1f83c462e1d3cb7a4c04cfc6d1848f77843b186950a8e1af1ce0219a7bce60f4d397d425f7edb06af2edc780479860efd9289b1a9d01c6816e5cdf7fc1c348604a5d6e96650ea59330b817185ca89832120d209e1b73360c6ab3c1e89a7be2c68dd4986646b8b1685182deb1ae9a9b746aedfdecae989632fb8f58c75b44b41c27", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) 2.509711719s ago: executing program 1 (id=13238): symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='proc\x00', 0x144000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$setsig(r0, 0xa, 0x12) 2.440707799s ago: executing program 6 (id=13239): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x289c2, 0x0) close(r0) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00\x8e7\b\xed\xe7U\xa8\xa9\x0e\xce\xd4YgW\xf1o\x12\xb8n\xf0\xa3*5\xa3\x86lV\xe4\xe5H\xda\fE\xc8\x82Q\xfa#\xbb\x12Q\x16& \xd5`HY\xe0\xc7\x1c$\r\x04P\xbc\xa1\x9ep\x9c\x95\xb3\x16{z\xecJ\xf1\xc2K}D)\xa8;k\x19SN\xcc\xb9\xfaC\x04-\xb7(\xd5trd\xf18\xf2\x03\x898\xffS\xe0:\xa5\xaaZ\xa5\xaf\x809\x92v\xca\"\xef\xe5\xa2D\xfc\x14\v}:w\xfc\xe5\x94\xe9\x1f{\xbe\xcbd\x19\x96\x17\xeb\x88\x98!_7\xf0 #\xeb\xe5Zv\x84') r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) unlink(&(0x7f0000000280)='./file1\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r5, &(0x7f0000000240)={0x14, 0x67, 0x2, {0x80, 0x0, 0x8}}, 0x14) close_range(r3, r4, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x747, 0x0, @perf_config_ext={0x0, 0x25}, 0x0, 0x3, 0x2000ffff, 0x7, 0x0, 0xfffffffa, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x2, r0}]}, @IFLA_MASTER={0x8}]}, 0x34}}, 0x0) write$P9_RVERSION(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000"], 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) 2.387397389s ago: executing program 1 (id=13240): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000010001fff00000000ffdbdf2500000000", @ANYBLOB="2bb3e76c9ebfcb93ec40e456b4887f9936387425c90b960d0c66a1ee14cb4482be01a5215b1118ce45bada23d1cb8bc1c9d4e7e8", @ANYBLOB="000000ed29781f43e677e4925a0ee8490000000000280012800b000100697036746e6c00001800028014000200ff0200000000000000000000000000010800040002000008"], 0x50}, 0x1, 0x0, 0x0, 0x20048041}, 0x400d0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0xe, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xbe}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x0, 0x2, 0x6, 0x6, 0x30, 0x1}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x4, 0x0, 0x5, 0x6, 0x6, 0x2, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x4, 0x1, 0xffff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000500)=[{0x1, 0x2, 0xa, 0xa}, {0x4, 0x4, 0xa, 0x7}, {0x4, 0x2, 0x8}, {0x2, 0x5, 0x4, 0x4}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0xb, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdae, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8993, &(0x7f0000000180)={'bond0\x00', &(0x7f00000001c0)=@ethtool_eee={0x1, 0x401, 0x9, 0x7622, 0x4, 0x1, 0xb611, 0x4, [0x7, 0xd833]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r8, 0x0, 0x80000000}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2.191010828s ago: executing program 4 (id=13243): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x24) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) acct(0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x300}) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1080, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000003340), 0x800) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x1204c, 0x81, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_usb_connect$hid(0x0, 0x51, &(0x7f00000003c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.966235257s ago: executing program 2 (id=13244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x21081a, &(0x7f0000000040)={[{@grpquota}, {@errors_continue}, {@quota}]}, 0x1, 0x51d, &(0x7f0000001000)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24000100) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) pipe2$9p(&(0x7f0000000240), 0x0) 1.933319517s ago: executing program 6 (id=13246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f00000009c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 1.718988186s ago: executing program 6 (id=13247): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000045940000610b00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000c000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000006000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.481772615s ago: executing program 6 (id=13248): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000a00)='./file1\x00', 0xc37e, 0x101) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002e80)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e000000107080511b180008944040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691089241ea227d9"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000580)=""/208, 0xd0, 0x0) madvise(&(0x7f0000490000/0x1000)=nil, 0x1000, 0x0) sigaltstack(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.407569295s ago: executing program 5 (id=13249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000080), &(0x7f0000000140)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f00000002c0)) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={0x0, r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r6], 0x20}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r10, @ANYBLOB, @ANYRES16=r7], 0x54}}, 0x14) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r11}, &(0x7f0000000380), &(0x7f00000003c0)=r12}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 1.177770834s ago: executing program 5 (id=13250): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, 0x0, &(0x7f0000000600)=0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r4}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = io_uring_setup(0x47ba, &(0x7f00000000c0)={0x0, 0xaa8b, 0x40, 0x0, 0x2b4, 0x0, r0}) io_uring_enter(r6, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) r7 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0xe, 0x0, r7, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010101, 0x3}, 0x0, 0x0, 0x1}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='mm_page_free\x00', r9}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000f93f1400e47f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000dc667a00"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r10, &(0x7f0000000180), 0x0}, 0x20) 1.105399424s ago: executing program 2 (id=13251): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 943.921743ms ago: executing program 1 (id=13252): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001340)) iopl(0x3) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x2e}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000029000104000000000000a90000000000740f76eb655143931049749ca0c87029a039b886c491f7ff39ad1ce4778c096191803f9c4555cc9f3be453aa8e75bffb53365f93e3c920ec63eca311b2b1376c561734eee99f813e094c45832481ab56a7acee1b89d9d38861699c4982cd03bc21fd968e22dcec712c75601ad66cf21cd2113b741482abb6ea87d2ad0cf7d2da9ba6707a0f9fd669ad31b1bf31a7edbea86169cd3285335b6428e005f9d89c5908f9ab9c82a02c4f9fb1306c32151743fb", @ANYRES32=r7, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x8}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000000)=ANY=[@ANYRES16=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0xffffffffffffffff}, 0x13) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r3, &(0x7f0000000240)={0x14, 0x67, 0x2, {0x80, 0x0, 0x8}}, 0x14) close_range(r1, r2, 0x0) 835.284053ms ago: executing program 5 (id=13253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8b5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r1, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @remote, @dev, @remote}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="a313fa18e24a8205bd70010000000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r10, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) r11 = memfd_create(0x0, 0x5) fsetxattr$security_selinux(r11, 0x0, &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 487.364062ms ago: executing program 5 (id=13254): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000014c0)=@newtfilter={0x113c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x110c, 0x2, [@TCA_FLOW_ACT={0x458, 0x9, 0x0, 0x1, [@m_ct={0xd4, 0x1a, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x2}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_ZONE={0x6, 0x4, 0x4}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e23}]}, {0x77, 0x6, "9cc9d4e6bdf2cc5a73a974a617a1bc064de82677b7f147b26d2ccd9626c93e9ba5cd066e4f4637195d2cbae85804a0b2c57bdf215a9afeed6e9cd53b85328b388e393fda7a4836149dcaa85bd438cbe1721f82204f6a06ac5c0c4052e69fa6e350e1c4a7162e1e735b5cf7477c51e051174344"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xd0, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0xa4, 0x6, "16c499169f070da403762d400f62fff9e1827f6aca6729cb8acc6069df11b42bfbbf9df34b8ac65d8c29541e30c15b2be9d249c6fbc610f42311cac7f2d4545637af37d8d54ded24f51b97d230754e97c0633a197436b1594b2f5995ffb0b948b8dc5248c6b0e2e9be76591a47702f213cba1c2ed3d6b430dbed876ee9108c89bd124fc8992ac7c6db95bb3b3ec67b00abdfcb3637dc73400440597831b041b2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_tunnel_key={0x12c, 0x3, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0xea, 0x6, "6aaa40dd1183f4cc4762c14645f35ac2887b788004a39f1f0ed23761970848e5a53b3d8d8dad81fabf05e8fb22b84958ad55360bdc965512d571d907eebabe38ed0ff481461807fade5787bf718c51409bd97ea0037dcf72536a920df589604fe0f57ead0b13d79abc6cc31a9809453360238d7cbb65b56db4909c1d5746b076bd227d61635c0b14916bb1d2fc122cc24d35041da216dd422459c9e9ad6f3f03567f9c8fdaa53045cf824ce5a132e4168704199e0c3af98a269d262569a9a748f8be4c82e5f5e0af4c6750c9538369eaa90daf0b8d52073a1db205d05fb73a97da2fd1159de1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_nat={0xf0, 0x19, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x0, 0x7, 0x0, 0x4}, @local, @dev={0xac, 0x14, 0x14, 0x3c}, 0xffffff00}}]}, {0x9d, 0x6, "57adc7a67a4ae9564f87b927af629a3dd7797f78274776990454ecdac615a83473f10372648db9f345686b77440ddfcd31056f17b7381f09cd76c3958a60692b9af4a0ff1c502833f528ede58b2ee6d774fa4ac386280eeb6040808fe300a20796428a8b45d859124c1d7b62a0cfc841109775213af86a944e60d9668c30301521f9cd9b7301690a83113382333e411008e26700829b3c453c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x94, 0x7, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8000, 0x5, 0x1, 0x6, 0x4309}, 0x0, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x6, 0xfd4a, 0x1}, 0x3, r1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x10000, 0x80000001, 0xfffffffffffffff8, 0x401, 0x7}, 0x3, r1}}]}, {0x5, 0x6, "91"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xa5}, @TCA_FLOW_POLICE={0x410, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x14, 0x5, 0x2, 0x0, 0x1, 0xffffffff, 0x0, 0x9, 0x0, 0x4, 0x3, 0x7, 0x1ff, 0x9, 0x9bb, 0x4f, 0x7f, 0x9, 0x1, 0xa8a, 0xf598, 0x5, 0x8, 0x7, 0xaa6, 0x0, 0x1ff, 0x9, 0xff, 0x7fff, 0x4, 0x2, 0x8001, 0x1, 0x4, 0xb, 0x6, 0x101, 0x6, 0x8, 0x9, 0x7f, 0x5, 0x7, 0x8, 0x81, 0x7f, 0x3, 0x1, 0x8, 0xc, 0x400, 0x6, 0x5, 0x3, 0xe96, 0x4, 0x7ff, 0x24, 0xc, 0x3, 0xb, 0x3, 0x6, 0x9, 0xb, 0x0, 0x2, 0x6, 0xfffffff7, 0x2, 0x4, 0x7fffffff, 0x40, 0x9, 0x40, 0x7f, 0x40, 0x8, 0xffffffff, 0x3, 0x5, 0x0, 0x4, 0xffff, 0xa05, 0x2, 0x9, 0x8, 0x8, 0xf, 0x4, 0x200, 0x8001, 0x2, 0x10, 0x7, 0xa, 0xffff6a86, 0x6, 0x9, 0x4, 0x6e, 0xd5ed, 0x50bf, 0xf0, 0x6, 0x1000, 0xe3f, 0xffff8001, 0x0, 0x5, 0x3, 0x80000001, 0x5, 0x211, 0xaeea, 0x80000000, 0x10, 0x0, 0x6, 0x7, 0xc1a2, 0x9, 0x400, 0xff6, 0x7, 0x9, 0xffff8000, 0x9d, 0x20bc, 0xf, 0x1, 0x38637944, 0x2, 0xf, 0x2, 0x4, 0x4, 0x9, 0x5, 0x2, 0x5, 0x5, 0x2, 0xab8, 0x9, 0x0, 0x4, 0x3, 0x10, 0x400, 0x6, 0x2, 0x8, 0x3, 0x8, 0x5, 0x2, 0xd5e, 0x1d4, 0x8, 0x6, 0x3, 0x7fffffff, 0x10, 0xfff, 0x2, 0x4, 0x3, 0x0, 0x1, 0x2c2, 0x3ff, 0x0, 0x2, 0x1, 0x7, 0x4, 0x1, 0x5d18569b, 0x0, 0x5, 0x4, 0x5, 0x81, 0x10, 0x4, 0x80, 0x7aa, 0x800, 0x800, 0x6, 0x6, 0x8ff, 0xf3b, 0x9, 0x800, 0x4, 0x957, 0x9, 0xfffffe01, 0x7ff, 0x2, 0x9, 0x3, 0x1e, 0x10000, 0x400, 0x5, 0x9, 0xe, 0x6, 0x0, 0x2, 0x6, 0xd57, 0xdbe, 0x4d1, 0x7, 0x5, 0xdc1, 0xf, 0x8, 0x10001, 0x6, 0x1, 0x3, 0x4, 0x9, 0x8, 0x3000000, 0x2, 0x6, 0x7, 0x6f9, 0x6, 0x7, 0x4, 0x1ff, 0xfffffff4, 0xff, 0x10001, 0x7, 0x10001, 0x0, 0x3, 0x7997, 0x1b, 0x2, 0x5, 0x7, 0xffffffff, 0x1, 0x8, 0x81]}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}, @TCA_FLOW_MASK={0x8, 0x6, 0x81}, @TCA_FLOW_POLICE={0x880, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0x4000000, 0x81, 0x0, 0xffff, 0x0, 0x3, 0x80000000, 0x4, 0xf9, 0xfffffffe, 0x4350, 0x200, 0x4, 0x0, 0x4977, 0x7fffffff, 0x0, 0x7, 0x1, 0x7, 0x6, 0x7fff, 0xd2, 0x1, 0x2, 0x2, 0xad, 0x7, 0x5, 0x9, 0x4, 0xfffffffc, 0x9, 0x2, 0x9, 0x956, 0xc9, 0x6, 0x1, 0x800, 0x401, 0x800, 0x7f, 0x9558, 0x5, 0x3fc, 0x9, 0x7, 0x6, 0x401, 0x1, 0x0, 0xa662, 0x8cf, 0x2, 0x7fd5, 0x0, 0x3, 0x4, 0x0, 0xffff, 0x2, 0x10000, 0x8, 0x5, 0x400, 0xa, 0xfffffffc, 0x2, 0x0, 0x200, 0x9, 0x5ad, 0x4, 0x5, 0x40, 0x3, 0x1, 0x1, 0xfffffffa, 0x6, 0x2, 0x1, 0x8, 0x5, 0x6, 0xe, 0x81, 0x5, 0x9, 0x7fff, 0x2, 0x69f6, 0xfffffff3, 0x0, 0x6, 0x2, 0x2, 0xb2, 0x1, 0x80000001, 0x4, 0xee3, 0x3, 0x7fff, 0x80000000, 0x1, 0x1, 0x65d, 0x7, 0x3ff, 0x4, 0x0, 0xfffff8b6, 0x0, 0x5b38, 0x3, 0x7fffffff, 0x0, 0x8, 0xfffff50d, 0x7f, 0x6, 0x5, 0x401, 0x0, 0x8, 0xe6, 0x4, 0x200, 0x7f, 0x1ff, 0x71, 0x0, 0x6, 0xfffffffe, 0x7, 0x7, 0x5, 0x800, 0x0, 0x3, 0x3, 0xc, 0x0, 0xff, 0xd010, 0x1, 0x9, 0x18000, 0x100, 0x0, 0x1, 0x66, 0x9, 0x4023, 0x9d3, 0x3, 0x6, 0x6, 0x5, 0x9, 0x5, 0x3be9, 0x2, 0x8, 0x67, 0x8, 0x8, 0x1, 0x5ed, 0x0, 0xd, 0x9, 0x5, 0x6, 0x1, 0x9, 0x1ff, 0x5, 0x2, 0x0, 0xffffffff, 0x4, 0x7, 0x77, 0xfff, 0x8, 0x8d, 0x8, 0x101, 0x4, 0x10, 0x3, 0x7, 0x0, 0x3, 0x6, 0x4, 0x800, 0xeb48f879, 0x7, 0x9, 0x1000, 0x7, 0x7, 0xc, 0x81, 0x1ff, 0xab, 0xba, 0x3, 0x0, 0x9, 0x8400, 0x4, 0x5d31, 0x3, 0x2, 0x100, 0x2d54, 0x3, 0x6, 0x81, 0x8, 0x1, 0x4, 0x6, 0x1, 0x8001, 0x7b64, 0x6, 0xe182, 0x8, 0xa18, 0x5c, 0x7ff, 0xc0000000, 0x2, 0x6c, 0x2, 0x6, 0x5, 0x10000, 0x7, 0x5, 0x5, 0x7f, 0x7, 0x305b, 0x0, 0x100, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffff8000}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x1, 0x7f, 0xcf23a5b, 0x6, 0x42cf, 0xeb6e, 0x1, 0xdb3, 0x3, 0x7, 0x7fffffff, 0x6, 0x7, 0xc, 0xff, 0x0, 0x9, 0x2, 0x7, 0x7, 0x4, 0x6, 0x4, 0xed03, 0x4, 0xfffffffb, 0x1000, 0x2, 0x3, 0x3ef800, 0x5, 0x400, 0x5, 0x9abf, 0x5, 0x8, 0x442, 0x2, 0x2, 0x1, 0x17, 0x4, 0x1, 0x1, 0x8, 0x3, 0x6, 0x620, 0x80000001, 0x8, 0xd, 0x7, 0x8, 0x1, 0xffffffff, 0xd2, 0x6, 0xfff, 0x1ff, 0x0, 0xc000, 0xd2f6, 0x2, 0x0, 0x8215, 0x9, 0x0, 0x400, 0xb, 0x9, 0x80000001, 0x9, 0x4, 0x132336f0, 0x80000000, 0x9, 0x8, 0x8, 0x9b8e, 0x0, 0x1, 0x400, 0x10000, 0x8, 0x9, 0x5, 0x5ac4726c, 0x9, 0x1, 0x40, 0x5, 0x2, 0xffffffff, 0x8, 0x7ff, 0x0, 0x3, 0x8, 0x400, 0x100, 0x0, 0x1c9, 0x5, 0x7, 0xfff, 0xfffffffa, 0x7, 0x60, 0x80000000, 0xc0000, 0x7, 0x80, 0x9, 0x0, 0x70000000, 0x6, 0x1, 0x7fff, 0xe, 0x9, 0xfff, 0x4, 0x2, 0xad5, 0x3, 0x4ebd, 0x5, 0x8, 0x6bd, 0x7, 0x0, 0xffffff1a, 0x7, 0xfffffffd, 0x7, 0xffff, 0x9, 0x7, 0x2, 0x6, 0x7fffffff, 0x9, 0x9, 0xffffffff, 0x1, 0x200, 0xfffffffc, 