last executing test programs: 5m33.270574823s ago: executing program 32 (id=1134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) 4m29.441869327s ago: executing program 33 (id=2138): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 4m17.980871381s ago: executing program 34 (id=2312): r0 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r0, &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x4}, [], {0x4, 0x4}, [], {0x10, 0x7}}, 0xff7c, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x48}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0x3}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r1, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r1, r1, r1, r1, 0xffffffffffffffff, r1], 0x0, 0x10, 0xfffffffe}, 0xc3) 2m57.849722308s ago: executing program 35 (id=3637): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mount_setattr(0xffffffffffffffff, 0x0, 0x800000, &(0x7f0000000540)={0x10, 0x70, 0x100000}, 0x20) 1m59.441833345s ago: executing program 36 (id=5037): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x6, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r0 = syz_open_pts(0xffffffffffffffff, 0x101) ioctl$TIOCCONS(r0, 0x541d) dup3(r0, 0xffffffffffffffff, 0x0) 1m57.207925735s ago: executing program 37 (id=5080): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="97eb01001a000000000000bbd837ce"], &(0x7f0000001f80)=""/212, 0x1a, 0xd4, 0xd}, 0x28) 1m55.046375549s ago: executing program 38 (id=5120): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/207, 0xcf) 1m51.735043566s ago: executing program 39 (id=5181): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) ftruncate(r0, 0xd831) 1m50.420090042s ago: executing program 40 (id=5202): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x4787e, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$tcp_congestion(r1, &(0x7f00000001c0)='westwood\x00', 0x9) write$tcp_congestion(r0, &(0x7f0000000040)='vegas\x00', 0x6) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001140)={[{@errors_continue}, {@data_err_abort}, {@init_itable}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f00000004c0)="$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") 1m48.183899192s ago: executing program 41 (id=5227): capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x6, 0x87, 0xffffffff, 0x40}) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pivot_root(0xffffffffffffffff, 0x0) 1m37.703386207s ago: executing program 42 (id=5326): r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0xf0b, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xffe3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x34, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x4}}, @TCA_RED_EARLY_DROP_BLOCK={0xf, 0x5, 0x436a72eb}, @TCA_RED_EARLY_DROP_BLOCK={0x0, 0x5, 0x5}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x3}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1m36.654753221s ago: executing program 43 (id=5337): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1, 0xfffffffd}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000002c0)={r4, 0x88, "0200000000000000703fcc09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d52248dc51b23de50b4c05268ed973a4485fa5f43833004f58041310b18d364b87808f6edfb597fae6ac116b5bc6c564674a8daa53764b3e1cf98676e592103c268225b716a78c48c8c8f8ec21e15e"}, &(0x7f0000000500)=0x90) 1m33.282912182s ago: executing program 44 (id=5375): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x1ff) close(r1) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x10000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m5.89713013s ago: executing program 45 (id=5849): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) 1m4.831319525s ago: executing program 46 (id=5862): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f00002727f3f0"], 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 54.891567517s ago: executing program 47 (id=5966): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000180), &(0x7f00000002c0)=r1}, 0x20) fcntl$getown(0xffffffffffffffff, 0x9) 53.039774006s ago: executing program 48 (id=5984): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, 0x0, 0xc851) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2002, 0x0, 0x24d, 0x4000008, 0x2, 0xffffffff, 0x3, 0x80000001}}], 0x30}, 0x10) 48.170483108s ago: executing program 49 (id=6024): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xc0, 0x99, 0x15, 0x5, 0xfc, 0x5, 0xfb, 0xe2, 0x5d, 0x1, 0x81, 0x84, 0x8, 0x5}, 0xe) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) 42.919633951s ago: executing program 2 (id=6100): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x25dfdbfb, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1, 0x3ff, 0xffffffe5}}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r5, 0x0) r6 = socket(0x10, 0x2, 0x0) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 42.003808885s ago: executing program 2 (id=6116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffff000000000000000000f30000000000000000"], 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='afs_cb_break\x00', r2, 0x0, 0x100000000000000}, 0x18) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="0400"]) splice(r3, 0x0, r5, 0x0, 0x1fffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000180)=""/80, 0x1000000, 0x1000, 0x10, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf250b00000060000180140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f310000000008400300030000000800030003706a7966f0f7ec9425748c305f746f5f626f6e6400000008000300020000002800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000980)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@i_version}, {@auto_da_alloc}, {@nobarrier}, {@noblock_validity}]}, 0xfe, 0x4bb, &(0x7f0000000b00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r10}, 0x9) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000400), &(0x7f0000000500)=r8}, 0x20) 41.553190902s ago: executing program 2 (id=6125): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x7, 0x8, 0x0, 0x0, 0x100000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fbe, 0x4, @perf_config_ext={0x2, 0x800}, 0x10, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_delete(0x0) 41.436284241s ago: executing program 50 (id=6127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x103100) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 41.432539981s ago: executing program 2 (id=6129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5405, 0x0, 0x0) 40.769500945s ago: executing program 2 (id=6132): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 40.537127063s ago: executing program 2 (id=6134): socket$igmp(0x2, 0x3, 0x2) io_setup(0x7, &(0x7f0000000100)=0x0) eventfd2(0x80007, 0x80800) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) poll(&(0x7f00000002c0)=[{r2, 0x2}], 0x1, 0xfa) r3 = dup2(r1, r2) write$binfmt_register(r3, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000004500)=[0x0]) 40.4580741s ago: executing program 51 (id=6134): socket$igmp(0x2, 0x3, 0x2) io_setup(0x7, &(0x7f0000000100)=0x0) eventfd2(0x80007, 0x80800) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) poll(&(0x7f00000002c0)=[{r2, 0x2}], 0x1, 0xfa) r3 = dup2(r1, r2) write$binfmt_register(r3, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000004500)=[0x0]) 39.697245191s ago: executing program 4 (id=6142): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x25dfdbfb, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1, 0x3ff, 0xffffffe5}}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 38.792853964s ago: executing program 4 (id=6151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 37.890148527s ago: executing program 4 (id=6154): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 37.774073696s ago: executing program 4 (id=6156): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000940)=""/130, &(0x7f0000000a00)=0x82) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x40000) io_submit(r2, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000005c0)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) unshare(0x2c060000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x71063d525e2993f2, 0x1c, &(0x7f0000000440)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3ff}, @jmp={0x5, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffe8, 0x1d}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x95}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], &(0x7f0000000380)='GPL\x00', 0xff, 0xa2, &(0x7f00000007c0)=""/162, 0x41100, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x4, &(0x7f0000000540)=[r3], &(0x7f0000000580)=[{0x3, 0x2, 0xe, 0x5}, {0x5, 0x5}, {0x1, 0x1, 0x8, 0xa}, {0x1, 0x3, 0x9, 0x8}], 0x10, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r5, 0x0, 0x40000000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000061b00020000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@private, @in6=@private1}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xffffffffffffff99) 37.441369233s ago: executing program 4 (id=6160): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f00000009c0)={[{@nogrpid}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@lazytime}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 36.826686812s ago: executing program 4 (id=6162): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffffb, 0x4012011, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r1}, 0xc) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) write(r3, &(0x7f0000000740)="cc", 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)='/,O#,)\x02\x00', 0xfffffffffffffffd) sendfile(r3, r2, 0x0, 0x3ffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) 36.826451712s ago: executing program 52 (id=6162): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffffb, 0x4012011, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r4}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000500)={r1}, 0xc) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) write(r3, &(0x7f0000000740)="cc", 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)='/,O#,)\x02\x00', 0xfffffffffffffffd) sendfile(r3, r2, 0x0, 0x3ffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, 0x0, &(0x7f00000001c0)) 29.646508451s ago: executing program 5 (id=6232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xa, "09df168a00000000"}]}}}}}}}, 0x0) 29.646003011s ago: executing program 5 (id=6233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)=ANY=[], 0x10b0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="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", 0x5dd}], 0x1}}], 0x6, 0x20004095) 29.54262542s ago: executing program 5 (id=6235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00'}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000006c0)={0x15, 0x110, 0xfa00, {r2, 0x7, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0000000000000000001393000000dd00"}, 0x0, 0x0, 0x7fff}}}, 0x118) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) 29.442525548s ago: executing program 5 (id=6237): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000940)=""/130, &(0x7f0000000a00)=0x82) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x40000) io_submit(r2, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000005c0)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) unshare(0x2c060000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x71063d525e2993f2, 0x1c, &(0x7f0000000440)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3ff}, @jmp={0x5, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffe8, 0x1d}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x95}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], &(0x7f0000000380)='GPL\x00', 0xff, 0xa2, &(0x7f00000007c0)=""/162, 0x41100, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x4, &(0x7f0000000540)=[r3], &(0x7f0000000580)=[{0x3, 0x2, 0xe, 0x5}, {0x5, 0x5}, {0x1, 0x1, 0x8, 0xa}, {0x1, 0x3, 0x9, 0x8}], 0x10, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r5, 0x0, 0x40000000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000061b00020000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@private, @in6=@private1}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xffffffffffffff99) getuid() 29.182916219s ago: executing program 5 (id=6240): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xa, "09df168a00000000"}]}}}}}}}, 0x0) 28.904750801s ago: executing program 5 (id=6248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x10000001}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]}) 28.854590205s ago: executing program 53 (id=6248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000240)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@oldalloc}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x10000001}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000e00)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]}) 14.857772973s ago: executing program 3 (id=6595): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c000000100008002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001880180001040000000006"], 0x3c}}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f00000008c0)=""/35, 0x23}, {&(0x7f0000000500)=""/227, 0xe3}, {&(0x7f0000000600)=""/1, 0x1}], 0x9}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27, 0x1b}], 0x1, &(0x7f0000000780)=""/112, 0x70}}], 0x3, 0x40002002, 0x0) 14.758276551s ago: executing program 3 (id=6596): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0xffff}, 0x90) 14.614670602s ago: executing program 3 (id=6598): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000300), 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000003780)=[{&(0x7f0000000bc0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0xc044) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000) 14.581511085s ago: executing