0x200, 0x5, 0xa, 0x100, 0x3, 0x6, 0x80000000, 0x7, 0x8, 0x9, 0x4, 0xfffffff8, 0x8, 0x400, 0x2, 0xba, 0x6, 0x8, 0x7, 0xffffffff, 0x8, 0x4, 0x2, 0x6, 0x4, 0x7, 0x3, 0x912b, 0x1, 0x7fff, 0x7f, 0x4, 0x80, 0x400, 0x3, 0x4, 0xfffffff7, 0x7, 0xfffffff8, 0x0, 0x4, 0x4, 0x6, 0x401, 0xffffff80, 0x8, 0x3, 0x401, 0x3, 0x73, 0x6, 0x4, 0x2, 0x7b, 0x80, 0x6, 0x3, 0x8, 0x1, 0x7987, 0x3ff, 0xd7, 0x8001, 0x6, 0x6, 0x2, 0x2, 0x8, 0x7, 0x81, 0x4, 0x0, 0x3, 0x0, 0xffffffff, 0x5, 0x8, 0x9, 0x2, 0x0, 0xfffff000, 0x600b5c69, 0x6d9, 0x6, 0x9, 0x4, 0x101, 0xb, 0x5, 0x4, 0x9, 0x5, 0x8, 0x7, 0x80000000, 0xa, 0x67e0, 0xc, 0xb, 0xfc, 0x80000001, 0x7, 0x7, 0x3, 0x7, 0x2, 0x5, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfd1614c, 0x20000014, 0x10000, 0x7, 0x4, {0x8, 0x0, 0x0, 0x7fff, 0x1000, 0x80000001}, {0x5, 0x0, 0x0, 0x2, 0x2, 0x5}, 0x5, 0xfff, 0x3}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}]}}]}, 0x113c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 407.975612ms ago: executing program 5 (id=13255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_drop_inode\x00', r0}, 0x18) socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r2, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, @perf_bp={0x0, 0x2}, 0x2340, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd4) close(r3) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1700000000000000000000000200000000000000b3a3438246709388477cd244693d4bc0a8752193b63239fbda0e581296ab0ecdff50643df44d0fa4ea13678e0d15b55c5ae7985282dd5a4c2b6ad35fde2d0741e8d04510f641f600b21e717c1a8889b10e066c957e92e376bf5b7329dcd28017de78e51b", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f00000030c0)=""/4110, 0x100e) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='rxrpc_rx_done\x00', r8}, 0x18) syz_io_uring_setup(0x2239, &(0x7f0000001140)={0x0, 0x0, 0x10100, 0x4, 0x20000283}, &(0x7f0000000040), &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 207.559961ms ago: executing program 6 (id=13256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x21081a, &(0x7f0000000040)={[{@grpquota}, {@errors_continue}, {@quota}]}, 0x1, 0x51d, &(0x7f0000001000)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24000100) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) pipe2$9p(&(0x7f0000000240), 0x0) 109.335741ms ago: executing program 2 (id=13257): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x3}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x7ffffffe}, 0x0, 0x7, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 87.720201ms ago: executing program 2 (id=13258): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0x6be52ad4, 0x8}, 0xc) kcmp(r0, r1, 0x5, r2, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x10) fcntl$notify(r6, 0x402, 0x3) dup2(r5, r6) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000580)={'sit0\x00', r7, 0x20, 0x20, 0x3, 0x6, {{0x48, 0x4, 0x3, 0x1, 0x120, 0x64, 0x0, 0x4, 0x4, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x4c, 0x3f, 0x1, 0x4, [{@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x10001}, {@rand_addr=0x64010101, 0x8}, {@multicast1, 0x4}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@multicast1, 0xde54}]}, @lsrr={0x83, 0xb, 0xa8, [@rand_addr=0x64010100, @multicast2]}, @cipso={0x86, 0x4e, 0x3, [{0x2, 0xc, "00cab9c403a92f5330ae"}, {0x0, 0x12, "c640152aa1a2cb317492d206efc94e36"}, {0x5, 0xc, "dbcb7b15cce65b329ce4"}, {0x5, 0x3, "d1"}, {0x5, 0xe, "1710b607bd14c173ae30f05a"}, {0x0, 0xd, "6c195b689b5d2e137a54f6"}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x60, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x8f, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0xfff}, {@private=0xa010100, 0x5}, {@private=0xa010101, 0xb9d}, {@private=0xa010100, 0x422}]}, @timestamp_addr={0x44, 0x14, 0xab, 0x1, 0x8, [{@loopback}, {@remote, 0x9}]}]}}}}}) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 45.504251ms ago: executing program 2 (id=13259): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000045940000610b00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000c000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000006000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 25.98316ms ago: executing program 2 (id=13260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000580)=ANY=[@ANYRES16=0x0], 0x310) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r8}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001"], 0x24}}, 0x0) 0s ago: executing program 5 (id=13261): fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): tate [ 885.607264][T17771] ipvlan0: entered allmulticast mode [ 885.612678][T17771] @ÿ: entered allmulticast mode [ 885.643593][T17771] ipvlan0: left allmulticast mode [ 885.648767][T17771] @ÿ: left allmulticast mode [ 885.681109][T17771] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 885.708452][T17772] bridge0: port 3(ipvlan0) entered blocking state [ 885.715019][T17772] bridge0: port 3(ipvlan0) entered disabled state [ 885.731775][T17772] ipvlan0: entered allmulticast mode [ 885.737130][T17772] @ÿ: entered allmulticast mode [ 885.759940][T17772] ipvlan0: left allmulticast mode [ 885.765149][T17772] @ÿ: left allmulticast mode [ 885.779397][T17772] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 886.033533][T17813] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 886.311525][T17827] bond1: entered promiscuous mode [ 886.316621][T17827] bond1: entered allmulticast mode [ 886.330795][T17827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 886.348446][T17827] bond1 (unregistering): Released all slaves [ 886.572957][T17825] lo speed is unknown, defaulting to 1000 [ 886.727192][T17825] chnl_net:caif_netlink_parms(): no params data found [ 886.891423][T17825] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.898557][T17825] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.936346][T17825] bridge_slave_0: entered allmulticast mode [ 886.953562][T17825] bridge_slave_0: entered promiscuous mode [ 886.976532][T17825] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.983717][T17825] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.013609][T17825] bridge_slave_1: entered allmulticast mode [ 887.026347][T17825] bridge_slave_1: entered promiscuous mode [ 887.080306][T17825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.098050][T17825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.145071][T17825] team0: Port device team_slave_0 added [ 887.155271][T17825] team0: Port device team_slave_1 added [ 887.199128][T17825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.206161][T17825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.232292][T17825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.251111][T17825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.258102][T17825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.284211][T17825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.392657][T17825] hsr_slave_0: entered promiscuous mode [ 887.407578][T17825] hsr_slave_1: entered promiscuous mode [ 887.417845][T17825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 887.433876][T17825] Cannot create hsr debugfs directory [ 887.612941][T17825] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.639681][T18279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.669374][T18279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.702389][T17825] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.752646][T17825] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.822139][T17825] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.926047][T17825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 887.949842][T17825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 887.975123][T17825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 888.017671][T18309] bond1: entered promiscuous mode [ 888.022944][T18309] bond1: entered allmulticast mode [ 888.043673][T18309] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.075187][T18309] bond1 (unregistering): Released all slaves [ 888.124049][T17825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 888.257931][T17825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.286514][T17825] 8021q: adding VLAN 0 to HW filter on device team0 [ 888.297992][T18394] netlink: 'syz.5.12759': attribute type 10 has an invalid length. [ 888.302128][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.306093][T18394] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12759'. [ 888.313110][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.382206][T18394] bridge0: port 1(ipvlan0) entered blocking state [ 888.388705][T18394] bridge0: port 1(ipvlan0) entered disabled state [ 888.420824][T18394] ipvlan0: entered allmulticast mode [ 888.426244][T18394] @ÿ: entered allmulticast mode [ 888.431884][T18394] ipvlan0: left allmulticast mode [ 888.436948][T18394] @ÿ: left allmulticast mode [ 888.454735][T18394] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 888.473636][ T778] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.480856][ T778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.522748][T17825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 888.533206][T17825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 888.671560][T17825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.710947][T18417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.763752][T18417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.817486][T17825] veth0_vlan: entered promiscuous mode [ 888.828268][T17825] veth1_vlan: entered promiscuous mode [ 888.869473][T17825] veth0_macvtap: entered promiscuous mode [ 888.881688][T17825] veth1_macvtap: entered promiscuous mode [ 888.907618][T18428] bond1: entered promiscuous mode [ 888.912713][T18428] bond1: entered allmulticast mode [ 888.933725][T18428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 888.964807][T18428] bond1 (unregistering): Released all slaves [ 889.001957][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.012562][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.022433][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.032971][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.042831][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.053313][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.063171][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.073639][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.083567][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.094045][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.103938][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.114551][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.124509][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.134979][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.145096][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.155662][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.167717][T17825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.186975][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.197478][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.207495][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.218137][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.228142][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.238858][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.248722][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.259192][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.269572][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.280514][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.290486][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.301145][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.311087][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.321578][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.331459][T17825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.341963][T17825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.370696][T17825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.379973][T18495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12768'. [ 889.393473][T17825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.402322][T17825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.411250][T17825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.420032][T17825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.630856][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 889.630873][ T29] audit: type=1326 audit(2000001669.672:91413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18514 comm="syz.0.12774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b6c5d19 code=0x7ffc0000 [ 889.699365][ T29] audit: type=1326 audit(2000001669.702:91414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18514 comm="syz.0.12774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f036b6c5d19 code=0x7ffc0000 [ 889.723184][ T29] audit: type=1326 audit(2000001669.702:91415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18514 comm="syz.0.12774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f036b6c5d19 code=0x7ffc0000 [ 889.868032][ T29] audit: type=1326 audit(2000001669.892:91416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.2.12780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2626b5d19 code=0x7ffc0000 [ 889.928136][ T29] audit: type=1326 audit(2000001669.932:91417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.2.12780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2626b5d19 code=0x7ffc0000 [ 889.952155][ T29] audit: type=1326 audit(2000001669.932:91418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.2.12780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2626b5d19 code=0x7ffc0000 [ 889.976040][ T29] audit: type=1326 audit(2000001669.932:91419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.2.12780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2626b5d19 code=0x7ffc0000 [ 889.999808][ T29] audit: type=1326 audit(2000001669.932:91420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.2.12780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2626b5d19 code=0x7ffc0000 [ 890.023573][ T29] audit: type=1326 audit(2000001669.932:91421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.2.12780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2626b5d19 code=0x7ffc0000 [ 890.047276][ T29] audit: type=1326 audit(2000001669.932:91422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.2.12780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2626b5d19 code=0x7ffc0000 [ 890.159008][T18540] lo speed is unknown, defaulting to 1000 [ 890.442451][T18574] netlink: 'syz.2.12787': attribute type 10 has an invalid length. [ 890.450520][T18574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12787'. [ 890.466577][T18574] bridge0: port 3(ipvlan0) entered blocking state [ 890.473217][T18574] bridge0: port 3(ipvlan0) entered disabled state [ 890.479969][T18574] ipvlan0: entered allmulticast mode [ 890.485402][T18574] @ÿ: entered allmulticast mode [ 890.491391][T18574] ipvlan0: left allmulticast mode [ 890.496462][T18574] @ÿ: left allmulticast mode [ 890.512378][T18574] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 890.603386][T18581] netlink: 'syz.4.12789': attribute type 10 has an invalid length. [ 890.611639][T18581] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12789'. [ 890.634637][T18581] bridge0: port 3(ipvlan0) entered blocking state [ 890.641512][T18581] bridge0: port 3(ipvlan0) entered disabled state [ 890.648485][T18581] ipvlan0: entered allmulticast mode [ 890.653885][T18581] @ÿ: entered allmulticast mode [ 890.661063][T18581] ipvlan0: left allmulticast mode [ 890.666167][T18581] @ÿ: left allmulticast mode [ 890.706762][T18581] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 890.777545][T18591] loop0: detected capacity change from 0 to 1024 [ 890.784694][T18591] EXT4-fs: Ignoring removed orlov option [ 890.790531][T18591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 890.825823][T18593] lo speed is unknown, defaulting to 1000 [ 890.835230][T18591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.000735][ T8073] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.369586][T18647] loop0: detected capacity change from 0 to 1024 [ 891.410607][T18647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 891.568362][ T8073] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 891.718969][T18673] netlink: 'syz.5.12808': attribute type 10 has an invalid length. [ 891.726995][T18673] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12808'. [ 891.767646][T18673] bridge0: port 1(ipvlan0) entered blocking state [ 891.774214][T18673] bridge0: port 1(ipvlan0) entered disabled state [ 891.826639][T18673] ipvlan0: entered allmulticast mode [ 891.832019][T18673] @ÿ: entered allmulticast mode [ 891.843700][T18681] netlink: 'syz.1.12811': attribute type 9 has an invalid length. [ 891.851738][T18681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12811'. [ 891.875102][T18673] ipvlan0: left allmulticast mode [ 891.880173][T18673] @ÿ: left allmulticast mode [ 891.908151][T18673] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 891.962490][T18680] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12810'. [ 892.171631][T18699] netlink: 'syz.1.12818': attribute type 10 has an invalid length. [ 892.179612][T18699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12818'. [ 892.192741][T18699] bridge0: port 3(ipvlan0) entered blocking state [ 892.199207][T18699] bridge0: port 3(ipvlan0) entered disabled state [ 892.206264][T18699] ipvlan0: entered allmulticast mode [ 892.211660][T18699] veth0_vlan: entered allmulticast mode [ 892.217993][T18699] ipvlan0: left allmulticast mode [ 892.223205][T18699] veth0_vlan: left allmulticast mode [ 892.229644][T18699] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 892.295561][T18707] lo speed is unknown, defaulting to 1000 [ 892.362225][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12822'. [ 892.532847][T18758] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12827'. [ 892.574491][T18757] bond1: entered promiscuous mode [ 892.579648][T18757] bond1: entered allmulticast mode [ 892.594064][T18757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 892.613396][T18757] bond1 (unregistering): Released all slaves [ 892.654893][T18715] lo speed is unknown, defaulting to 1000 [ 892.849996][T18846] bond1: entered promiscuous mode [ 892.855143][T18846] bond1: entered allmulticast mode [ 892.866497][T18846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 892.917244][T18846] bond1 (unregistering): Released all slaves [ 893.013020][T18888] netlink: 'syz.4.12835': attribute type 10 has an invalid length. [ 893.021144][T18888] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12835'. [ 893.083014][T18888] bridge0: port 3(ipvlan0) entered blocking state [ 893.089501][T18888] bridge0: port 3(ipvlan0) entered disabled state [ 893.145235][T18888] ipvlan0: entered allmulticast mode [ 893.150646][T18888] @ÿ: entered allmulticast mode [ 893.167757][T18888] ipvlan0: left allmulticast mode [ 893.168000][T18937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12836'. [ 893.172872][T18888] @ÿ: left allmulticast mode [ 893.228839][T18888] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 893.403558][T18952] netlink: 'syz.4.12840': attribute type 9 has an invalid length. [ 893.514882][T18964] FAULT_INJECTION: forcing a failure. [ 893.514882][T18964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.528016][T18964] CPU: 0 UID: 0 PID: 18964 Comm: syz.0.12848 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 893.538892][T18964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 893.548969][T18964] Call Trace: [ 893.552300][T18964] [ 893.555278][T18964] dump_stack_lvl+0xf2/0x150 [ 893.559915][T18964] dump_stack+0x15/0x1a [ 893.564149][T18964] should_fail_ex+0x223/0x230 [ 893.568999][T18964] should_fail+0xb/0x10 [ 893.573183][T18964] should_fail_usercopy+0x1a/0x20 [ 893.578243][T18964] _copy_from_user+0x1e/0xb0 [ 893.582880][T18964] move_addr_to_kernel+0x82/0x120 [ 893.587977][T18964] copy_msghdr_from_user+0x271/0x2a0 [ 893.593338][T18964] __sys_sendmmsg+0x1e8/0x4b0 [ 893.598069][T18964] __x64_sys_sendmmsg+0x57/0x70 [ 893.602945][T18964] x64_sys_call+0x29aa/0x2dc0 [ 893.607694][T18964] do_syscall_64+0xc9/0x1c0 [ 893.612283][T18964] ? clear_bhb_loop+0x55/0xb0 [ 893.616997][T18964] ? clear_bhb_loop+0x55/0xb0 [ 893.621706][T18964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.627654][T18964] RIP: 0033:0x7f036b6c5d19 [ 893.632096][T18964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.651912][T18964] RSP: 002b:00007f0369d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 893.660363][T18964] RAX: ffffffffffffffda RBX: 00007f036b8b5fa0 RCX: 00007f036b6c5d19 [ 893.668405][T18964] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000003 [ 893.676464][T18964] RBP: 00007f0369d37090 R08: 0000000000000000 R09: 0000000000000000 [ 893.684532][T18964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.692524][T18964] R13: 0000000000000000 R14: 00007f036b8b5fa0 R15: 00007fff6631cb78 [ 893.700679][T18964] [ 893.833068][T18972] lo speed is unknown, defaulting to 1000 [ 893.856946][T18974] netlink: 'syz.4.12853': attribute type 10 has an invalid length. [ 893.879641][T18974] bridge0: port 3(ipvlan0) entered blocking state [ 893.886354][T18974] bridge0: port 3(ipvlan0) entered disabled state [ 893.900770][T18974] ipvlan0: entered allmulticast mode [ 893.906103][T18974] @ÿ: entered allmulticast mode [ 893.940923][T18974] ipvlan0: left allmulticast mode [ 893.946155][T18974] @ÿ: left allmulticast mode [ 893.963780][T18974] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 894.158230][T19012] loop0: detected capacity change from 0 to 1024 [ 894.176626][T19015] bond1: entered promiscuous mode [ 894.181862][T19015] bond1: entered allmulticast mode [ 894.190581][T19015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 894.226929][T19015] bond1 (unregistering): Released all slaves [ 894.258362][T19012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.388288][ T8073] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.553241][T19107] lo speed is unknown, defaulting to 1000 [ 894.566843][T19112] FAULT_INJECTION: forcing a failure. [ 894.566843][T19112] name failslab, interval 1, probability 0, space 0, times 0 [ 894.579522][T19112] CPU: 1 UID: 0 PID: 19112 Comm: syz.2.12869 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 894.590478][T19112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 894.600561][T19112] Call Trace: [ 894.603857][T19112] [ 894.606802][T19112] dump_stack_lvl+0xf2/0x150 [ 894.611449][T19112] dump_stack+0x15/0x1a [ 894.615646][T19112] should_fail_ex+0x223/0x230 [ 894.620364][T19112] should_failslab+0x8f/0xb0 [ 894.625040][T19112] kmem_cache_alloc_noprof+0x52/0x320 [ 894.630442][T19112] ? __send_signal_locked+0x155/0x780 [ 894.635880][T19112] __send_signal_locked+0x155/0x780 [ 894.641112][T19112] send_signal_locked+0x28f/0x3a0 [ 894.646300][T19112] ? selinux_file_open+0x34a/0x3b0 [ 894.651529][T19112] do_send_sig_info+0x9f/0xf0 [ 894.656238][T19112] group_send_sig_info+0x6d/0x90 [ 894.661209][T19112] bpf_send_signal_common+0x20b/0x2e0 [ 894.666796][T19112] bpf_send_signal_thread+0x1a/0x30 [ 894.672034][T19112] bpf_prog_5197b192823fa451+0x23/0x36 [ 894.677511][T19112] bpf_trace_run2+0x104/0x1d0 [ 894.682374][T19112] ? genradix_free_recurse+0x7f/0x90 [ 894.687699][T19112] ? genradix_free_recurse+0x7f/0x90 [ 894.693037][T19112] kfree+0x247/0x2f0 [ 894.697035][T19112] ? filldir64+0xda/0x400 [ 894.701647][T19112] genradix_free_recurse+0x7f/0x90 [ 894.706856][T19112] __genradix_free+0x21/0x30 [ 894.711560][T19112] proc_map_files_readdir+0x5c2/0x690 [ 894.716980][T19112] iterate_dir+0x11d/0x310 [ 894.721462][T19112] __se_sys_getdents64+0x87/0x1a0 [ 894.726633][T19112] ? __pfx_filldir64+0x10/0x10 [ 894.731449][T19112] __x64_sys_getdents64+0x43/0x50 [ 894.736512][T19112] x64_sys_call+0x2d24/0x2dc0 [ 894.741303][T19112] do_syscall_64+0xc9/0x1c0 [ 894.745861][T19112] ? clear_bhb_loop+0x55/0xb0 [ 894.750570][T19112] ? clear_bhb_loop+0x55/0xb0 [ 894.755304][T19112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.761240][T19112] RIP: 0033:0x7fb2626b5d19 [ 894.765733][T19112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.785417][T19112] RSP: 002b:00007fb260d27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 894.793924][T19112] RAX: ffffffffffffffda RBX: 00007fb2628a5fa0 RCX: 00007fb2626b5d19 [ 894.801916][T19112] RDX: 000000000000002c RSI: 00000000200000c0 RDI: 0000000000000006 [ 894.809923][T19112] RBP: 00007fb260d27090 R08: 0000000000000000 R09: 0000000000000000 [ 894.817933][T19112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.825992][T19112] R13: 0000000000000000 R14: 00007fb2628a5fa0 R15: 00007ffe8dc64648 [ 894.834000][T19112] [ 894.862984][T19137] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 894.862984][T19137] program syz.4.12872 not setting count and/or reply_len properly [ 895.045024][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 895.045042][ T29] audit: type=1326 audit(2000001675.072:91651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19142 comm="syz.1.12875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 895.118354][ T29] audit: type=1326 audit(2000001675.092:91652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19142 comm="syz.1.12875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 895.142360][ T29] audit: type=1326 audit(2000001675.092:91653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19142 comm="syz.1.12875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 895.166413][ T29] audit: type=1326 audit(2000001675.092:91654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19142 comm="syz.1.12875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 895.190252][ T29] audit: type=1326 audit(2000001675.112:91655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19142 comm="syz.1.12875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 895.213998][ T29] audit: type=1326 audit(2000001675.112:91656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19142 comm="syz.1.12875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 895.237749][ T29] audit: type=1326 audit(2000001675.122:91657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19142 comm="syz.1.12875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 895.261634][ T29] audit: type=1326 audit(2000001675.122:91658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19142 comm="syz.1.12875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 895.285311][ T29] audit: type=1326 audit(2000001675.132:91659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19142 comm="syz.1.12875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 895.309864][ T29] audit: type=1326 audit(2000001675.142:91660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19142 comm="syz.1.12875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 895.411997][T19163] loop0: detected capacity change from 0 to 1024 [ 895.445560][T19163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.500925][T19169] __nla_validate_parse: 7 callbacks suppressed [ 895.500942][T19169] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12883'. [ 895.522083][T19163] netlink: 'syz.0.12881': attribute type 1 has an invalid length. [ 895.585805][ T8073] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /296/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 895.608391][ T8073] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 895.629698][ T8073] EXT4-fs warning (device loop0): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 895.641606][ T8073] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /296/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 895.684505][T19176] netlink: 'syz.1.12886': attribute type 10 has an invalid length. [ 895.692505][T19176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12886'. [ 895.732203][T19176] bridge0: port 3(ipvlan0) entered blocking state [ 895.738726][T19176] bridge0: port 3(ipvlan0) entered disabled state [ 895.749554][ T8073] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 895.767664][T19176] ipvlan0: entered allmulticast mode [ 895.772651][ T8073] EXT4-fs warning (device loop0): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 895.773940][T19176] veth0_vlan: entered allmulticast mode [ 895.788525][ T8073] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /296/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 895.813067][ T8073] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 895.843161][T19176] ipvlan0: left allmulticast mode [ 895.848209][T19176] veth0_vlan: left allmulticast mode [ 895.856941][ T8073] EXT4-fs warning (device loop0): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 895.871185][T19176] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 895.907820][ T8073] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /296/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 895.948157][ T8073] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 895.975602][ T8073] EXT4-fs warning (device loop0): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 895.989727][ T8073] EXT4-fs error (device loop0): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /296/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 896.036074][ T8073] EXT4-fs error (device loop0): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 896.113602][ T8073] EXT4-fs warning (device loop0): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 896.171018][ T8073] EXT4-fs warning (device loop0): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 896.194191][T19204] netlink: 'syz.1.12893': attribute type 10 has an invalid length. [ 896.202163][T19204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12893'. [ 896.215647][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12894'. [ 896.227751][ T8073] EXT4-fs warning (device loop0): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 896.256289][T19204] bridge0: port 3(ipvlan0) entered blocking state [ 896.262851][T19204] bridge0: port 3(ipvlan0) entered disabled state [ 