program 3 (id=6600): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000940)=""/130, &(0x7f0000000a00)=0x82) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x40000) io_submit(r2, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000005c0)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) unshare(0x2c060000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x71063d525e2993f2, 0x1c, &(0x7f0000000440)=@raw=[@call={0x85, 0x0, 0x0, 0x6c}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3ff}, @jmp={0x5, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffe8, 0x1d}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x95}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], &(0x7f0000000380)='GPL\x00', 0xff, 0xa2, &(0x7f00000007c0)=""/162, 0x41100, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0x4, &(0x7f0000000540)=[r3], &(0x7f0000000580)=[{0x3, 0x2, 0xe, 0x5}, {0x5, 0x5}, {0x1, 0x1, 0x8, 0xa}, {0x1, 0x3, 0x9, 0x8}], 0x10, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r5, 0x0, 0x40000000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000061b00020000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r7], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@private, @in6=@private1}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xffffffffffffff99) getuid() 14.180816297s ago: executing program 3 (id=6608): close(0x3) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0xffff}, 0x90) 13.941690556s ago: executing program 3 (id=6612): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000001f80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="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"/296, @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiefWzDVzX/eMMhdjSSMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTrNarVlqe93NLTOZ0wz8zgnL060t6nbauD2mqy+O9CtZ8T+Vy7qUzrr0neHid+JfN3UlfXRF5XhS1v7/vfP/D75dLOTrn5DQ61AkzbDNUpakMc9f7j95OBjsPJtzIl8BKswQtO52vdD3Ova6a7zQN421terdjVZoWl5J4XbYdzvGCdxC3w/MinPb1BqNVeNWtv3N7nrTbrv5zPvfr1era+b9pWzP3n2/EjobXrvtddeTmHhxHHPffPrzNMS1O8bsPh7srE5LMg6qzRJUnxZUr9brtVq9Xlu717h3v1otjsyoHqORiLk/afE1M7+TN/CGCnH9/7sltVVWV5vakhn746ipQL46E5Zn8vr/7l33xH4P1/+8yl8aLr6spP5fSx9dm1T/J+RiZJIVxi2xJsx/vZ/neql9PdFDDTTQjp7NZ7vX55fh2/1Zl4qSp1C+PHVka12uTDbHqKE1ramqD7ShlkIZteSpLVehthWqL1ed5JgEcmUnrdiKHN2WUU0NNbQqI1cVbcvXprpaV1O2/h1F0a4eJ/t99YQclQfVZgmqnxA0qf7/4pM066n13xL1/xstP3/NEgOcuyi7/j+l628nGwAAAAAA8DZYyV/freS1+6uSIrW8tls977QAAAAAAMAcJa/8X4kni3HrqqwJ1//R2ecGAAAAAADmw0o+Y2dJWk7e1G8NPwk1y5sAFs4gRQAAAAAA8IaS1/+vlaQouffadVmnuv4HAAAAAABfA78/dI/9Yn6P3Sh/Wb8gKewtWX/555KCRetVb+u71p4dL7H3spiRdwD0W5eti9mNepNJSVLyyHGvWFfToOwmmFa++pe70+71bwXHEigt5H++mJbAWjF7pE91I425UU6nj/YLSpakvSy3vLZbcfz2g5ps+2Kh7271f/308W+k4GCcu48HO5UPPx48SnJ5Fc96tRfn8cmRdArTcnmhbF9cHTviC2rlXf6h21m2kn6r+fgXZO8VDnc02/h/q5tpzM3ldLq8r2xPJOMvx+OvVZJDNhx9PKrP/jQcfe34yMcdiAlZlJMsbqUxt1ZupZM8vyyL7y1I9crxY1CKn4LDfVE/nMX0fWH9a2RfTMki3hercRZ/jTc0fCYcyWL1dFmMHBEAOC+7wyqU3MR89B77x+vu65zlplf3Hx3t5cVnUfqBwwWpmL02cWIvZcVn9JVk2yopObEWLx+cZfdu5Gf0alZXyppwRq++QXWL+/rz8DuQsrRH6sp/oih6UEv6/eNBv2lV/Txe4fOJ/Ybt+kI8wrsv9n6Z3AA/9tHORztP6/XVtep71eq9uhaTYWQTag8AYIzp37EzNcJ67+Cq+tE/3k1bRyretw7eUlDRh/pYAz3SnfwrBK6P3+ryobch3Bm9ao1jL0jHY2u6M/GqLqmlaezPtks/TIOS34vKVzlaqYfbXX2rxwAAgLN2s5E1JtThWer/neS6W9LK5UPX3QfX7Mdq+fFvCJ5Uc2tntg8AAPhf4wZfWsv931lB4PU+qDUaNbu/4ZrAd35iAq+57hqv23cDZ8PurrumF/h93/HbphdoyWu6oQk3ez0/6JuWH5ieH3pbpuW1XZN99Xvoduxu33PCXtu1Q9c4frdvO33T9ELH9DZ/3PbCDTdIVg57ruO1PMfue37XhP5m4LgVY0LXPRToNd1u32t5cbNreoHXsYNt81O/vdlxTdMNncDr9f10g3lfXrflB51ksxVFp/6iQwAAvomev9x/8nAw2Hk2qZFc0U+JGTZK4zaY98UrzgAAfDWMVumJymeSEAAAAAAAAAAAAAAAAAAAAAAAGDH9I32nbCyO+7CgdDDnVxdn2o6leSd2mkbh9Vf/2wkxFw7m5Lv/cMyrcxip0kZx/lu+cJqPjc6h8YPddI9OjIkXjl20dHAsivP/7xA3nn4xYVEURdHJqy8d3YelkwZ4tFGU9Kz0BofgfM5HAM7OfwMAAP//3JZAiA==") getxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 13.891255951s ago: executing program 54 (id=6612): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10003, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000001f80)=ANY=[@ANYBLOB='map=acorn,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000b18eb07a9dbec07d91edf772ce16e8f4545927e1e38533740c5b1da10b839e7f00a468d364205a63adda5262cda8e690d1049c884d79e243210c733da8adfb6db6f3b3464a433ae5d7129bf0e9b1ca805a08f3cacf9bce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519bccdcfda872f50365616970a8fac5ebb07daee8094ad02936ccc35cf6c0f3b43e9263745fc3a07da88b7b0ef9147959831d88ee5592644e7dbf33978d8a822a8323a4039433f66a85be5c2b522cc3af91efef9a6acc76a07f96e988e08e291cac80c01763347ff2447e72872ff1c044651eb34e189378b907d28bba81b06bc579537f9ffc9ac25f988893c3fbb7ec569231d1bc0ae098804f7d08c8edfa2c39d79605ab59a374b4d1f62700"/296, @ANYRES16, @ANYBLOB="48aa122ce7bad1d4005fd66df97f8ec44bbc8f22ca2298ce346671617bb371da3c639abd9ee548b49a9c10009f28579f82efb3cf18d7e4f7d0cda9f6feec4c5df95db277defa1414ccf2075e6fd144cdc78c1f843f1574502ce415c27f3cec8893fe5950104e7d7b43440fd107294cf00fe8000000000000", @ANYRESOCT], 0x1, 0x65b, &(0x7f00000007c0)="$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") getxattr(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 7.006446155s ago: executing program 8 (id=6756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x7f) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000838}, 0x4044057) 7.006001436s ago: executing program 8 (id=6757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 6.934622701s ago: executing program 8 (id=6758): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, 0x0, 0x1) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0xffff}, 0x90) 6.934064211s ago: executing program 8 (id=6759): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000940)=""/130, &(0x7f0000000a00)=0x82) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x40000) io_submit(r2, 0x1, &(0x7f0000000bc0)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000005c0)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) unshare(0x2c060000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r5, 0x0, 0x40000000, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000061b00020000000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:cgroup_t:s0\x00', 0x1e) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@private, @in6=@private1}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xffffffffffffff99) getuid() 6.666938063s ago: executing program 8 (id=6766): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000838}, 0x4044057) 6.385791376s ago: executing program 8 (id=6772): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) write(r0, &(0x7f0000000180)="a1", 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) 6.383772656s ago: executing program 55 (id=6772): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) write(r0, &(0x7f0000000180)="a1", 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x0, 0x1, 'M'}, 0x9) 1.404032597s ago: executing program 0 (id=6875): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x20000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 1.340408443s ago: executing program 7 (id=6877): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x4800) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="0400"]) splice(r3, 0x0, r5, 0x0, 0x1fffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000180)=""/80, 0x1000000, 0x1000, 0x10, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') sendmsg$ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf250b00000060000180140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f310000000008400300030000000800030003706a7966f0f7ec9425748c305f746f5f626f6e6400000008000300020000002800018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000980)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@i_version}, {@auto_da_alloc}, {@nobarrier}, {@noblock_validity}]}, 0xfe, 0x4bb, &(0x7f0000000b00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r8}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r9}, 0x9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000400), &(0x7f0000000500)=r7}, 0x20) syz_emit_ethernet(0xfffffd2e, 0x0, 0x0) 910.958217ms ago: executing program 6 (id=6889): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 910.246667ms ago: executing program 9 (id=6890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)=ANY=[], 0x10b0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="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", 0x5dd}], 0x1}}], 0x6, 0x20004095) 909.947407ms ago: executing program 1 (id=6891): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000040000000000000f0200000007000000000000120400000002000000000000100800000005"], 0x0, 0x51, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 836.023153ms ago: executing program 1 (id=6892): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc6, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu~\t\t') 821.172964ms ago: executing program 6 (id=6893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r1, 0x0, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) r2 = getpgrp(0x0) fcntl$setown(r0, 0x8, r2) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000838}, 0x4044057) 807.691015ms ago: executing program 9 (id=6894): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000838}, 0x4044057) 789.322507ms ago: executing program 9 (id=6895): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0xffff}, 0x90) 761.297419ms ago: executing program 7 (id=6896): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = dup3(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x1, 0x9, 0xf2, 0x9, 0x10, 0x81, 0xfa, 0x4, 0x2, 0xd0, 0x7, 0x9, 0x6, 0xfe}, 0xe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r5, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xc9a}], 0x2, 0x0, 0x0) 741.219361ms ago: executing program 1 (id=6897): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 740.285071ms ago: executing program 6 (id=6898): unshare(0x62040200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000005c4c1afa0a9583367c9b8f4175997e46f344aaa90d724c111ffd425b960a", @ANYRES16=r2, @ANYBLOB="030327bd7000fcdbdf250700000018000180140002006970766c616e30000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40008081}, 0x0) r3 = dup(r0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000040)) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f00000000c0), 0x4) setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0xc8, 0xfffffffc, 0x3, 0x0, 0x0, 0x91e}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x100000, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6, 0x0, 0xfffffffffffffffd}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e1e, 0x200, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r7, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000005000000000000ffffffff0058120008", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kmem_cache_free\x00', r9}, 0x18) io_uring_setup(0xc73, &(0x7f0000000580)={0x0, 0x4ba3, 0x20, 0x3, 0x19e}) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 670.430866ms ago: executing program 9 (id=6899): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$kcm(0xa, 0x3, 0x87) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0d00000004000000040000000000010000000000", @ANYRES32, @ANYBLOB="0000000f7fa69f00ecffffffffffff03010000001a89c461f2652694df3ac13aa0bb0f315cf6da5631878214cff8d1a177b9ab07f5fe05c53c3ec3d074b110a86a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x7ffff088) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000600000000b7080000000002007b8af8ff0030937194d26775a800000007020000f8ff000000850000000100000095", @ANYBLOB="cd1c9621812b05b34c6b952f66a867026ec9a703e1bd821fe4079d8b"], 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r6}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000000200)) getdents(r9, &(0x7f0000001ec0)=""/4101, 0xc54) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000600000018010000786c6c2500000400002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002d8d0000850000000600000095000000000000e6"], &(0x7f0000000380)='syzkaller\x00', 0x6439b768, 0xf9, &(0x7f00000004c0)=""/249, 0x41000, 0x61, '\x00', 0x0, @xdp=0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0x9, 0x400, 0x5}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f0000000440)=[r3, 0xffffffffffffffff, r3], 0x0, 0x10, 0x13d86d9f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x67, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 639.964339ms ago: executing program 1 (id=6900): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000003780)=[{&(0x7f0000000bc0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0xc044) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000) 561.767055ms ago: executing program 7 (id=6901): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000300), 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0xc044) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000) 511.948669ms ago: executing program 1 (id=6902): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x4) syz_open_dev$sg(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x8c}}, 0x0) 511.098259ms ago: executing program 0 (id=6903): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = getpgrp(0x0) fcntl$setown(r0, 0x8, r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x7f) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000500)={0x0, 0xe, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000838}, 0x4044057) 434.445415ms ago: executing program 7 (id=6904): syz_io_uring_setup(0x6b43, &(0x7f0000000240)={0x0, 0x0, 0x20, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket(0x28, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x25, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9f1a4af560b0f19942fcfdeb010018000000000000000000000000000000020000000000"], 0x0, 0x1a}, 0x28) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0xfefd, 0x2, 0x1fff, 0xffff, 