896.273294][ T8073] EXT4-fs warning (device loop0): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 896.286310][T19204] ipvlan0: entered allmulticast mode [ 896.291776][T19204] veth0_vlan: entered allmulticast mode [ 896.298305][T19204] ipvlan0: left allmulticast mode [ 896.303481][T19204] veth0_vlan: left allmulticast mode [ 896.313921][ T8073] EXT4-fs warning (device loop0): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 896.325786][ T8073] EXT4-fs warning (device loop0): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 896.340742][T19204] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 896.412816][T19217] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 896.412816][T19217] program syz.5.12897 not setting count and/or reply_len properly [ 897.068765][T12669] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.130068][T19253] netlink: 'syz.1.12909': attribute type 10 has an invalid length. [ 897.138083][T19253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12909'. [ 897.150798][T19253] bridge0: port 3(ipvlan0) entered blocking state [ 897.157289][T19253] bridge0: port 3(ipvlan0) entered disabled state [ 897.167092][T19253] ipvlan0: entered allmulticast mode [ 897.172457][T19253] veth0_vlan: entered allmulticast mode [ 897.178525][T19253] ipvlan0: left allmulticast mode [ 897.183781][T19253] veth0_vlan: left allmulticast mode [ 897.189855][T19253] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 897.487270][T19258] lo speed is unknown, defaulting to 1000 [ 897.631581][T19322] netlink: 'syz.1.12923': attribute type 10 has an invalid length. [ 897.639536][T19322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12923'. [ 897.653609][T19320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12922'. [ 897.675560][T19398] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 897.675560][T19398] program syz.4.12924 not setting count and/or reply_len properly [ 897.709869][T19258] chnl_net:caif_netlink_parms(): no params data found [ 897.734422][T19322] bridge0: port 3(ipvlan0) entered blocking state [ 897.740967][T19322] bridge0: port 3(ipvlan0) entered disabled state [ 897.750207][T19322] ipvlan0: entered allmulticast mode [ 897.755652][T19322] veth0_vlan: entered allmulticast mode [ 897.764531][T19322] ipvlan0: left allmulticast mode [ 897.769598][T19322] veth0_vlan: left allmulticast mode [ 897.775797][T19322] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 897.904610][T19258] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.911879][T19258] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.945300][T19258] bridge_slave_0: entered allmulticast mode [ 897.963561][T19258] bridge_slave_0: entered promiscuous mode [ 897.974996][T19258] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.982211][T19258] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.012606][T19258] bridge_slave_1: entered allmulticast mode [ 898.020558][T19258] bridge_slave_1: entered promiscuous mode [ 898.054761][T19258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.068935][T19258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.108935][T19258] team0: Port device team_slave_0 added [ 898.120204][T19258] team0: Port device team_slave_1 added [ 898.148294][T19258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.155351][T19258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.181458][T19258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 898.238121][T19258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 898.245164][T19258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 898.271475][T19258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.347314][T19258] hsr_slave_0: entered promiscuous mode [ 898.363247][T19258] hsr_slave_1: entered promiscuous mode [ 898.393295][T19258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 898.410310][T19258] Cannot create hsr debugfs directory [ 898.431777][T19596] netlink: 'syz.1.12936': attribute type 10 has an invalid length. [ 898.439691][T19596] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12936'. [ 898.461864][T19596] bridge0: port 3(ipvlan0) entered blocking state [ 898.468423][T19596] bridge0: port 3(ipvlan0) entered disabled state [ 898.476853][T19596] ipvlan0: entered allmulticast mode [ 898.482319][T19596] veth0_vlan: entered allmulticast mode [ 898.490370][T19596] ipvlan0: left allmulticast mode [ 898.495509][T19596] veth0_vlan: left allmulticast mode [ 898.502241][T19596] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 898.645373][T19631] bond1: entered promiscuous mode [ 898.650566][T19631] bond1: entered allmulticast mode [ 898.656023][T19631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 898.666557][T19631] bond1 (unregistering): Released all slaves [ 898.722330][T19258] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 898.732407][T19258] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 898.741727][T19258] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 898.752650][T19258] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 898.927387][T19758] netlink: 'syz.4.12944': attribute type 10 has an invalid length. [ 898.935534][T19758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12944'. [ 898.959251][T19759] lo speed is unknown, defaulting to 1000 [ 898.969970][T19258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.992548][T19758] bridge0: port 3(ipvlan0) entered blocking state [ 898.999071][T19758] bridge0: port 3(ipvlan0) entered disabled state [ 899.016794][T19767] netlink: 596 bytes leftover after parsing attributes in process `syz.5.12947'. [ 899.040775][T19758] ipvlan0: entered allmulticast mode [ 899.046117][T19758] @ÿ: entered allmulticast mode [ 899.054758][T19758] ipvlan0: left allmulticast mode [ 899.059821][T19758] @ÿ: left allmulticast mode [ 899.065670][T19758] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 899.116725][T19258] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.139966][ T778] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.147101][ T778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 899.171514][T19768] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 899.185263][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.192421][ T6395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 899.352632][T19809] netlink: 'syz.2.12952': attribute type 10 has an invalid length. [ 899.367803][T19809] bridge0: port 3(ipvlan0) entered blocking state [ 899.374462][T19809] bridge0: port 3(ipvlan0) entered disabled state [ 899.381957][T19809] ipvlan0: entered allmulticast mode [ 899.387285][T19809] @ÿ: entered allmulticast mode [ 899.393105][T19809] ipvlan0: left allmulticast mode [ 899.398174][T19809] @ÿ: left allmulticast mode [ 899.408149][T19809] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 899.507640][T19258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.738223][T19258] veth0_vlan: entered promiscuous mode [ 899.763173][T19258] veth1_vlan: entered promiscuous mode [ 899.817383][T19258] veth0_macvtap: entered promiscuous mode [ 899.842119][T19258] veth1_macvtap: entered promiscuous mode [ 899.879453][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.890158][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.900048][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.910612][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.920502][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.931021][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.940981][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.951510][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.961531][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.972014][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.981899][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.992444][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.002316][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.012845][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.022720][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.033236][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.043079][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.053610][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.066051][T19258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.078097][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 900.078111][ T29] audit: type=1326 audit(2000001680.112:92010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.1.12955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faec507cce7 code=0x7ffc0000 [ 900.109919][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.120581][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.130481][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.138633][ T29] audit: type=1326 audit(2000001680.112:92011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.1.12955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faec5021f29 code=0x7ffc0000 [ 900.141121][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.164712][ T29] audit: type=1326 audit(2000001680.112:92012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.1.12955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 900.174506][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.174525][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.218561][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.229103][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.238954][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.249528][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.259439][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.269900][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.279781][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.288156][ T29] audit: type=1326 audit(2000001680.292:92013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.1.12955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faec507cce7 code=0x7ffc0000 [ 900.290214][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.290249][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.313832][ T29] audit: type=1326 audit(2000001680.292:92014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.1.12955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faec5021f29 code=0x7ffc0000 [ 900.323632][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.323653][T19258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 900.334096][ T29] audit: type=1326 audit(2000001680.292:92015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.1.12955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 900.400114][ T29] audit: type=1326 audit(2000001680.372:92016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.1.12955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faec507cce7 code=0x7ffc0000 [ 900.401671][T19258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 900.425250][ T29] audit: type=1326 audit(2000001680.372:92017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.1.12955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faec5021f29 code=0x7ffc0000 [ 900.458819][ T29] audit: type=1326 audit(2000001680.372:92018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.1.12955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 900.482641][ T29] audit: type=1326 audit(2000001680.412:92019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19830 comm="syz.1.12955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7faec507cce7 code=0x7ffc0000 [ 900.512828][T19258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.521756][T19258] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.530551][T19258] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.539257][T19258] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.548085][T19258] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.693858][T19874] bond1: entered promiscuous mode [ 900.699029][T19874] bond1: entered allmulticast mode [ 900.725331][T19874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 900.737227][T19912] FAULT_INJECTION: forcing a failure. [ 900.737227][T19912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.750401][T19912] CPU: 0 UID: 0 PID: 19912 Comm: syz.1.12965 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 900.761290][T19912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 900.771351][T19912] Call Trace: [ 900.774637][T19912] [ 900.777577][T19912] dump_stack_lvl+0xf2/0x150 [ 900.782251][T19912] dump_stack+0x15/0x1a [ 900.786512][T19912] should_fail_ex+0x223/0x230 [ 900.791248][T19912] should_fail+0xb/0x10 [ 900.795528][T19912] should_fail_usercopy+0x1a/0x20 [ 900.800641][T19912] _copy_from_user+0x1e/0xb0 [ 900.805246][T19912] copy_clone_args_from_user+0x145/0x460 [ 900.810893][T19912] ? kstrtouint_from_user+0xb0/0xe0 [ 900.816177][T19912] __se_sys_clone3+0x6e/0x200 [ 900.820872][T19912] __x64_sys_clone3+0x31/0x40 [ 900.825610][T19912] x64_sys_call+0x2d56/0x2dc0 [ 900.830361][T19912] do_syscall_64+0xc9/0x1c0 [ 900.834936][T19912] ? clear_bhb_loop+0x55/0xb0 [ 900.839705][T19912] ? clear_bhb_loop+0x55/0xb0 [ 900.844391][T19912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.850378][T19912] RIP: 0033:0x7faec5085d19 [ 900.854800][T19912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.874485][T19912] RSP: 002b:00007faec36f6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 900.882950][T19912] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007faec5085d19 [ 900.890925][T19912] RDX: 00007faec36f6f20 RSI: 0000000000000058 RDI: 00007faec36f6f20 [ 900.898949][T19912] RBP: 00007faec36f7090 R08: 0000000000000000 R09: 0000000000000058 [ 900.906925][T19912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.914904][T19912] R13: 0000000000000001 R14: 00007faec5275fa0 R15: 00007ffe5fd47cc8 [ 900.922926][T19912] [ 900.930831][T19874] bond1 (unregistering): Released all slaves [ 901.097299][T19968] __nla_validate_parse: 1 callbacks suppressed [ 901.097320][T19968] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12969'. [ 901.124094][T19958] x_tables: duplicate underflow at hook 2 [ 901.139712][T19970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12971'. [ 901.168516][T19967] lo speed is unknown, defaulting to 1000 [ 901.201646][T19972] loop1: detected capacity change from 0 to 1024 [ 901.229260][T19972] EXT4-fs: Ignoring removed orlov option [ 901.235075][T19972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 901.263604][T19988] FAULT_INJECTION: forcing a failure. [ 901.263604][T19988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.276952][T19988] CPU: 1 UID: 0 PID: 19988 Comm: syz.4.12974 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 901.287834][T19988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 901.297917][T19988] Call Trace: [ 901.301212][T19988] [ 901.304159][T19988] dump_stack_lvl+0xf2/0x150 [ 901.308783][T19988] dump_stack+0x15/0x1a [ 901.313014][T19988] should_fail_ex+0x223/0x230 [ 901.317728][T19988] should_fail+0xb/0x10 [ 901.321954][T19988] should_fail_usercopy+0x1a/0x20 [ 901.327155][T19988] _copy_from_user+0x1e/0xb0 [ 901.331860][T19988] copy_msghdr_from_user+0x54/0x2a0 [ 901.337153][T19988] ? __fget_files+0x17c/0x1c0 [ 901.341931][T19988] __sys_sendmsg+0x13e/0x230 [ 901.346551][T19988] __x64_sys_sendmsg+0x46/0x50 [ 901.351369][T19988] x64_sys_call+0x2734/0x2dc0 [ 901.356191][T19988] do_syscall_64+0xc9/0x1c0 [ 901.360765][T19988] ? clear_bhb_loop+0x55/0xb0 [ 901.365468][T19988] ? clear_bhb_loop+0x55/0xb0 [ 901.370195][T19988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.376130][T19988] RIP: 0033:0x7f9be1855d19 [ 901.380566][T19988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.400278][T19988] RSP: 002b:00007f9bdfec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.408787][T19988] RAX: ffffffffffffffda RBX: 00007f9be1a45fa0 RCX: 00007f9be1855d19 [ 901.416806][T19988] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 901.424809][T19988] RBP: 00007f9bdfec7090 R08: 0000000000000000 R09: 0000000000000000 [ 901.432822][T19988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.440809][T19988] R13: 0000000000000000 R14: 00007f9be1a45fa0 R15: 00007ffc9e4a6a68 [ 901.448905][T19988] [ 901.456437][T19972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 901.641308][T17825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.689850][T20022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.748780][T20022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.819009][T20032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.829252][T20026] lo speed is unknown, defaulting to 1000 [ 901.847100][T20032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.174832][T20066] serio: Serial port ptm0 [ 902.289138][T20072] netlink: 'syz.5.12985': attribute type 10 has an invalid length. [ 902.297265][T20072] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12985'. [ 902.332257][T20072] bridge0: port 1(ipvlan0) entered blocking state [ 902.338755][T20072] bridge0: port 1(ipvlan0) entered disabled state [ 902.368553][T20072] ipvlan0: entered allmulticast mode [ 902.374024][T20072] @ÿ: entered allmulticast mode [ 902.396369][T20072] ipvlan0: left allmulticast mode [ 902.401533][T20072] @ÿ: left allmulticast mode [ 902.415669][T20072] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 902.515988][T20075] FAULT_INJECTION: forcing a failure. [ 902.515988][T20075] name failslab, interval 1, probability 0, space 0, times 0 [ 902.528670][T20075] CPU: 1 UID: 0 PID: 20075 Comm: syz.5.12986 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 902.539632][T20075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 902.549733][T20075] Call Trace: [ 902.553025][T20075] [ 902.555968][T20075] dump_stack_lvl+0xf2/0x150 [ 902.560643][T20075] dump_stack+0x15/0x1a [ 902.564890][T20075] should_fail_ex+0x223/0x230 [ 902.569671][T20075] should_failslab+0x8f/0xb0 [ 902.574363][T20075] kmem_cache_alloc_node_noprof+0x59/0x320 [ 902.580199][T20075] ? __alloc_skb+0x10b/0x310 [ 902.584841][T20075] __alloc_skb+0x10b/0x310 [ 902.589288][T20075] netlink_alloc_large_skb+0xad/0xe0 [ 902.594672][T20075] netlink_sendmsg+0x3b4/0x6e0 [ 902.599543][T20075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.604878][T20075] __sock_sendmsg+0x140/0x180 [ 902.609583][T20075] ____sys_sendmsg+0x312/0x410 [ 902.614382][T20075] __sys_sendmsg+0x19d/0x230 [ 902.619020][T20075] __x64_sys_sendmsg+0x46/0x50 [ 902.623845][T20075] x64_sys_call+0x2734/0x2dc0 [ 902.628554][T20075] do_syscall_64+0xc9/0x1c0 [ 902.633099][T20075] ? clear_bhb_loop+0x55/0xb0 [ 902.637804][T20075] ? clear_bhb_loop+0x55/0xb0 [ 902.642531][T20075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.648467][T20075] RIP: 0033:0x7f27461c5d19 [ 902.652917][T20075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 902.672622][T20075] RSP: 002b:00007f2744831038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.681066][T20075] RAX: ffffffffffffffda RBX: 00007f27463b5fa0 RCX: 00007f27461c5d19 [ 902.689067][T20075] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 902.697065][T20075] RBP: 00007f2744831090 R08: 0000000000000000 R09: 0000000000000000 [ 902.705128][T20075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.713143][T20075] R13: 0000000000000000 R14: 00007f27463b5fa0 R15: 00007fffb5770d48 [ 902.721277][T20075] [ 903.155189][T20094] lo speed is unknown, defaulting to 1000 [ 903.283238][T20122] netlink: 'syz.5.12996': attribute type 10 has an invalid length. [ 903.291328][T20122] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12996'. [ 903.326858][T20122] bridge0: port 1(ipvlan0) entered blocking state [ 903.333379][T20122] bridge0: port 1(ipvlan0) entered disabled state [ 903.393443][T20122] ipvlan0: entered allmulticast mode [ 903.398839][T20122] @ÿ: entered allmulticast mode [ 903.442163][T20131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.454995][T20122] ipvlan0: left allmulticast mode [ 903.460054][T20122] @ÿ: left allmulticast mode [ 903.502915][T20122] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 903.535949][T20131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.682561][T20140] loop1: detected capacity change from 0 to 1024 [ 903.693326][T20140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 903.774198][T17825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.837411][T20158] netlink: 'syz.1.13002': attribute type 10 has an invalid length. [ 903.845532][T20158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13002'. [ 903.876044][T20158] bridge0: port 3(ipvlan0) entered blocking state [ 903.882687][T20158] bridge0: port 3(ipvlan0) entered disabled state [ 903.893458][T20158] ipvlan0: entered allmulticast mode [ 903.898818][T20158] veth0_vlan: entered allmulticast mode [ 903.905047][T20158] ipvlan0: left allmulticast mode [ 903.910127][T20158] veth0_vlan: left allmulticast mode [ 903.920890][T20158] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 903.999844][T20162] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13004'. [ 904.260502][T20174] loop1: detected capacity change from 0 to 256 [ 904.320913][T20174] FAT-fs (loop1): Directory bread(block 1285) failed [ 904.333125][T20174] netlink: 596 bytes leftover after parsing attributes in process `syz.1.13010'. [ 904.344554][T20174] FAT-fs (loop1): Directory bread(block 1285) failed [ 904.358449][T20174] FAT-fs (loop1): Directory bread(block 1285) failed [ 904.377083][T20174] FAT-fs (loop1): Directory bread(block 1285) failed [ 904.410272][T20174] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 904.634989][T20205] loop2: detected capacity change from 0 to 1024 [ 904.655596][T20205] EXT4-fs: Ignoring removed orlov option [ 904.661437][T20205] EXT4-fs: Ignoring removed nomblk_io_submit option [ 904.678666][T20209] serio: Serial port ptm0 [ 904.689398][T20201] loop1: detected capacity change from 0 to 8192 [ 904.702341][T20205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 904.715677][T20201] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 904.747584][T20217] loop4: detected capacity change from 0 to 512 [ 904.767876][T20217] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 904.846813][T20229] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13021'. [ 904.862959][ T1237] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.944045][T20243] netlink: 596 bytes leftover after parsing attributes in process `syz.2.13022'. [ 904.946956][T20241] serio: Serial port ptm0 [ 904.959650][T20243] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 905.043895][T20253] loop1: detected capacity change from 0 to 256 [ 905.086483][T20253] FAT-fs (loop1): Directory bread(block 1285) failed [ 905.094962][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 905.094980][ T29] audit: type=1326 audit(2000001685.132:92537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.5.13027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 905.124944][ T29] audit: type=1326 audit(2000001685.132:92538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.5.13027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 905.156377][T20253] FAT-fs (loop1): Directory bread(block 1285) failed [ 905.163373][T20253] FAT-fs (loop1): Directory bread(block 1285) failed [ 905.177750][T20253] FAT-fs (loop1): Directory bread(block 1285) failed [ 905.181557][ T29] audit: type=1326 audit(2000001685.182:92539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.5.13027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 905.208266][ T29] audit: type=1326 audit(2000001685.182:92540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.5.13027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 905.231982][ T29] audit: type=1326 audit(2000001685.182:92541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.5.13027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 905.255737][ T29] audit: type=1326 audit(2000001685.182:92542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.5.13027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 905.279369][ T29] audit: type=1326 audit(2000001685.182:92543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.5.13027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 905.285404][T20260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.303168][ T29] audit: type=1326 audit(2000001685.182:92544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.5.13027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 905.335279][ T29] audit: type=1326 audit(2000001685.182:92545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.5.13027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 905.359126][ T29] audit: type=1326 audit(2000001685.182:92546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.5.13027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 905.385710][T20260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.418993][T20259] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 905.959714][T20284] loop1: detected capacity change from 0 to 1024 [ 905.966961][T20284] EXT4-fs: Ignoring removed orlov option [ 905.972745][T20284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 906.009030][T20284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 906.075630][T17825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.147564][T20290] __nla_validate_parse: 1 callbacks suppressed [ 906.147583][T20290] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13033'. [ 906.225408][T20296] loop1: detected capacity change from 0 to 512 [ 906.255035][T20296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.271933][T20296] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 906.331642][T20296] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.13035: corrupted xattr block 33: bad e_name length [ 906.404295][T20296] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 906.449076][T20307] loop6: detected capacity change from 0 to 1024 [ 906.459528][T20296] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.13035: corrupted xattr block 33: bad e_name length [ 906.489544][T20307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.511725][T20296] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 906.532175][T20296] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.13035: corrupted xattr block 33: bad e_name length [ 906.550351][T20296] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.13035: corrupted xattr block 33: bad e_name length [ 906.565076][T19258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.574987][T20296] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 906.589479][T20316] loop2: detected capacity change from 0 to 512 [ 906.613527][T20316] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 906.636530][T20321] loop6: detected capacity change from 0 to 256 [ 906.643719][T17825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.656497][T20316] netlink: 'syz.2.13040': attribute type 10 has an invalid length. [ 906.664519][T20316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13040'. [ 906.676730][T20321] FAT-fs (loop6): Directory bread(block 1285) failed [ 906.677957][T20316] bridge0: port 3(ipvlan0) entered blocking state [ 906.690176][T20316] bridge0: port 3(ipvlan0) entered disabled state [ 906.700776][T20316] ipvlan0: entered allmulticast mode [ 906.706099][T20316] @ÿ: entered allmulticast mode [ 906.716236][T20321] netlink: 596 bytes leftover after parsing attributes in process `syz.6.13041'. [ 906.727565][T20316] ipvlan0: left allmulticast mode [ 906.732672][T20316] @ÿ: left allmulticast mode [ 906.751017][T20321] FAT-fs (loop6): Directory bread(block 1285) failed [ 906.757757][T20321] FAT-fs (loop6): Directory bread(block 1285) failed [ 906.779567][T20316] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 906.804634][T20321] FAT-fs (loop6): Directory bread(block 1285) failed [ 906.834736][T20335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.863296][T20335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.890646][T20321] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 907.075869][T20357] netlink: 'syz.2.13045': attribute type 9 has an invalid length. [ 907.083850][T20357] netlink: 56 bytes leftover after parsing attributes in process `syz.2.13045'. [ 907.122805][T20362] ALSA: seq fatal error: cannot create timer (-19) [ 907.226908][T20377] loop6: detected capacity change from 0 to 2048 [ 907.252001][T20377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 907.328970][T19258] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 907.355897][T19258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.532749][T20397] loop4: detected capacity change from 0 to 512 [ 907.540109][T20397] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 907.554891][T20397] netlink: 'syz.4.13051': attribute type 10 has an invalid length. [ 907.562893][T20397] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13051'. [ 907.575145][T20397] bridge0: port 3(ipvlan0) entered blocking state [ 907.581776][T20397] bridge0: port 3(ipvlan0) entered disabled state [ 907.588674][T20397] ipvlan0: entered allmulticast mode [ 907.594110][T20397] @ÿ: entered allmulticast mode [ 907.599756][T20397] ipvlan0: left allmulticast mode [ 907.604924][T20397] @ÿ: left allmulticast mode [ 907.611104][T20397] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 907.846887][T20404] loop4: detected capacity change from 0 to 512 [ 907.865658][T20404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.879221][T20404] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 907.906737][T20404] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.13052: corrupted xattr block 33: bad e_name length [ 907.923614][T20404] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 907.933471][T20404] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.13052: corrupted xattr block 33: bad e_name length [ 907.950321][T20404] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 907.964475][T20404] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.13052: corrupted xattr block 33: bad e_name length [ 907.986571][T20404] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.13052: corrupted xattr block 33: bad e_name length [ 908.003862][T20404] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 908.050615][T20412] serio: Serial