0xc, "a8dff370f0fff7f5"}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x16) socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00dbdf2500"/20, @ANYRES32=0x0, @ANYBLOB="14d80400000000001c00128009000100626f6e64000000000c0002800500100007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, &(0x7f0000000100)) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc7, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a7916d12178651b69f849bfe114ae79e72f93c4829173295bf31f43bd1d62288c403eee7db47d164886c1fbb599665397adefcfe53401743b08ba4a79a7e140e09096a2c2354f66e94015f44215aa79ea38c482f4ec92b3552e7b6232db6f8736300d5845dc948128f60e4c1fdb3"}], 0x1}, 0x4) socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x8801}, 0x20000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x7d, 0x0, &(0x7f00000000c0)) 372.23167ms ago: executing program 7 (id=6905): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x25dfdbfb, {}, [@IFA_CACHEINFO={0x14, 0x6, {0x8, 0x1, 0x3ff, 0xffffffe5}}]}, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 239.338491ms ago: executing program 0 (id=6906): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5d1a0}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x101002, 0x0, 0x400, 0x0, 0x2, 0x1, 0x20, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 190.348955ms ago: executing program 6 (id=6907): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40004) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xb6f8000) getxattr(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="e64a7bf5bf"], 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0, 0xf}, 0x8) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)={0xc8, 0x453, 0x300, 0x70bd27, 0x25dfdbfd, "cf7874e2b26bbd57ee89c3887844a4bc82da98fd419f099913f071232faa22dfbf08804626904020966c3d691ec9375818e92f277d64f452de3eeba47726f137486b4e7d51d44a6404ee302472845e9908545b4290799a46f714da109a77916e2025eb840aac8919875940282640a9116ade62b7c6de18ba76db6a68dc9a2cc39839dff27c9a441693b44af76cb1c365c0f07cddc4f8b2cba86f497f137133f092b02e02c4d2c854fc411be1748e461248190df97d85cfcb", ["", "", "", "", "", "", ""]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000055}, 0x40) 96.434393ms ago: executing program 6 (id=6908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00"], 0xa8}}, 0x0) 31.502908ms ago: executing program 0 (id=6909): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x40000) sendmmsg(r0, 0x0, 0x0, 0xfc) 18.505829ms ago: executing program 9 (id=6910): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) sendmmsg$inet(r0, &(0x7f0000000b80), 0x0, 0x0) 0s ago: executing program 6 (id=6911): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r0, &(0x7f0000000180)='1\x00', 0x2) kernel console output (not intermixed with test programs): 6081 - 0 [ 388.701480][T23924] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.726182][T11786] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.765117][T11784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.783308][T23939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5985'. [ 388.805035][T11784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.851276][T11784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.884685][T11786] bridge_slave_1: left allmulticast mode [ 388.890594][T11786] bridge_slave_1: left promiscuous mode [ 388.896467][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.916517][T11786] bridge_slave_0: left allmulticast mode [ 388.922504][T11786] bridge_slave_0: left promiscuous mode [ 388.928417][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.061878][T11786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.072916][T11786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.083090][T11786] bond0 (unregistering): (slave team0): Releasing backup interface [ 389.091790][T11786] bond0 (unregistering): Released all slaves [ 389.158237][T23963] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 389.173967][T11786] hsr_slave_0: left promiscuous mode [ 389.181219][T11786] hsr_slave_1: left promiscuous mode [ 389.187169][T11786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.194688][T11786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.204836][T11786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.212585][T11786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.226912][T11786] veth1_macvtap: left promiscuous mode [ 389.242183][T11786] veth0_macvtap: left promiscuous mode [ 389.262997][T11786] veth1_vlan: left promiscuous mode [ 389.274068][T11786] veth0_vlan: left promiscuous mode [ 389.421043][T23557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.431129][T11786] team0 (unregistering): Port device team_slave_1 removed [ 389.443667][T11786] team0 (unregistering): Port device team_slave_0 removed [ 389.506792][T23990] loop6: detected capacity change from 0 to 164 [ 389.544059][T23995] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6036'. [ 389.578921][T23990] rock: directory entry would overflow storage [ 389.585210][T23990] rock: sig=0x66, size=4, remaining=3 [ 389.664682][T24000] netlink: 'syz.6.6038': attribute type 10 has an invalid length. [ 389.740256][T24004] siw: device registration error -23 [ 389.746383][T24000] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.777350][T24000] bond0: (slave team0): Enslaving as an active interface with an up link [ 389.791951][T23922] chnl_net:caif_netlink_parms(): no params data found [ 389.802894][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6040'. [ 389.827951][T24010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6040'. [ 389.891359][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6040'. [ 389.916450][ T29] audit: type=1107 audit(389.880:10271): pid=24019 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 389.916450][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 390.033056][T23922] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.040210][T23922] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.053256][T24037] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6046'. [ 390.067090][T24040] loop5: detected capacity change from 0 to 512 [ 390.095533][T23922] bridge_slave_0: entered allmulticast mode [ 390.126557][T23922] bridge_slave_0: entered promiscuous mode [ 390.140179][T24044] loop6: detected capacity change from 0 to 164 [ 390.146173][T24040] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 390.161882][T24044] rock: directory entry would overflow storage [ 390.168074][T24044] rock: sig=0x66, size=4, remaining=3 [ 390.208361][T24040] EXT4-fs (loop5): 1 truncate cleaned up [ 390.220094][T23922] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.227229][T23922] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.236303][T24040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.249996][T23922] bridge_slave_1: entered allmulticast mode [ 390.269504][T23922] bridge_slave_1: entered promiscuous mode [ 390.348514][T23922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.369984][T23922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.401628][T23922] team0: Port device team_slave_0 added [ 390.409750][T23922] team0: Port device team_slave_1 added [ 390.447048][T23922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.454267][T23922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.480968][T23922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.495122][T24070] netlink: 'syz.6.6051': attribute type 10 has an invalid length. [ 390.516850][T24070] siw: device registration error -23 [ 390.557296][T24087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6054'. [ 390.568060][T23922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.575349][T23922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.587387][T24089] loop6: detected capacity change from 0 to 512 [ 390.601640][T23922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.620268][T24087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6054'. [ 390.649576][T24092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6056'. [ 390.691214][T23922] hsr_slave_0: entered promiscuous mode [ 390.707568][T23922] hsr_slave_1: entered promiscuous mode [ 390.721721][T23922] debugfs: 'hsr0' already exists in 'hsr' [ 390.726737][T24098] loop4: detected capacity change from 0 to 164 [ 390.727517][T23922] Cannot create hsr debugfs directory [ 390.744183][T24098] rock: directory entry would overflow storage [ 390.750471][T24098] rock: sig=0x66, size=4, remaining=3 [ 390.837497][T22791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.936680][T24119] netlink: 'syz.4.6062': attribute type 10 has an invalid length. [ 390.973496][T24119] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.982182][T24119] bond0: (slave team0): Enslaving as an active interface with an up link [ 390.988365][T24123] loop6: detected capacity change from 0 to 128 [ 390.995740][T24125] siw: device registration error -23 [ 391.005261][T24123] FAT-fs (loop6): bread failed, FSINFO block (sector = 257) [ 391.073468][T24134] loop6: detected capacity change from 0 to 512 [ 391.077577][T24135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6066'. [ 391.083436][T24134] EXT4-fs: Ignoring removed oldalloc option [ 391.138040][T24134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.176429][T23557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.227813][T24154] loop4: detected capacity change from 0 to 164 [ 391.245012][T24154] rock: directory entry would overflow storage [ 391.251576][T24154] rock: sig=0x66, size=4, remaining=3 [ 391.313478][T23922] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 391.323527][T24162] loop6: detected capacity change from 0 to 512 [ 391.333758][T23922] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 391.350763][T24162] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 391.364931][T23922] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 391.376805][T24162] EXT4-fs (loop6): 1 truncate cleaned up [ 391.390707][T24162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.412299][T23922] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 391.510461][T23922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.525326][T23922] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.535525][T11784] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.543290][T11784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.557466][T11784] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.564595][T11784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.587602][T23922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.598401][T23922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.626408][T24188] netlink: 'syz.5.6074': attribute type 298 has an invalid length. [ 391.666370][ T29] audit: type=1326 audit(391.630:10272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 391.689831][ T29] audit: type=1326 audit(391.630:10273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 391.713175][ T29] audit: type=1326 audit(391.630:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 391.736277][ T29] audit: type=1326 audit(391.630:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 391.759738][ T29] audit: type=1326 audit(391.630:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 391.771566][T23922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.783154][ T29] audit: type=1326 audit(391.630:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f91a5acd550 code=0x7ffc0000 [ 391.813164][ T29] audit: type=1326 audit(391.630:10278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f91a5ad0417 code=0x7ffc0000 [ 391.836447][ T29] audit: type=1326 audit(391.630:10279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 391.859629][ T29] audit: type=1326 audit(391.630:10280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.5.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f91a5ad0417 code=0x7ffc0000 [ 391.977530][T24209] netlink: 'syz.4.6077': attribute type 10 has an invalid length. [ 391.988086][T24209] siw: device registration error -23 [ 392.023999][T23922] veth0_vlan: entered promiscuous mode [ 392.041607][T23922] veth1_vlan: entered promiscuous mode [ 392.069633][T24223] loop4: detected capacity change from 0 to 512 [ 392.076403][T24223] EXT4-fs: Ignoring removed oldalloc option [ 392.079962][T23922] veth0_macvtap: entered promiscuous mode [ 392.104562][T23557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.105996][T23922] veth1_macvtap: entered promiscuous mode [ 392.127900][T24223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.162251][T23922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.174926][T23922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.200248][T11784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.213352][T24229] loop6: detected capacity change from 0 to 1024 [ 392.224313][T11784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.236218][T24229] EXT4-fs: Ignoring removed nobh option [ 392.238068][T11784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.242137][T24229] EXT4-fs: Ignoring removed bh option [ 392.257373][ T4163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.268102][T23647] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.291976][T24229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.368730][T24242] loop4: detected capacity change from 0 to 164 [ 392.385891][T24242] rock: directory entry would overflow storage [ 392.392390][T24242] rock: sig=0x66, size=4, remaining=3 [ 392.422827][T23557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.255210][T24306] loop2: detected capacity change from 0 to 512 [ 393.292985][T24306] EXT4-fs: Ignoring removed oldalloc option [ 393.391194][T24306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.473623][T23922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.594323][T24335] loop4: detected capacity change from 0 to 164 [ 393.614730][T24335] rock: directory entry would overflow storage [ 393.621092][T24335] rock: sig=0x66, size=4, remaining=3 [ 394.396994][T24388] __nla_validate_parse: 5 callbacks suppressed [ 394.397015][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 394.421601][T24388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6106'. [ 394.498156][T24401] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6110'. [ 394.631235][T24423] loop6: detected capacity change from 0 to 512 [ 394.643819][T24423] EXT4-fs: Ignoring removed i_version option [ 394.649892][T24423] EXT4-fs: Ignoring removed nobh option [ 394.655918][T24423] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 394.708139][T24423] EXT4-fs (loop6): 1 truncate cleaned up [ 394.732496][T24430] 9pnet_fd: Insufficient options for proto=fd [ 394.751070][T24423] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.848517][T24423] loop6: detected capacity change from 512 to 64 [ 394.859044][T24445] loop2: detected capacity change from 0 to 512 [ 394.891468][T24445] EXT4-fs: Ignoring removed i_version option [ 394.898182][T23557] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /27/bus: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 394.900382][T24450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6118'. [ 394.940300][T24450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6118'. [ 394.954612][T24445] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.6116: corrupted in-inode xattr: overlapping e_value [ 394.975107][T24456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6121'. [ 394.987102][T24445] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.6116: couldn't read orphan inode 15 (err -117) [ 395.009068][T23557] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.011955][T24445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.035313][T24445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.061995][T24462] loop5: detected capacity change from 0 to 164 [ 395.083036][T24430] netlink: 'syz.2.6116': attribute type 1 has an invalid length. [ 395.108960][T24462] rock: directory entry would overflow storage [ 395.115222][T24462] rock: sig=0x66, size=4, remaining=3 [ 395.285993][T24485] loop2: detected capacity change from 0 to 512 [ 395.311232][T24485] EXT4-fs: Ignoring removed i_version option [ 395.317397][T24485] EXT4-fs: Ignoring removed nobh option [ 395.324161][T24485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 395.337562][T11811] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.355499][T24485] EXT4-fs (loop2): 1 truncate cleaned up [ 395.372627][T24485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.501927][T11811] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.594918][T24498] loop5: detected capacity change from 0 to 512 [ 395.792850][T24498] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 395.812431][T11811] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.834093][T24498] EXT4-fs (loop5): 1 truncate cleaned up [ 395.840467][T24485] loop2: detected capacity change from 512 to 64 [ 395.849922][T24498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.888503][T11811] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.925063][T23922] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /10/bus: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 395.967378][T23922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.028510][T11811] bridge_slave_1: left allmulticast mode [ 396.034354][T11811] bridge_slave_1: left promiscuous mode [ 396.040113][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.095707][T11811] bridge_slave_0: left allmulticast mode [ 396.101518][T11811] bridge_slave_0: left promiscuous mode [ 396.107313][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.112759][T24533] netlink: 'syz.1.6131': attribute type 6 has an invalid length. [ 396.139708][T24544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6133'. [ 396.266023][T24557] 9pnet_fd: Insufficient options for proto=fd [ 396.288647][T11811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.318217][T11811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.334982][T24564] loop4: detected capacity change from 0 to 512 [ 396.335029][T11811] bond0 (unregistering): (slave team0): Releasing backup interface [ 396.355601][T24564] EXT4-fs: Ignoring removed i_version option [ 396.383133][T11811] bond0 (unregistering): Released all slaves [ 396.397703][T22791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.504486][T24564] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.6137: corrupted in-inode xattr: overlapping e_value [ 396.535208][T24564] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.6137: couldn't read orphan inode 15 (err -117) [ 396.641245][T11811] hsr_slave_0: left promiscuous mode [ 396.652381][T11811] hsr_slave_1: left promiscuous mode [ 396.676856][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.684759][T11811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.731828][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.739466][T11811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.822533][T11811] veth1_macvtap: left promiscuous mode [ 396.866093][T11811] veth0_macvtap: left promiscuous mode [ 396.905771][T11811] veth1_vlan: left promiscuous mode [ 396.934321][T11811] veth0_vlan: left promiscuous mode [ 396.946002][T24564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.958692][T24564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.975380][T24557] netlink: 'syz.4.6137': attribute type 1 has an invalid length. [ 397.039106][T11811] team0 (unregistering): Port device team_slave_1 removed [ 397.050287][T11811] team0 (unregistering): Port device team_slave_0 removed [ 397.377879][T24623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6143'. [ 397.434305][T24623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6143'. [ 397.526665][T24628] loop5: detected capacity change from 0 to 512 [ 397.675872][T24489] chnl_net:caif_netlink_parms(): no params data found [ 397.801718][T24489] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.809138][T24489] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.818942][T24489] bridge_slave_0: entered allmulticast mode [ 397.828604][T24489] bridge_slave_0: entered promiscuous mode [ 397.835774][T24489] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.842922][T24489] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.850358][T24489] bridge_slave_1: entered allmulticast mode [ 397.857246][T24489] bridge_slave_1: entered promiscuous mode [ 397.865562][T24656] loop5: detected capacity change from 0 to 1024 [ 397.872596][T24656] EXT4-fs: Ignoring removed nobh option [ 397.878209][T24656] EXT4-fs: Ignoring removed bh option [ 398.009895][T24656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.484781][T24567] chnl_net:caif_netlink_parms(): no params data found [ 398.495402][T24489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.513040][T24489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.561248][T24489] team0: Port device team_slave_0 added [ 398.578042][T11811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.602362][T24489] team0: Port device team_slave_1 added [ 398.682870][T24489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.689925][T24489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.716257][T24489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.732701][T22791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.744737][T11811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.797829][T24712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6153'. [ 398.817399][T24716] loop4: detected capacity change from 0 to 512 [ 398.865349][T24489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.872504][T24489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.899022][T24489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.933442][T24720] loop5: detected capacity change from 0 to 164 [ 398.945120][T11811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.975922][T24567] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.983208][T24567] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.997747][T24567] bridge_slave_0: entered allmulticast mode [ 399.005163][T24720] rock: directory entry would overflow storage [ 399.011530][T24720] rock: sig=0x66, size=4, remaining=3 [ 399.017620][T24567] bridge_slave_0: entered promiscuous mode [ 399.043679][T24567] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.050845][T24567] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.060403][T24567] bridge_slave_1: entered allmulticast mode [ 399.067322][T24567] bridge_slave_1: entered promiscuous mode [ 399.074247][T24732] loop4: detected capacity change from 0 to 1024 [ 399.083456][T11811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.110610][T24732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.132427][T24732] netlink: 'syz.4.6156': attribute type 7 has an invalid length. [ 399.165182][T24489] hsr_slave_0: entered promiscuous mode [ 399.193054][T24489] hsr_slave_1: entered promiscuous mode [ 399.207039][T24489] debugfs: 'hsr0' already exists in 'hsr' [ 399.212886][T24489] Cannot create hsr debugfs directory [ 399.271665][T24567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.304730][T24567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.372187][T24567] team0: Port device team_slave_0 added [ 399.381236][T24567] team0: Port device team_slave_1 added [ 399.419517][T11811] bridge_slave_1: left allmulticast mode [ 399.425299][T11811] bridge_slave_1: left promiscuous mode [ 399.431058][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.482674][T24740] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.599254][T11811] bridge_slave_0: left allmulticast mode [ 399.604973][T11811] bridge_slave_0: left promiscuous mode [ 399.611069][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.891375][T11811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.901522][T11811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.911377][T11811] bond0 (unregistering): Released all slaves [ 399.930303][T24567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.937298][T24567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.963868][T24567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.998216][T24567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.005521][T24567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.031987][T24567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.073907][T11811] hsr_slave_0: left promiscuous mode [ 400.083653][T11811] hsr_slave_1: left promiscuous mode [ 400.089873][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.097364][T11811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.106977][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.114491][T11811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.193757][T11811] veth1_macvtap: left promiscuous mode [ 400.199730][T11811] veth0_macvtap: left promiscuous mode [ 400.205271][T11811] veth1_vlan: left promiscuous mode [ 400.210639][T11811] veth0_vlan: left promiscuous mode [ 400.284321][T11811] team0 (unregistering): Port device team_slave_1 removed [ 400.294967][T11811] team0 (unregistering): Port device team_slave_0 removed [ 400.371590][T24567] hsr_slave_0: entered promiscuous mode [ 400.383698][T24816] netlink: 'syz.5.6166': attribute type 10 has an invalid length. [ 400.389835][T24567] hsr_slave_1: entered promiscuous mode [ 400.397888][T24567] debugfs: 'hsr0' already exists in 'hsr' [ 400.403863][T24567] Cannot create hsr debugfs directory [ 400.430248][T24816] siw: device registration error -23 [ 400.481995][T24824] loop5: detected capacity change from 0 to 164 [ 400.506612][T24824] rock: directory entry would overflow storage [ 400.513233][T24824] rock: sig=0x66, size=4, remaining=3 [ 400.548302][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 400.548355][ T29] audit: type=1107 audit(400.510:10304): pid=24827 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 400.548355][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 400.800733][T24781] chnl_net:caif_netlink_parms(): no params data found [ 401.204509][T24781] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.211763][T24781] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.236494][T24781] bridge_slave_0: entered allmulticast mode [ 401.244784][T24781] bridge_slave_0: entered promiscuous mode [ 401.258345][T24781] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.265484][T24781] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.275194][T24781] bridge_slave_1: entered allmulticast mode [ 401.282227][T24781] bridge_slave_1: entered promiscuous mode [ 401.301617][T11811] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.321012][T24781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.331510][T24781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.359515][T24781] team0: Port device team_slave_0 added [ 401.366446][T24781] team0: Port device team_slave_1 added [ 401.384392][T11811] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.414063][T24781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.421131][T24781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.447820][T24781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.460351][T24781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.467531][T24781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.505675][T24781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.536518][T11811] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.597472][T11811] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.613321][T24781] hsr_slave_0: entered promiscuous mode [ 401.620203][T24781] hsr_slave_1: entered