port ptm0 [ 908.059762][T14208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.112416][T20420] serio: Serial port ptm0 [ 908.226150][T20438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13060'. [ 908.246778][T20436] loop5: detected capacity change from 0 to 1024 [ 908.274243][T20436] EXT4-fs: Ignoring removed orlov option [ 908.280020][T20436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 908.303531][T20446] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 908.303531][T20446] program syz.2.13062 not setting count and/or reply_len properly [ 908.304626][T20436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.358435][T20451] loop6: detected capacity change from 0 to 1024 [ 908.377397][T20451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.457450][T19258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.517289][ T6249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.044581][T20470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13066'. [ 909.104424][T20472] loop4: detected capacity change from 0 to 1024 [ 909.123395][T20472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.188200][T20476] loop2: detected capacity change from 0 to 512 [ 909.203906][T20476] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 909.222806][T14208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.236834][T20476] netlink: 'syz.2.13068': attribute type 10 has an invalid length. [ 909.244816][T20476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13068'. [ 909.265691][T20476] bridge0: port 3(ipvlan0) entered blocking state [ 909.272267][T20476] bridge0: port 3(ipvlan0) entered disabled state [ 909.282250][T20476] ipvlan0: entered allmulticast mode [ 909.287578][T20476] @ÿ: entered allmulticast mode [ 909.290869][T20482] serio: Serial port ptm0 [ 909.293704][T20476] ipvlan0: left allmulticast mode [ 909.302129][T20476] @ÿ: left allmulticast mode [ 909.307931][T20476] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 909.366974][T20490] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 909.366974][T20490] program syz.4.13071 not setting count and/or reply_len properly [ 909.449880][T20497] loop6: detected capacity change from 0 to 1024 [ 909.472594][T20493] loop5: detected capacity change from 0 to 1024 [ 909.498172][T20493] EXT4-fs: Ignoring removed orlov option [ 909.503985][T20493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 909.534649][T20497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.553979][T20493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 909.600653][T20497] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 909.776959][T19258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.876900][T20506] lo speed is unknown, defaulting to 1000 [ 909.976532][T20506] chnl_net:caif_netlink_parms(): no params data found [ 910.035974][T20506] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.043375][T20506] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.051116][T20506] bridge_slave_0: entered allmulticast mode [ 910.057957][T20506] bridge_slave_0: entered promiscuous mode [ 910.065419][T20506] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.072617][T20506] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.080312][T20506] bridge_slave_1: entered allmulticast mode [ 910.087331][T20506] bridge_slave_1: entered promiscuous mode [ 910.115099][T20506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.129249][T20506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.194929][T20506] team0: Port device team_slave_0 added [ 910.207622][ T6249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.208593][T20506] team0: Port device team_slave_1 added [ 910.247422][T20506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.254536][T20506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.280617][T20506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.301883][T20758] loop5: detected capacity change from 0 to 1024 [ 910.308666][T20758] EXT4-fs: Ignoring removed orlov option [ 910.314443][T20758] EXT4-fs: Ignoring removed nomblk_io_submit option [ 910.322009][T20506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 910.328979][T20506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.355122][T20506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.395537][T20758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 910.418669][T20506] hsr_slave_0: entered promiscuous mode [ 910.425624][T20506] hsr_slave_1: entered promiscuous mode [ 910.431715][T20506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 910.439547][T20506] Cannot create hsr debugfs directory [ 910.518862][ T6249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.546269][T20506] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.547570][T20851] loop4: detected capacity change from 0 to 512 [ 910.595992][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 910.596010][ T29] audit: type=1326 audit(2000001690.622:92802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 910.632381][T20851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.648659][T20851] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 910.662052][T20506] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.687850][ T29] audit: type=1326 audit(2000001690.662:92803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.5.13080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 910.736065][T20506] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.788374][T20851] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.13079: corrupted xattr block 33: bad e_name length [ 910.815445][T20873] serio: Serial port ptm0 [ 910.826095][T20851] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 910.850310][T20877] loop1: detected capacity change from 0 to 512 [ 910.857674][T20851] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.13079: corrupted xattr block 33: bad e_name length [ 910.881128][T20506] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.900256][T20877] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 910.913469][T20877] netlink: 'syz.1.13084': attribute type 10 has an invalid length. [ 910.921450][T20877] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13084'. [ 910.931309][T20877] bridge0: port 3(ipvlan0) entered blocking state [ 910.937833][T20877] bridge0: port 3(ipvlan0) entered disabled state [ 910.947306][T20851] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 910.956462][T20851] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.13079: corrupted xattr block 33: bad e_name length [ 910.970856][T20877] ipvlan0: entered allmulticast mode [ 910.976183][T20877] veth0_vlan: entered allmulticast mode [ 910.983862][ T29] audit: type=1326 audit(2000001691.022:92804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20890 comm="syz.6.13086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 911.007610][ T29] audit: type=1326 audit(2000001691.022:92805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20890 comm="syz.6.13086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 911.031468][ T29] audit: type=1326 audit(2000001691.022:92806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20890 comm="syz.6.13086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 911.055174][ T29] audit: type=1326 audit(2000001691.022:92807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20890 comm="syz.6.13086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 911.060087][T20877] ipvlan0: left allmulticast mode [ 911.078982][ T29] audit: type=1326 audit(2000001691.022:92808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20890 comm="syz.6.13086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 911.084029][T20877] veth0_vlan: left allmulticast mode [ 911.110924][ T29] audit: type=1326 audit(2000001691.142:92809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20890 comm="syz.6.13086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 911.118371][T20851] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.13079: corrupted xattr block 33: bad e_name length [ 911.136604][ T29] audit: type=1326 audit(2000001691.142:92810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20890 comm="syz.6.13086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 911.136641][ T29] audit: type=1326 audit(2000001691.142:92811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20890 comm="syz.6.13086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 911.188733][T20877] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 911.217423][T20851] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 911.253919][T20506] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 911.263462][T20506] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 911.272453][T20506] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 911.296371][T20506] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 911.331519][T14208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 911.344737][T20906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.423293][T20906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.444381][T20506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.460744][T20506] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.481433][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.488536][ T6395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.521316][T20506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 911.531804][T20506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 911.553904][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.561027][ T6395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.678112][T20506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.806836][T20506] veth0_vlan: entered promiscuous mode [ 911.820049][T20506] veth1_vlan: entered promiscuous mode [ 911.852675][T20936] loop1: detected capacity change from 0 to 512 [ 911.860800][T20506] veth0_macvtap: entered promiscuous mode [ 911.873604][T20936] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 911.887545][T20506] veth1_macvtap: entered promiscuous mode [ 911.906692][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.917313][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.927286][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.937744][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.947627][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.958087][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.967970][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.978429][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.982784][T20936] netlink: 'syz.1.13092': attribute type 10 has an invalid length. [ 911.988360][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.996191][T20936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13092'. [ 912.006671][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.006698][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.036195][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.046214][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.056753][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.066615][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.077082][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.087004][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.097524][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.107394][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 912.117906][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.129993][T20506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.138122][T20936] bridge0: port 3(ipvlan0) entered blocking state [ 912.144818][T20936] bridge0: port 3(ipvlan0) entered disabled state [ 912.159864][T20936] ipvlan0: entered allmulticast mode [ 912.165354][T20936] veth0_vlan: entered allmulticast mode [ 912.195332][T20936] ipvlan0: left allmulticast mode [ 912.200528][T20936] veth0_vlan: left allmulticast mode [ 912.211291][T20936] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 912.232769][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.243359][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.253237][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.263691][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.273611][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.284095][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.293952][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.304526][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.314421][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.324934][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.334804][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.345272][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.355194][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.365689][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.375558][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.386100][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.395969][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.406439][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.416466][T20506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.426925][T20506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.438381][T20506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.446864][T20506] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.455710][T20506] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.464461][T20506] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.473292][T20506] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.538717][T20945] loop4: detected capacity change from 0 to 512 [ 912.549444][T20945] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 912.568243][T20945] netlink: 'syz.4.13096': attribute type 10 has an invalid length. [ 912.576246][T20945] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13096'. [ 912.609998][T20945] bridge0: port 3(ipvlan0) entered blocking state [ 912.616543][T20945] bridge0: port 3(ipvlan0) entered disabled state [ 912.638624][T20952] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 912.638624][T20952] program syz.2.13074 not setting count and/or reply_len properly [ 912.640539][T20945] ipvlan0: entered allmulticast mode [ 912.661100][T20945] @ÿ: entered allmulticast mode [ 912.694799][T20945] ipvlan0: left allmulticast mode [ 912.699894][T20945] @ÿ: left allmulticast mode [ 912.708889][T20945] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 912.738813][T20954] bond1: entered promiscuous mode [ 912.743941][T20954] bond1: entered allmulticast mode [ 912.759871][T20990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13098'. [ 912.769621][T20954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 912.794482][T20954] bond1 (unregistering): Released all slaves [ 912.818747][T20991] loop2: detected capacity change from 0 to 512 [ 912.873201][T20991] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 912.893414][T20991] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 912.937359][T21025] loop4: detected capacity change from 0 to 1024 [ 