promiscuous mode [ 401.626394][T24781] debugfs: 'hsr0' already exists in 'hsr' [ 401.632349][T24781] Cannot create hsr debugfs directory [ 401.674389][T24905] netlink: 'syz.5.6174': attribute type 10 has an invalid length. [ 401.687894][T24567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.700712][T24905] siw: device registration error -23 [ 401.728707][T24567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.745321][ T29] audit: type=1107 audit(401.710:10305): pid=24907 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 401.745321][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 401.787154][T24489] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 401.808116][T24567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.819696][T11811] bridge_slave_1: left allmulticast mode [ 401.825497][T11811] bridge_slave_1: left promiscuous mode [ 401.831293][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.841434][T11811] bridge_slave_0: left allmulticast mode [ 401.847216][T11811] bridge_slave_0: left promiscuous mode [ 401.852988][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.868062][T24913] loop5: detected capacity change from 0 to 512 [ 401.940931][T11811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.952857][T11811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.964417][T11811] bond0 (unregistering): (slave team0): Releasing backup interface [ 401.973417][T11811] bond0 (unregistering): Released all slaves [ 401.986328][T24915] loop5: detected capacity change from 0 to 164 [ 401.999941][T24915] rock: directory entry would overflow storage [ 402.006357][T24915] rock: sig=0x66, size=4, remaining=3 [ 402.012902][T24489] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 402.037950][T24567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.053447][T24489] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 402.072780][T11811] hsr_slave_0: left promiscuous mode [ 402.080812][T11811] hsr_slave_1: left promiscuous mode [ 402.086584][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.094334][T11811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.106630][ T29] audit: type=1107 audit(402.080:10306): pid=24917 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 402.106630][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 402.139350][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.146826][T11811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.163007][T11811] veth1_macvtap: left promiscuous mode [ 402.169385][T11811] veth0_macvtap: left promiscuous mode [ 402.175020][T11811] veth1_vlan: left promiscuous mode [ 402.182427][T11811] veth0_vlan: left promiscuous mode [ 402.197129][ T29] audit: type=1326 audit(402.160:10307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24921 comm="syz.5.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 402.220348][ T29] audit: type=1326 audit(402.160:10308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24921 comm="syz.5.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 402.243720][ T29] audit: type=1326 audit(402.200:10309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24921 comm="syz.5.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 402.266801][ T29] audit: type=1326 audit(402.200:10310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24921 comm="syz.5.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 402.290166][ T29] audit: type=1326 audit(402.200:10311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24921 comm="syz.5.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 402.297660][T24924] __nla_validate_parse: 1 callbacks suppressed [ 402.297682][T24924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6182'. [ 402.313354][ T29] audit: type=1326 audit(402.200:10312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24921 comm="syz.5.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 402.313457][ T29] audit: type=1326 audit(402.200:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24921 comm="syz.5.6181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91a5acebe9 code=0x7ffc0000 [ 402.323170][T24924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6182'. [ 402.416033][T11811] team0 (unregistering): Port device team_slave_1 removed [ 402.430656][T24928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6184'. [ 402.434408][T11811] team0 (unregistering): Port device team_slave_0 removed [ 402.457889][T24928] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6184'. [ 402.469952][T24928] loop5: detected capacity change from 0 to 164 [ 402.484577][T24928] bio_check_eod: 8 callbacks suppressed [ 402.484597][T24928] syz.5.6184: attempt to access beyond end of device [ 402.484597][T24928] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 402.504313][T24928] syz.5.6184: attempt to access beyond end of device [ 402.504313][T24928] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 402.526412][T24489] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 402.556548][ T3413] hid-generic 0000:0000:0000.0082: unknown main item tag 0x0 [ 402.566452][ T3413] hid-generic 0000:0000:0000.0082: hidraw0: HID v0.00 Device [syz1] on syz0 [ 402.656963][T24567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.677928][T24567] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.691758][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.699119][T11807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.719416][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.726721][T11807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.760281][T24489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.808421][T24489] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.825106][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.832330][T11807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.864259][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.871446][T11807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.931108][T24567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.944183][T24489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.954726][T24489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.001176][T24781] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 403.025305][T24781] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 403.045538][T24976] loop5: detected capacity change from 0 to 164 [ 403.048822][T24781] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 403.072561][T24976] rock: directory entry would overflow storage [ 403.079063][T24976] rock: sig=0x66, size=4, remaining=3 [ 403.092436][T24781] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 403.192712][T24489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.219779][T24567] veth0_vlan: entered promiscuous mode [ 403.241244][T24567] veth1_vlan: entered promiscuous mode [ 403.288028][T24781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.309869][T24567] veth0_macvtap: entered promiscuous mode [ 403.326203][T24567] veth1_macvtap: entered promiscuous mode [ 403.347494][T24781] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.369282][T24567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.382306][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.389497][T11807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.406729][T24567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.426060][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.433523][T11807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.490278][T11811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.533445][T11811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.557840][T11811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.572655][T11811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.642863][T24489] veth0_vlan: entered promiscuous mode [ 403.679409][T24489] veth1_vlan: entered promiscuous mode [ 403.718830][T25049] netlink: 'syz.3.6190': attribute type 1 has an invalid length. [ 403.743194][T24781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.762467][T24489] veth0_macvtap: entered promiscuous mode [ 403.781425][T24489] veth1_macvtap: entered promiscuous mode [ 403.803609][T24489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.827492][T24489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.859592][T11807] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.881232][T11824] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.933451][T11824] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.953963][T25069] loop7: detected capacity change from 0 to 164 [ 403.975425][T11824] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.989051][T25069] rock: directory entry would overflow storage [ 403.995789][T25069] rock: sig=0x66, size=4, remaining=3 [ 404.044446][T25069] rock: directory entry would overflow storage [ 404.050806][T25069] rock: sig=0x66, size=4, remaining=3 [ 404.172527][T24781] veth0_vlan: entered promiscuous mode [ 404.187134][T24781] veth1_vlan: entered promiscuous mode [ 404.193420][T25093] netlink: 'syz.5.6193': attribute type 10 has an invalid length. [ 404.207517][T25093] siw: device registration error -23 [ 404.217325][T24781] veth0_macvtap: entered promiscuous mode [ 404.258658][T24781] veth1_macvtap: entered promiscuous mode [ 404.286903][T24781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.306523][T24781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.343421][T25104] loop3: detected capacity change from 0 to 164 [ 404.360928][T11786] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.396638][T11807] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.406505][T11771] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.431058][T11771] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.437626][T25104] rock: directory entry would overflow storage [ 404.446190][T25104] rock: sig=0x66, size=4, remaining=3 [ 404.459136][T25109] loop8: detected capacity change from 0 to 512 [ 404.466386][T25109] EXT4-fs: Ignoring removed oldalloc option [ 404.509546][T25110] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 404.938359][T25109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.001728][ T6877] hid-generic 0000:0000:0000.0083: unknown main item tag 0x0 [ 405.023493][T25140] loop7: detected capacity change from 0 to 512 [ 405.034523][ T6877] hid-generic 0000:0000:0000.0083: hidraw0: HID v0.00 Device [syz1] on syz0 [ 405.051867][T25140] EXT4-fs: Ignoring removed oldalloc option [ 405.083408][T24781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.193254][T25140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.248978][T24489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.311219][T25147] loop5: detected capacity change from 0 to 512 [ 405.339740][T25159] loop3: detected capacity change from 0 to 164 [ 405.365810][T25147] EXT4-fs (loop5): orphan cleanup on readonly fs [ 405.385179][T25159] syz.3.6207: attempt to access beyond end of device [ 405.385179][T25159] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 405.415895][T25147] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6203: bg 0: block 248: padding at end of block bitmap is not set [ 405.438793][T25159] syz.3.6207: attempt to access beyond end of device [ 405.438793][T25159] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 405.453554][T25147] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.6203: Failed to acquire dquot type 1 [ 405.466652][T25147] EXT4-fs (loop5): 1 truncate cleaned up [ 405.479664][T25147] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.591323][T25147] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.717074][T25189] loop5: detected capacity change from 0 to 164 [ 405.737933][T25189] rock: directory entry would overflow storage [ 405.744383][T25189] rock: sig=0x66, size=4, remaining=3 [ 405.780110][T25193] netlink: 'syz.3.6211': attribute type 298 has an invalid length. [ 405.792452][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 405.792467][ T29] audit: type=1326 audit(405.760:10323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25181 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c2e6ebe9 code=0x7ffc0000 [ 405.826648][ T29] audit: type=1326 audit(405.800:10324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25181 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c2e6ebe9 code=0x7ffc0000 [ 405.850299][ T29] audit: type=1326 audit(405.800:10325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25181 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c2e6ebe9 code=0x7ffc0000 [ 405.873883][ T29] audit: type=1326 audit(405.800:10326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25181 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c2e6ebe9 code=0x7ffc0000 [ 405.897385][ T29] audit: type=1326 audit(405.800:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25181 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1c2e6ebe9 code=0x7ffc0000 [ 405.920925][ T29] audit: type=1326 audit(405.800:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25181 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c2e6ebe9 code=0x7ffc0000 [ 405.944246][ T29] audit: type=1326 audit(405.800:10329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25181 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c2e6ebe9 code=0x7ffc0000 [ 405.967869][ T29] audit: type=1326 audit(405.800:10330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25181 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1c2e6d550 code=0x7ffc0000 [ 405.991151][ T29] audit: type=1326 audit(405.800:10331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25181 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe1c2e70417 code=0x7ffc0000 [ 406.014342][ T29] audit: type=1326 audit(405.800:10332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25181 comm="syz.3.6211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1c2e6ebe9 code=0x7ffc0000 [ 406.074879][T25204] loop5: detected capacity change from 0 to 512 [ 406.085386][T25204] EXT4-fs: Ignoring removed oldalloc option [ 406.101298][T25204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.146804][T22791] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.186184][T25222] 9pnet_fd: Insufficient options for proto=fd [ 406.242538][T25222] loop5: detected capacity change from 0 to 512 [ 406.256611][T25222] EXT4-fs: Ignoring removed i_version option [ 406.275444][T25232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6218'. [ 406.290359][T25222] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.6215: corrupted in-inode xattr: overlapping e_value [ 406.319715][T25232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6218'. [ 406.324845][T25222] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6215: couldn't read orphan inode 15 (err -117) [ 406.362354][T25222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.386224][T25222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.415615][T25222] netlink: 'syz.5.6215': attribute type 1 has an invalid length. [ 406.447862][T25250] loop7: detected capacity change from 0 to 1024 [ 406.482991][T25250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.502640][T25259] netlink: 'syz.5.6222': attribute type 10 has an invalid length. [ 406.511922][T25250] netlink: 'syz.7.6219': attribute type 7 has an invalid length. [ 406.520496][T25259] siw: device registration error -23 [ 406.582530][T25269] loop5: detected capacity change from 0 to 164 [ 406.605714][T25269] rock: directory entry would overflow storage [ 406.612083][T25269] rock: sig=0x66, size=4, remaining=3 [ 406.625737][T24489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.706826][T25283] loop7: detected capacity change from 0 to 1024 [ 406.725218][T25283] EXT4-fs: Ignoring removed nobh option [ 406.730977][T25283] EXT4-fs: Ignoring removed bh option [ 406.748588][T25286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6229'. [ 406.769771][T25283] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.934160][T25303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6229'. [ 407.109809][T25321] netlink: 'syz.8.6234': attribute type 10 has an invalid length. [ 407.122796][T25321] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.133097][T25321] bond0: (slave team0): Enslaving as an active interface with an up link [ 407.145551][T25321] siw: device registration error -23 [ 407.263033][T25338] loop8: detected capacity change from 0 to 512 [ 407.274697][T25338] EXT4-fs (loop8): orphan cleanup on readonly fs [ 407.290937][T25338] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6238: bg 0: block 248: padding at end of block bitmap is not set [ 407.313338][T25342] loop5: detected capacity change from 0 to 1024 [ 407.320420][T25338] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.6238: Failed to acquire dquot type 1 [ 407.340879][T25342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.356159][T25338] EXT4-fs (loop8): 1 truncate cleaned up [ 407.360168][T25342] netlink: 'syz.5.6237': attribute type 7 has an invalid length. [ 407.376156][T25338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 407.460129][T25338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.506420][T25358] loop8: detected capacity change from 0 to 164 [ 407.537006][T25358] rock: directory entry would overflow storage [ 407.543300][T25358] rock: sig=0x66, size=4, remaining=3 [ 407.586194][T24489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.643130][T25370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6241'. [ 407.655370][T25370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6241'. [ 407.739781][T25350] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.756385][T25382] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6245'. [ 407.800798][T25385] netlink: 'syz.3.6247': attribute type 10 has an invalid length. [ 407.822756][T25385] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.840699][T25385] bond0: (slave team0): Enslaving as an active interface with an up link [ 407.854109][T25396] siw: device registration error -23 [ 407.872791][T25397] loop7: detected capacity change from 0 to 512 [ 407.920449][T25397] EXT4-fs (loop7): orphan cleanup on readonly fs [ 407.930920][T25401] loop8: detected capacity change from 0 to 1024 [ 407.940648][T25397] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6251: bg 0: block 248: padding at end of block bitmap is not set [ 407.941251][T25407] loop3: detected capacity change from 0 to 164 [ 407.966477][T25397] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.6251: Failed to acquire dquot type 1 [ 407.969286][T25401] EXT4-fs: Ignoring removed nobh option [ 407.983769][T25401] EXT4-fs: Ignoring removed bh option [ 408.002160][T25397] EXT4-fs (loop7): 1 truncate cleaned up [ 408.024868][T25401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.030363][T25397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 408.051623][T25407] rock: directory entry would overflow storage [ 408.057902][T25407] rock: sig=0x66, size=4, remaining=3 [ 408.064259][T25407] rock: directory entry would overflow storage [ 408.070800][T25407] rock: sig=0x66, size=4, remaining=3 [ 408.192546][T25397] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.229967][T25437] loop7: detected capacity change from 0 to 164 [ 408.251787][T25437] rock: directory entry would overflow storage [ 408.258070][T25437] rock: sig=0x66, size=4, remaining=3 [ 408.317584][T25411] chnl_net:caif_netlink_parms(): no params data found [ 408.404307][T25411] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.411467][T25411] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.425207][T25411] bridge_slave_0: entered allmulticast mode [ 408.432118][T25411] bridge_slave_0: entered promiscuous mode [ 408.441760][T25411] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.449034][T25411] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.464382][T25411] bridge_slave_1: entered allmulticast mode [ 408.471343][T25411] bridge_slave_1: entered promiscuous mode [ 408.513155][T25411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.531999][T25411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.578170][T25411] team0: Port device team_slave_0 added [ 408.599220][T25411] team0: Port device team_slave_1 added [ 408.635883][T25411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.643097][T25411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.669491][T25411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.681381][T25411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.688508][T25411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.714708][T25411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.771318][T24781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.792391][T25476] netlink: 'syz.7.6257': attribute type 298 has an invalid length. [ 408.805155][T11786] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.860032][T25482] loop8: detected capacity change from 0 to 512 [ 408.902091][T25482] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 408.902638][T25485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6260'. [ 408.924870][T25482] EXT4-fs (loop8): orphan cleanup on readonly fs [ 408.929752][T11786] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.945367][T25482] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.6258: corrupted inode contents [ 408.962672][T25482] EXT4-fs (loop8): Remounting filesystem read-only [ 408.974969][T25482] EXT4-fs (loop8): 1 truncate cleaned up [ 408.988493][T11811] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 408.999276][T11811] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 409.013528][T25411] hsr_slave_0: entered promiscuous mode [ 409.023534][T25411] hsr_slave_1: entered promiscuous mode [ 409.033280][T11811] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 409.045176][T25482] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.054045][T25411] debugfs: 'hsr0' already exists in 'hsr' [ 409.063531][T25411] Cannot create hsr debugfs directory [ 409.078381][T11786] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.102326][T25493] netlink: 'syz.3.6262': attribute type 10 has an invalid length. [ 409.132576][T25493] siw: device registration error -23 [ 409.155383][T24781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.171608][T11786] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.197699][T25505] loop3: detected capacity change from 0 to 164 [ 409.231882][T25505] rock: directory entry would overflow storage [ 409.238360][T25505] rock: sig=0x66, size=4, remaining=3 [ 409.367295][T25523] loop3: detected capacity change from 0 to 1024 [ 409.376318][T11786] bridge_slave_1: left allmulticast mode [ 409.382326][T11786] bridge_slave_1: left promiscuous mode [ 409.388182][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.400013][T25523] EXT4-fs: Ignoring removed nobh option [ 409.405838][T25523] EXT4-fs: Ignoring removed bh option [ 409.436183][T11786] bridge_slave_0: left allmulticast mode [ 409.442110][T11786] bridge_slave_0: left promiscuous mode [ 409.448437][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.457719][T25523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.543901][T25539] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6270'. [ 409.583219][T11786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.600224][T11786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.613329][T11786] bond0 (unregistering): (slave team0): Releasing backup interface [ 409.623044][T11786] bond0 (unregistering): Released all slaves [ 409.724505][T11786] hsr_slave_0: left promiscuous mode [ 409.753958][T11786] hsr_slave_1: left promiscuous mode [ 409.767283][T25556] loop7: detected capacity change from 0 to 164 [ 409.776754][T11786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.784463][T11786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.799972][T11786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.808441][T11786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.811145][T25556] rock: directory entry would overflow storage [ 409.822027][T25556] rock: sig=0x66, size=4, remaining=3 [ 409.831900][T11786] veth1_macvtap: left promiscuous mode [ 409.837646][T11786] veth0_macvtap: left promiscuous mode [ 409.853718][T11786] veth1_vlan: left promiscuous mode [ 409.869933][T11786] veth0_vlan: left promiscuous mode [ 409.904000][T25571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6280'. [ 410.082973][T11786] team0 (unregistering): Port device team_slave_1 removed [ 410.102815][T11786] team0 (unregistering): Port device team_slave_0 removed [ 410.245927][T24567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.287881][T25609] loop8: detected capacity change from 0 to 512 [ 410.294208][T25613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6292'. [ 410.305873][T25609] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 410.333745][T25609] EXT4-fs (loop8): 1 truncate cleaned up [ 410.348706][T25609] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.451525][T25630] loop7: detected capacity change from 0 to 164 [ 410.495530][T25630] rock: directory entry would overflow storage [ 410.501874][T25630] rock: sig=0x66, size=4, remaining=3 [ 410.526992][T25411] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.560615][T25411] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.610054][T24781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.621547][T25411] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.660977][T25411] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.737159][T25670] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6304'. [ 410.741874][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6303'. [ 410.789220][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6303'. [ 410.851529][T25411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.867841][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 410.867861][ T29] audit: type=1107 audit(410.830:10393): pid=25677 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 410.867861][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 410.910581][T25411] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.938039][T25683] loop3: detected capacity change from 0 to 512 [ 410.944649][T11771] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.944695][T11771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.961246][T25683] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 410.986656][T25687] loop8: detected capacity change from 0 to 164 [ 410.995452][T11771] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.002692][T11771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.003967][T25683] EXT4-fs (loop3): 1 truncate cleaned up [ 411.031295][T25687] rock: directory entry would overflow storage [ 411.037729][T25687] rock: sig=0x66, size=4, remaining=3 [ 411.046453][T25683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.080905][T25411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 411.091718][T25411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.284191][T25411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.296169][T24567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.527115][T25740] loop7: detected capacity change from 0 to 164 [ 411.535531][T25411] veth0_vlan: entered promiscuous mode [ 411.576540][T25748] loop3: detected capacity change from 0 to 512 [ 411.579475][T25411] veth1_vlan: entered promiscuous mode [ 411.599217][T25740] rock: directory entry would overflow storage [ 411.605446][T25740] rock: sig=0x66, size=4, remaining=3 [ 411.632267][T25748] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 