912.966678][T20991] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.13097: corrupted xattr block 33: bad e_name length [ 912.992731][T21025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.001794][T21039] loop1: detected capacity change from 0 to 1024 [ 913.008853][T20991] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 913.031613][T21039] EXT4-fs: Ignoring removed orlov option [ 913.037360][T21039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 913.038538][T20991] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.13097: corrupted xattr block 33: bad e_name length [ 913.063617][T20991] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 913.076167][T20991] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.13097: corrupted xattr block 33: bad e_name length [ 913.076201][T14208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.099862][T20991] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.13097: corrupted xattr block 33: bad e_name length [ 913.126545][T21039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.139242][T20991] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 913.179113][T20506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.202047][T21053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13103'. [ 913.234195][T21057] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 913.234195][T21057] program syz.2.13104 not setting count and/or reply_len properly [ 913.276428][T17825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.438593][T21070] bond1: entered promiscuous mode [ 913.443748][T21070] bond1: entered allmulticast mode [ 913.461865][T21070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 913.469927][T21106] loop1: detected capacity change from 0 to 1024 [ 913.482433][T21106] EXT4-fs: Ignoring removed orlov option [ 913.488141][T21106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 913.505243][T21106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.521653][T21070] bond1 (unregistering): Released all slaves [ 913.610784][T17825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.694435][T21148] loop1: detected capacity change from 0 to 1024 [ 913.701449][T21148] EXT4-fs: Ignoring removed orlov option [ 913.707300][T21148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 913.750749][T21148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.798935][T17825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.851974][T21154] ALSA: seq fatal error: cannot create timer (-19) [ 913.895327][T21157] ALSA: seq fatal error: cannot create timer (-19) [ 913.932458][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13117'. [ 914.000480][T21162] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 914.000480][T21162] program syz.1.13118 not setting count and/or reply_len properly [ 914.266085][T21172] loop2: detected capacity change from 0 to 1024 [ 914.280882][T21172] EXT4-fs: Ignoring removed orlov option [ 914.286642][T21172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 914.312315][T21172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.385513][T20506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.494624][T21182] lo speed is unknown, defaulting to 1000 [ 914.648886][T21209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.659301][T21209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.026505][T21220] lo speed is unknown, defaulting to 1000 [ 915.050926][T21228] serio: Serial port ptm0 [ 915.160667][T21256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13133'. [ 915.363874][T21269] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 915.363874][T21269] program syz.6.13137 not setting count and/or reply_len properly [ 915.566393][T21276] loop1: detected capacity change from 0 to 512 [ 915.602817][T21276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 915.656970][T21276] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 915.787534][T21276] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.13138: corrupted xattr block 33: bad e_name length [ 915.818011][T21276] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 915.830844][T21276] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.13138: corrupted xattr block 33: bad e_name length [ 915.867666][T21276] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 915.896245][T21276] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.13138: corrupted xattr block 33: bad e_name length [ 915.935983][T21276] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.13138: corrupted xattr block 33: bad e_name length [ 915.960003][T21276] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 916.012940][T17825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.105007][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 916.105026][ T29] audit: type=1326 audit(2000001696.132:92907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.1.13141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 916.155733][ T29] audit: type=1326 audit(2000001696.132:92908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.1.13141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 916.179472][ T29] audit: type=1326 audit(2000001696.132:92909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21294 comm="syz.1.13141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 916.268461][T21306] loop6: detected capacity change from 0 to 1024 [ 916.290040][T21307] lo speed is unknown, defaulting to 1000 [ 916.297446][T21306] EXT4-fs: Ignoring removed orlov option [ 916.303369][T21306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 916.363426][T21306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.483389][T21339] loop4: detected capacity change from 0 to 1024 [ 916.490142][T21339] EXT4-fs: Ignoring removed orlov option [ 916.495894][T21339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 916.514216][T21339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.529009][T19258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.600172][T14208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.873625][T21365] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 916.873625][T21365] program syz.2.13154 not setting count and/or reply_len properly [ 917.009376][T21370] loop1: detected capacity change from 0 to 512 [ 917.036147][T21370] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 917.481732][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13157'. [ 917.501091][T21382] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 917.603006][T21384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13158'. [ 917.622018][T21386] loop1: detected capacity change from 0 to 1024 [ 917.640071][T21386] EXT4-fs: Ignoring removed orlov option [ 917.645834][T21386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 917.655070][T21389] loop5: detected capacity change from 0 to 256 [ 917.667416][T21389] FAT-fs (loop5): Directory bread(block 1285) failed [ 917.677735][T21389] netlink: 596 bytes leftover after parsing attributes in process `syz.5.13161'. [ 917.691025][T21389] FAT-fs (loop5): Directory bread(block 1285) failed [ 917.709135][T21389] FAT-fs (loop5): Directory bread(block 1285) failed [ 917.709566][T21386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.716959][T21389] FAT-fs (loop5): Directory bread(block 1285) failed [ 917.735560][T21392] bond1: entered promiscuous mode [ 917.740870][T21392] bond1: entered allmulticast mode [ 917.750691][T21392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.768814][T21392] bond1 (unregistering): Released all slaves [ 917.813560][T17825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.880768][T21463] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 917.995317][ T29] audit: type=1326 audit(2000001698.012:92910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.2.13166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3038af5d19 code=0x7ffc0000 [ 918.012727][T21479] lo speed is unknown, defaulting to 1000 [ 918.019155][ T29] audit: type=1326 audit(2000001698.022:92911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.2.13166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3038af5d19 code=0x7ffc0000 [ 918.048659][ T29] audit: type=1326 audit(2000001698.022:92912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21473 comm="syz.2.13166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f3038af5d19 code=0x7ffc0000 [ 918.516224][T21513] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 918.516224][T21513] program syz.4.13169 not setting count and/or reply_len properly [ 918.604851][T21518] loop5: detected capacity change from 0 to 512 [ 918.641999][T21518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.675527][T21518] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 918.748415][T21518] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.13170: corrupted xattr block 33: bad e_name length [ 918.778599][T21527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.818444][T21518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 918.832388][T21527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.856424][T21518] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.13170: corrupted xattr block 33: bad e_name length [ 918.871262][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13172'. [ 918.913750][T21518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 918.934368][T21539] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 918.934368][T21539] program syz.2.13174 not setting count and/or reply_len properly [ 918.937168][T21537] loop6: detected capacity change from 0 to 1024 [ 918.961760][T21518] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.13170: corrupted xattr block 33: bad e_name length [ 918.970127][ T29] audit: type=1326 audit(2000001698.992:92913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.1.13175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 918.999082][ T29] audit: type=1326 audit(2000001698.992:92914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.1.13175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 919.004160][T21518] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.13170: corrupted xattr block 33: bad e_name length [ 919.022770][ T29] audit: type=1326 audit(2000001698.992:92915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.1.13175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 919.022810][ T29] audit: type=1326 audit(2000001698.992:92916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21540 comm="syz.1.13175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 919.052277][T21518] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 919.142720][T21537] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 919.171668][ T6249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.184554][T21545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.207769][T21545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.233549][T19258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.358888][T21555] loop5: detected capacity change from 0 to 1024 [ 919.372366][T21555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.376063][T21557] loop6: detected capacity change from 0 to 1024 [ 919.400756][T21557] EXT4-fs: Ignoring removed orlov option [ 919.406548][T21557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 919.415006][ T6249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.560511][T21568] loop5: detected capacity change from 0 to 256 [ 919.587927][T21568] FAT-fs (loop5): Directory bread(block 1285) failed [ 919.615524][T21568] netlink: 596 bytes leftover after parsing attributes in process `syz.5.13179'. [ 919.650226][T21568] FAT-fs (loop5): Directory bread(block 1285) failed [ 919.681765][T21568] FAT-fs (loop5): Directory bread(block 1285) failed [ 919.704357][T21568] FAT-fs (loop5): Directory bread(block 1285) failed [ 919.735486][T21577] loop6: detected capacity change from 0 to 1024 [ 919.761954][T21577] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 919.810601][T21575] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 919.932330][T21594] loop2: detected capacity change from 0 to 512 [ 919.939504][T21594] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 920.475952][T21610] loop5: detected capacity change from 0 to 1024 [ 920.588729][T21618] loop5: detected capacity change from 0 to 1024 [ 920.612371][T21618] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 920.706545][T21626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13190'. [ 920.759863][T21628] loop5: detected capacity change from 0 to 1024 [ 920.780088][T21628] EXT4-fs: Ignoring removed orlov option [ 920.785848][T21628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 920.827997][T21630] lo speed is unknown, defaulting to 1000 [ 920.934756][ T6249] EXT4-fs unmount: 9 callbacks suppressed [ 920.934776][ T6249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.984938][T21660] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 920.984938][T21660] program syz.5.13193 not setting count and/or reply_len properly [ 921.557570][T21677] loop6: detected capacity change from 0 to 512 [ 921.577413][T21677] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 921.604580][T21677] netlink: 'syz.6.13199': attribute type 10 has an invalid length. [ 921.612600][T21677] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13199'. [ 921.675034][T21677] bridge0: port 3(ipvlan0) entered blocking state [ 921.681628][T21677] bridge0: port 3(ipvlan0) entered disabled state [ 921.703778][T21677] ipvlan0: entered allmulticast mode [ 921.709162][T21677] veth0_vlan: entered allmulticast mode [ 921.727521][T21677] ipvlan0: left allmulticast mode [ 921.732683][T21677] veth0_vlan: left allmulticast mode [ 921.769540][T21677] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 921.872756][T21685] bond1: entered promiscuous mode [ 921.877848][T21685] bond1: entered allmulticast mode [ 921.909781][T21685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 921.968392][T21685] bond1 (unregistering): Released all slaves [ 922.096417][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 922.096432][ T29] audit: type=1326 audit(2000001702.122:93038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.1.13203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 922.126448][ T29] audit: type=1326 audit(2000001702.122:93039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.1.13203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 922.156007][ T29] audit: type=1326 audit(2000001702.182:93040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.1.13203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 922.179890][ T29] audit: type=1326 audit(2000001702.182:93041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.1.13203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 922.203827][ T29] audit: type=1326 audit(2000001702.182:93042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.1.13203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 922.227679][ T29] audit: type=1326 audit(2000001702.182:93043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.1.13203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 