411.649005][T25411] veth0_macvtap: entered promiscuous mode [ 411.697792][T25748] EXT4-fs (loop3): orphan cleanup on readonly fs [ 411.726746][T25411] veth1_macvtap: entered promiscuous mode [ 411.749618][T25748] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.6322: corrupted inode contents [ 411.800922][T25411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.829974][T25748] EXT4-fs (loop3): Remounting filesystem read-only [ 411.844193][T25411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.854359][T25748] EXT4-fs (loop3): 1 truncate cleaned up [ 411.861719][T11807] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 411.872465][T11807] Quota error (device loop3): write_blk: dquota write failed [ 411.880047][T11807] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 411.890305][T11807] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 411.901233][T11807] Quota error (device loop3): write_blk: dquota write failed [ 411.908973][T11807] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 411.924107][T11807] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 411.935425][T11807] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 411.951289][T11807] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 411.956692][T11771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.965238][T25748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 412.027953][T11771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.049594][T11771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.058801][T11771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.234291][T25784] loop0: detected capacity change from 0 to 164 [ 412.243613][T24567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.275885][T25784] syz.0.6326: attempt to access beyond end of device [ 412.275885][T25784] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 412.336927][T25784] syz.0.6326: attempt to access beyond end of device [ 412.336927][T25784] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 412.362963][T25797] loop7: detected capacity change from 0 to 164 [ 412.423559][T25797] rock: directory entry would overflow storage [ 412.429850][T25797] rock: sig=0x66, size=4, remaining=3 [ 412.475286][T25809] loop3: detected capacity change from 0 to 164 [ 412.511116][T25809] rock: directory entry would overflow storage [ 412.517535][T25809] rock: sig=0x66, size=4, remaining=3 [ 412.546711][T25818] loop7: detected capacity change from 0 to 512 [ 412.563978][T25809] rock: directory entry would overflow storage [ 412.570424][T25809] rock: sig=0x66, size=4, remaining=3 [ 412.587781][ T29] audit: type=1400 audit(412.550:10394): avc: denied { mounton } for pid=25815 comm="syz.7.6339" path="/38/file0" dev="tmpfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 412.645148][T25818] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 412.694429][T25818] EXT4-fs (loop7): orphan cleanup on readonly fs [ 412.731057][T25818] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6339: corrupted inode contents [ 412.764023][T25818] EXT4-fs (loop7): Remounting filesystem read-only [ 412.779685][T25818] EXT4-fs (loop7): 1 truncate cleaned up [ 412.785644][T11771] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 412.796617][T11771] Quota error (device loop7): write_blk: dquota write failed [ 412.804255][T11771] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 412.814619][T11771] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 412.827778][T11771] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 412.838929][T25818] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 412.852009][T25818] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.915267][T25841] __nla_validate_parse: 8 callbacks suppressed [ 412.915283][T25841] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6341'. [ 412.981815][T25848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6344'. [ 412.996190][T25848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6344'. [ 413.046239][T25856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6347'. [ 413.059827][T25856] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6347'. [ 413.080150][T25856] loop7: detected capacity change from 0 to 164 [ 413.103036][T25856] syz.7.6347: attempt to access beyond end of device [ 413.103036][T25856] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 413.141492][T25856] syz.7.6347: attempt to access beyond end of device [ 413.141492][T25856] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 413.146626][T25870] loop8: detected capacity change from 0 to 512 [ 413.156143][T25871] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6347'. [ 413.197635][T25870] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 413.214981][T25870] EXT4-fs (loop8): 1 truncate cleaned up [ 413.221853][T25870] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.337614][T25894] loop3: detected capacity change from 0 to 512 [ 413.352799][T25894] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 413.365064][T25894] EXT4-fs (loop3): orphan cleanup on readonly fs [ 413.373518][T25894] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.6352: corrupted inode contents [ 413.387312][T25894] EXT4-fs (loop3): Remounting filesystem read-only [ 413.394458][T25894] EXT4-fs (loop3): 1 truncate cleaned up [ 413.400304][ T4163] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 413.411425][ T4163] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 413.422533][ T4163] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 413.433742][T25894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 413.447124][T25894] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.498483][T25907] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6353'. [ 413.790363][T25949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6358'. [ 413.800487][T25949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6358'. [ 413.898109][T25962] loop3: detected capacity change from 0 to 164 [ 413.905951][T25962] rock: directory entry would overflow storage [ 413.912586][T25962] rock: sig=0x66, size=4, remaining=3 [ 413.937540][T25966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6364'. [ 413.952927][T25962] rock: directory entry would overflow storage [ 413.954692][T25964] loop7: detected capacity change from 0 to 1024 [ 413.959208][T25962] rock: sig=0x66, size=4, remaining=3 [ 413.973188][T24781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.990096][T25964] EXT4-fs: Ignoring removed nobh option [ 413.996068][T25964] EXT4-fs: Ignoring removed bh option [ 414.079187][T25964] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.278307][T26005] loop8: detected capacity change from 0 to 164 [ 414.306423][T26005] syz.8.6374: attempt to access beyond end of device [ 414.306423][T26005] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 414.322728][T26005] syz.8.6374: attempt to access beyond end of device [ 414.322728][T26005] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 414.356898][T26011] loop0: detected capacity change from 0 to 512 [ 414.373681][T26011] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 414.422094][T26011] EXT4-fs (loop0): 1 truncate cleaned up [ 414.433833][T26011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.794932][T24489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.092432][T26100] loop3: detected capacity change from 0 to 164 [ 415.123316][T26100] rock: directory entry would overflow storage [ 415.129829][T26100] rock: sig=0x66, size=4, remaining=3 [ 415.164074][T25411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.500714][T26157] loop7: detected capacity change from 0 to 512 [ 415.511940][T26157] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 415.535652][T26157] EXT4-fs (loop7): 1 truncate cleaned up [ 415.551722][T26157] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.582322][T26160] loop0: detected capacity change from 0 to 164 [ 415.607698][T26160] rock: directory entry would overflow storage [ 415.614054][T26160] rock: sig=0x66, size=4, remaining=3 [ 415.815945][T26192] netlink: 'syz.0.6424': attribute type 10 has an invalid length. [ 415.836562][T26192] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.863327][T26192] bond0: (slave team0): Enslaving as an active interface with an up link [ 415.873296][T26202] siw: device registration error -23 [ 416.049392][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 416.049452][ T29] audit: type=1107 audit(416.020:10395): pid=26223 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 416.049452][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 416.132595][T26234] loop8: detected capacity change from 0 to 164 [ 416.156414][T26234] rock: directory entry would overflow storage [ 416.162960][T26234] rock: sig=0x66, size=4, remaining=3 [ 416.310769][T26258] loop8: detected capacity change from 0 to 512 [ 416.338174][T24489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.367621][ T29] audit: type=1107 audit(416.330:10396): pid=26262 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 416.367621][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 416.432829][T26258] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 416.466712][T26258] EXT4-fs (loop8): orphan cleanup on readonly fs [ 416.486941][T26258] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.6445: corrupted inode contents [ 416.547050][T26258] EXT4-fs (loop8): Remounting filesystem read-only [ 416.567286][T26258] EXT4-fs (loop8): 1 truncate cleaned up [ 416.573365][T11811] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 416.584258][T11811] Quota error (device loop8): write_blk: dquota write failed [ 416.591716][T11811] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 416.602435][T11811] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 416.613115][T11811] Quota error (device loop8): write_blk: dquota write failed [ 416.620837][T11811] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 416.642831][T11811] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 416.653361][T11811] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 416.698364][T11811] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 416.716149][T26296] netlink: 'syz.0.6454': attribute type 10 has an invalid length. [ 416.727281][T26296] siw: device registration error -23 [ 416.729286][T26258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 416.786209][T26258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.830098][T26302] loop7: detected capacity change from 0 to 164 [ 416.855323][T26309] loop0: detected capacity change from 0 to 164 [ 416.885657][T26302] rock: directory entry would overflow storage [ 416.892085][T26302] rock: sig=0x66, size=4, remaining=3 [ 416.936630][T26309] rock: directory entry would overflow storage [ 416.942883][T26309] rock: sig=0x66, size=4, remaining=3 [ 416.964387][T26309] rock: directory entry would overflow storage [ 416.970982][T26309] rock: sig=0x66, size=4, remaining=3 [ 417.052630][ T29] audit: type=1107 audit(417.020:10397): pid=26333 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 417.052630][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 417.407309][T26379] netlink: 'syz.3.6473': attribute type 6 has an invalid length. [ 417.531678][T26395] loop8: detected capacity change from 0 to 164 [ 417.541557][T26395] rock: directory entry would overflow storage [ 417.548003][T26395] rock: sig=0x66, size=4, remaining=3 [ 417.784427][ T29] audit: type=1107 audit(417.750:10398): pid=26428 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 417.784427][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 417.804286][T26432] loop0: detected capacity change from 0 to 512 [ 417.849107][T26432] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 417.865854][T26432] EXT4-fs (loop0): 1 truncate cleaned up [ 417.874011][T26432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.914505][T25411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.936390][T26448] __nla_validate_parse: 15 callbacks suppressed [ 417.936411][T26448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6491'. [ 417.953142][T26448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6491'. [ 417.990340][T26454] loop0: detected capacity change from 0 to 164 [ 417.998878][T26454] rock: directory entry would overflow storage [ 418.005297][T26454] rock: sig=0x66, size=4, remaining=3 [ 418.016405][T26454] rock: directory entry would overflow storage [ 418.022886][T26454] rock: sig=0x66, size=4, remaining=3 [ 418.121969][T26471] loop7: detected capacity change from 0 to 512 [ 418.139424][T26471] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 418.147645][T26471] EXT4-fs (loop7): orphan cleanup on readonly fs [ 418.156895][T26471] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6495: corrupted inode contents [ 418.174326][T26471] EXT4-fs (loop7): Remounting filesystem read-only [ 418.182985][T26471] EXT4-fs (loop7): 1 truncate cleaned up [ 418.190797][T11811] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 418.201663][T11811] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 418.213855][T11811] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 418.224977][T26471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 418.238952][T26471] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.400922][T26503] netlink: 'syz.7.6499': attribute type 10 has an invalid length. [ 418.416254][T26503] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.425810][T26503] bond0: (slave team0): Enslaving as an active interface with an up link [ 418.439671][T26503] siw: device registration error -23 [ 418.530736][T26522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6504'. [ 418.542432][T26522] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6504'. [ 