922.251308][ T29] audit: type=1326 audit(2000001702.182:93044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.1.13203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 922.275077][ T29] audit: type=1326 audit(2000001702.182:93045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21759 comm="syz.5.13205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 922.298810][ T29] audit: type=1326 audit(2000001702.182:93046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21759 comm="syz.5.13205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27461c5d19 code=0x7ffc0000 [ 922.322920][ T29] audit: type=1326 audit(2000001702.362:93047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21755 comm="syz.1.13203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faec5085d19 code=0x7ffc0000 [ 922.382988][T21758] loop2: detected capacity change from 0 to 1024 [ 922.441168][T21758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.465805][T21764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.476746][T21764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.516207][T21773] ALSA: seq fatal error: cannot create timer (-19) [ 922.557867][T20506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.653651][T21780] loop6: detected capacity change from 0 to 1024 [ 922.663798][T21780] EXT4-fs: Ignoring removed orlov option [ 922.663798][T21782] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 922.663798][T21782] program syz.4.13211 not setting count and/or reply_len properly [ 922.686648][T21780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 922.702483][T21780] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.760101][T21786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 922.787800][T21786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 922.832928][T19258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.893585][T21794] loop6: detected capacity change from 0 to 512 [ 922.912303][T21794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.925193][T21794] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 922.975822][T21794] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.13212: corrupted xattr block 33: bad e_name length [ 922.990354][T21794] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 923.002777][T21794] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.13212: corrupted xattr block 33: bad e_name length [ 923.017742][T21794] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 923.030223][T21794] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.13212: corrupted xattr block 33: bad e_name length [ 923.052454][T21794] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.13212: corrupted xattr block 33: bad e_name length [ 923.070225][T21794] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 923.105011][T19258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.245182][T21809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.266358][T21809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.528905][T21813] loop4: detected capacity change from 0 to 512 [ 923.536294][T21813] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 923.550984][T21813] netlink: 'syz.4.13214': attribute type 10 has an invalid length. [ 923.559020][T21813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13214'. [ 923.571958][T21813] bridge0: port 3(ipvlan0) entered blocking state [ 923.578465][T21813] bridge0: port 3(ipvlan0) entered disabled state [ 923.587354][T21813] ipvlan0: entered allmulticast mode [ 923.592760][T21813] @ÿ: entered allmulticast mode [ 923.599887][T21813] ipvlan0: left allmulticast mode [ 923.605057][T21813] @ÿ: left allmulticast mode [ 923.614514][T21813] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 923.722325][T21824] loop4: detected capacity change from 0 to 1024 [ 923.734273][T21824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 923.750009][T21824] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 923.784409][T14208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.968789][T21835] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13219'. [ 924.717831][T21837] netlink: 'syz.4.13220': attribute type 1 has an invalid length. [ 924.735824][T21837] xt_hashlimit: max too large, truncated to 1048576 [ 925.136045][T21842] lo speed is unknown, defaulting to 1000 [ 925.239625][T21854] loop5: detected capacity change from 0 to 1024 [ 925.250794][T21854] EXT4-fs: Ignoring removed orlov option [ 925.256560][T21854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 925.298539][T21854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.482758][ T6249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.688282][T21878] loop2: detected capacity change from 0 to 256 [ 925.718518][T21880] loop4: detected capacity change from 0 to 512 [ 925.726014][T21878] FAT-fs (loop2): Directory bread(block 1285) failed [ 925.734622][T21880] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 925.754936][T21878] netlink: 596 bytes leftover after parsing attributes in process `syz.2.13225'. [ 925.766296][T21880] netlink: 'syz.4.13226': attribute type 10 has an invalid length. [ 925.774390][T21880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13226'. [ 925.793994][T21880] bridge0: port 3(ipvlan0) entered blocking state [ 925.800620][T21880] bridge0: port 3(ipvlan0) entered disabled state [ 925.807257][T21878] FAT-fs (loop2): Directory bread(block 1285) failed [ 925.817510][T21880] ipvlan0: entered allmulticast mode [ 925.822889][T21880] @ÿ: entered allmulticast mode [ 925.826467][T21878] FAT-fs (loop2): Directory bread(block 1285) failed [ 925.839474][T21880] ipvlan0: left allmulticast mode [ 925.844639][T21880] @ÿ: left allmulticast mode [ 925.858333][T21878] FAT-fs (loop2): Directory bread(block 1285) failed [ 925.865239][T21880] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 925.949618][T21878] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 926.006088][T21890] ALSA: seq fatal error: cannot create timer (-19) [ 926.089697][T21896] loop4: detected capacity change from 0 to 1024 [ 926.108231][T21896] EXT4-fs: Ignoring removed orlov option [ 926.114185][T21896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.155388][T21896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.233056][T14208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.253202][T21904] loop1: detected capacity change from 0 to 512 [ 926.297861][T21906] loop6: detected capacity change from 0 to 1024 [ 926.309123][T21904] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 773)! [ 926.315916][T21906] EXT4-fs: Ignoring removed orlov option [ 926.319467][T21904] EXT4-fs (loop1): group descriptors corrupted! [ 926.325173][T21906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.347661][T21913] loop4: detected capacity change from 0 to 1024 [ 926.357028][T21913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 926.383247][T21906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.461608][T21918] loop5: detected capacity change from 0 to 1024 [ 926.472920][T21918] EXT4-fs: Ignoring removed orlov option [ 926.478716][T21918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.499028][T14208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.563520][T21918] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.620025][T21939] loop4: detected capacity change from 0 to 1024 [ 926.669933][T21939] EXT4-fs: Ignoring removed orlov option [ 926.675821][T21939] EXT4-fs: Ignoring removed nomblk_io_submit option [ 926.705040][T21943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13237'. [ 926.724762][T19258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.761310][T21943] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 926.776113][ T6249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.793873][T21939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.794763][T21947] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13240'. [ 926.879835][T21956] loop5: detected capacity change from 0 to 512 [ 926.920572][T21956] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 926.954606][T14208] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.992775][T21959] lo speed is unknown, defaulting to 1000 [ 927.113325][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 927.113417][ T29] audit: type=1326 audit(2000001707.142:93276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 927.235987][T21997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 927.250194][ T29] audit: type=1326 audit(2000001707.182:93277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 927.273651][ T29] audit: type=1326 audit(2000001707.182:93278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 927.296799][ T29] audit: type=1326 audit(2000001707.182:93279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 927.320037][ T29] audit: type=1326 audit(2000001707.182:93280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 927.343249][ T29] audit: type=1326 audit(2000001707.182:93281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 927.366393][ T29] audit: type=1326 audit(2000001707.182:93282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 927.388022][T22003] loop5: detected capacity change from 0 to 1024 [ 927.389530][ T29] audit: type=1326 audit(2000001707.182:93283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 927.399471][T21997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 927.418964][ T29] audit: type=1326 audit(2000001707.182:93284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 927.449850][ T29] audit: type=1326 audit(2000001707.182:93285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21954 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe411e75d19 code=0x7ffc0000 [ 927.551317][T22003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.553212][T22010] loop2: detected capacity change from 0 to 512 [ 927.606519][T22010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.619209][T22010] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 927.702837][T22023] loop6: detected capacity change from 0 to 512 [ 927.704471][T22010] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.13244: corrupted xattr block 33: bad e_name length [ 927.721459][T22023] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 927.734352][ T6249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.765609][T22023] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 927.766221][T22010] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 927.793237][T22023] EXT4-fs (loop6): 1 truncate cleaned up [ 927.806147][T22023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.853276][T22032] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13249'. [ 927.863043][T22010] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.13244: corrupted xattr block 33: bad e_name length [ 927.916701][T22010] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 927.947422][T22010] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.13244: corrupted xattr block 33: bad e_name length [ 927.978690][T22010] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.13244: corrupted xattr block 33: bad e_name length [ 928.002664][T22010] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 928.027608][T20506] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.076686][T22039] loop5: detected capacity change from 0 to 1024 [ 928.115776][T22039] EXT4-fs: Ignoring removed orlov option [ 928.121613][T22039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 928.174247][T22039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 928.320533][ T6249] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.456178][T22054] bond1: entered promiscuous mode [ 928.461366][T22054] bond1: entered allmulticast mode [ 928.473654][T22054] 8021q: adding VLAN 0 to HW filter on device bond1 [ 928.534856][T22054] bond1 (unregistering): Released all slaves [ 928.859216][T22125] lo speed is unknown, defaulting to 1000 [ 928.859951][T22050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13252'. [ 928.894068][T19258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.949478][T22143] loop6: detected capacity change from 0 to 512 [ 929.001623][T22143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 929.020710][T22143] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 929.069779][T22161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13258'. [ 929.079166][T22161] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 929.164072][T22143] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.13256: corrupted xattr block 33: bad e_name length [ 929.180110][T22143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 929.189348][T22143] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.13256: corrupted xattr block 33: bad e_name length [ 929.205856][T22143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 929.215378][T22143] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.13256: corrupted xattr block 33: bad e_name length [ 929.239281][T22143] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.13256: corrupted xattr block 33: bad e_name length [ 929.266463][T22049] ================================================================== [ 929.274601][T22049] BUG: KCSAN: data-race in inode_update_timestamps / inode_update_timestamps [ 929.283386][T22049] [ 929.285729][T22049] write to 0xffff888152b642dc of 4 bytes by task 22088 on cpu 0: [ 929.293461][T22049] inode_update_timestamps+0x139/0x250 [ 929.298983][T22049] file_update_time+0x219/0x2b0 [ 929.303864][T22049] pipe_write+0xa7b/0xd20 [ 929.308228][T22049] vfs_write+0x77f/0x920 [ 929.312495][T22049] ksys_write+0xe8/0x1b0 [ 929.316766][T22049] __x64_sys_write+0x42/0x50 [ 929.321473][T22049] x64_sys_call+0x287e/0x2dc0 [ 929.326184][T22049] do_syscall_64+0xc9/0x1c0 [ 929.330710][T22049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.336649][T22049] [ 929.338985][T22049] read to 0xffff888152b642dc of 4 bytes by task 22049 on cpu 1: [ 929.346633][T22049] inode_update_timestamps+0x79/0x250 [ 929.352206][T22049] file_update_time+0x219/0x2b0 [ 929.357079][T22049] pipe_write+0xa7b/0xd20 [ 929.361452][T22049] vfs_write+0x77f/0x920 [ 929.365738][T22049] ksys_write+0xe8/0x1b0 [ 929.370022][T22049] __x64_sys_write+0x42/0x50 [ 929.374683][T22049] x64_sys_call+0x287e/0x2dc0 [ 929.379387][T22049] do_syscall_64+0xc9/0x1c0 [ 929.383926][T22049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.389863][T22049] [ 929.392206][T22049] value changed: 0x0e7ba854 -> 0x117699f3 [ 929.397935][T22049] [ 929.400274][T22049] Reported by Kernel Concurrency Sanitizer on: [ 929.406442][T22049] CPU: 1 UID: 0 PID: 22049 Comm: syz.1.13252 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 929.417308][T22049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 929.427386][T22049] ================================================================== [ 929.473205][T22143] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 929.665680][T19258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.687158][T22166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13260'.