418.557672][T26522] loop7: detected capacity change from 0 to 164 [ 418.567650][T26522] syz.7.6504: attempt to access beyond end of device [ 418.567650][T26522] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 418.597210][T26522] syz.7.6504: attempt to access beyond end of device [ 418.597210][T26522] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 418.620363][T26522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6504'. [ 418.730276][T26534] netlink: 'syz.3.6508': attribute type 1 has an invalid length. [ 418.743044][T26536] loop7: detected capacity change from 0 to 512 [ 418.745645][T26534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 418.772085][T26536] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 418.780949][T26536] EXT4-fs (loop7): orphan cleanup on readonly fs [ 418.790798][T26536] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6507: corrupted inode contents [ 418.803497][T26536] EXT4-fs (loop7): Remounting filesystem read-only [ 418.811316][T26536] EXT4-fs (loop7): 1 truncate cleaned up [ 418.817261][T11811] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 418.828063][T11811] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 418.839182][T11811] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 418.850326][T26536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 418.865901][T26536] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.970477][T26555] loop3: detected capacity change from 0 to 164 [ 419.004689][T26555] rock: directory entry would overflow storage [ 419.011079][T26555] rock: sig=0x66, size=4, remaining=3 [ 419.131585][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6519'. [ 419.146297][T26577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6519'. [ 419.151716][T26581] loop8: detected capacity change from 0 to 1024 [ 419.158542][T26577] loop0: detected capacity change from 0 to 164 [ 419.171779][T26577] syz.0.6519: attempt to access beyond end of device [ 419.171779][T26577] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 419.197690][T26577] syz.0.6519: attempt to access beyond end of device [ 419.197690][T26577] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 419.211831][T26581] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.215748][T26577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6519'. [ 419.243118][T26581] netlink: 'syz.8.6517': attribute type 7 has an invalid length. [ 419.282853][T26595] loop0: detected capacity change from 0 to 512 [ 419.300340][T26595] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 419.325546][T26595] EXT4-fs (loop0): orphan cleanup on readonly fs [ 419.341767][T26595] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6522: corrupted inode contents [ 419.355360][T26595] EXT4-fs (loop0): Remounting filesystem read-only [ 419.362283][T26595] EXT4-fs (loop0): 1 truncate cleaned up [ 419.368783][T11786] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 419.379513][T11786] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 419.391488][T11786] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 419.402332][T26595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 419.416822][T26595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.442370][T24781] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.684018][T26653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6532'. [ 419.696471][T26653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6532'. [ 419.707804][T26653] loop0: detected capacity change from 0 to 164 [ 419.723758][T26653] syz.0.6532: attempt to access beyond end of device [ 419.723758][T26653] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 419.740226][T26653] syz.0.6532: attempt to access beyond end of device [ 419.740226][T26653] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 419.803878][T26666] loop0: detected capacity change from 0 to 512 [ 419.830278][T26666] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 419.853981][T26666] EXT4-fs (loop0): orphan cleanup on readonly fs [ 419.888072][T26666] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6535: corrupted inode contents [ 419.902380][T26666] EXT4-fs (loop0): Remounting filesystem read-only [ 419.909758][T26666] EXT4-fs (loop0): 1 truncate cleaned up [ 419.955918][T11786] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 419.966947][T11786] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 420.015751][T11786] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 420.047463][T26694] loop7: detected capacity change from 0 to 164 [ 420.049044][T26666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 420.068670][T26694] rock: directory entry would overflow storage [ 420.074973][T26694] rock: sig=0x66, size=4, remaining=3 [ 420.116786][T26666] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.224436][T26710] netlink: 'syz.3.6544': attribute type 10 has an invalid length. [ 420.258861][T26710] siw: device registration error -23 [ 420.485034][T26751] loop3: detected capacity change from 0 to 1024 [ 420.511922][T26751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.526002][T26751] netlink: 'syz.3.6551': attribute type 7 has an invalid length. [ 420.601152][T26766] netlink: 'syz.0.6557': attribute type 10 has an invalid length. [ 420.609741][T26766] siw: device registration error -23 [ 420.757426][T24567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.774592][T26782] netlink: 'syz.8.6563': attribute type 1 has an invalid length. [ 420.795824][T26782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.269639][T26845] loop8: detected capacity change from 0 to 164 [ 421.270538][T26847] netlink: 'syz.0.6583': attribute type 1 has an invalid length. [ 421.303193][T26845] syz.8.6582: attempt to access beyond end of device [ 421.303193][T26845] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 421.331267][T26847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.337510][T26845] syz.8.6582: attempt to access beyond end of device [ 421.337510][T26845] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 421.608087][T26873] loop7: detected capacity change from 0 to 512 [ 421.639159][T26873] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 421.680960][T26873] EXT4-fs (loop7): orphan cleanup on readonly fs [ 421.718429][T26873] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6591: corrupted inode contents [ 421.767285][T26873] EXT4-fs (loop7): Remounting filesystem read-only [ 421.785221][T26892] 9pnet_fd: Insufficient options for proto=fd [ 421.855733][T26873] EXT4-fs (loop7): 1 truncate cleaned up [ 421.861908][T11807] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 421.872681][T11807] __quota_error: 24 callbacks suppressed [ 421.872773][T11807] Quota error (device loop7): write_blk: dquota write failed [ 421.886105][T11807] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 421.896272][T11807] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 421.906861][T11807] Quota error (device loop7): write_blk: dquota write failed [ 421.914554][T11807] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 421.949430][T26892] loop0: detected capacity change from 0 to 512 [ 421.963424][T26892] EXT4-fs: Ignoring removed i_version option [ 421.973661][T11807] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 421.984372][T11807] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 422.061637][T26892] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.6594: corrupted in-inode xattr: overlapping e_value [ 422.089077][T11807] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 422.120603][T26892] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6594: couldn't read orphan inode 15 (err -117) [ 422.137989][T26873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 422.156387][T26892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.183287][T26873] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.198801][T26892] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.246979][T26892] netlink: 'syz.0.6594': attribute type 1 has an invalid length. [ 422.288614][T26936] loop3: detected capacity change from 0 to 1024 [ 422.370848][T26936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.401016][T26936] netlink: 'syz.3.6600': attribute type 7 has an invalid length. [ 422.533477][T26963] netlink: 'syz.7.6607': attribute type 10 has an invalid length. [ 422.554710][T26963] siw: device registration error -23 [ 422.739663][T26953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.774450][ T4163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.834083][ T4163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.881704][ T4163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.955589][ T4163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.980680][T27008] 9pnet_fd: Insufficient options for proto=fd [ 422.984033][T27012] loop8: detected capacity change from 0 to 512 [ 423.011288][T27012] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 423.045179][T27012] EXT4-fs (loop8): orphan cleanup on readonly fs [ 423.062863][ T4163] bridge_slave_1: left allmulticast mode [ 423.065751][T27021] loop7: detected capacity change from 0 to 512 [ 423.068926][ T4163] bridge_slave_1: left promiscuous mode [ 423.080765][T27021] EXT4-fs: Ignoring removed i_version option [ 423.081099][ T4163] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.094070][T27021] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.6615: corrupted in-inode xattr: overlapping e_value [ 423.110296][T27021] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6615: couldn't read orphan inode 15 (err -117) [ 423.124114][T27012] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.6616: corrupted inode contents [ 423.138169][T27021] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.152402][ T4163] bridge_slave_0: left allmulticast mode [ 423.158099][ T4163] bridge_slave_0: left promiscuous mode [ 423.159998][T27012] EXT4-fs (loop8): Remounting filesystem read-only [ 423.163925][ T4163] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.181924][T27025] __nla_validate_parse: 11 callbacks suppressed [ 423.182013][T27025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6617'. [ 423.210802][T27012] EXT4-fs (loop8): 1 truncate cleaned up [ 423.228235][T11824] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 423.239010][T11824] Quota error (device loop8): write_blk: dquota write failed [ 423.246420][T11824] Quota error (device loop8): remove_free_dqentry: Can't write block (5) with free entries [ 423.256753][T11824] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 423.267476][T11824] Quota error (device loop8): write_blk: dquota write failed [ 423.275014][T11824] Quota error (device loop8): free_dqentry: Can't move quota data block (5) to free list [ 423.286104][T11824] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 423.301679][T27021] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.312678][T27012] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 423.365556][T27021] netlink: 'syz.7.6615': attribute type 1 has an invalid length. [ 423.377444][T27012] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.550630][ T4163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.570834][ T4163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.581145][T27061] loop8: detected capacity change from 0 to 1024 [ 423.588552][T27061] EXT4-fs: Ignoring removed nobh option [ 423.594313][T27061] EXT4-fs: Ignoring removed bh option [ 423.602063][ T4163] bond0 (unregistering): (slave team0): Releasing backup interface [ 423.611140][ T4163] bond0 (unregistering): Released all slaves [ 423.620302][ T4163] bond1 (unregistering): Released all slaves [ 423.627460][T27061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.686713][T27071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6630'. [ 423.696527][ T4163] hsr_slave_0: left promiscuous mode [ 423.705081][T27071] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6630'. [ 423.718969][ T4163] hsr_slave_1: left promiscuous mode [ 423.725452][ T4163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.726182][T27071] loop7: detected capacity change from 0 to 164 [ 423.732919][ T4163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.755025][T27071] syz.7.6630: attempt to access beyond end of device [ 423.755025][T27071] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 423.771937][ T4163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.779426][ T4163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.781340][T27071] syz.7.6630: attempt to access beyond end of device [ 423.781340][T27071] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 423.804729][T27071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6630'. [ 423.814146][ T4163] veth1_macvtap: left promiscuous mode [ 423.821179][ T4163] veth0_macvtap: left promiscuous mode [ 423.841556][ T4163] veth1_vlan: left promiscuous mode [ 423.847163][ T4163] veth0_vlan: left promiscuous mode [ 423.987852][ T4163] team0 (unregistering): Port device team_slave_1 removed [ 424.002657][ T4163] team0 (unregistering): Port device team_slave_0 removed [ 424.243634][T26998] chnl_net:caif_netlink_parms(): no params data found [ 424.305747][T27120] loop7: detected capacity change from 0 to 512 [ 424.322297][T27120] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 424.342501][T26998] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.345060][T27120] EXT4-fs (loop7): orphan cleanup on readonly fs [ 424.349651][T26998] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.383851][T27120] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6637: corrupted inode contents [ 424.397609][T27120] EXT4-fs (loop7): Remounting filesystem read-only [ 424.404279][T26998] bridge_slave_0: entered allmulticast mode [ 424.404780][T27120] EXT4-fs (loop7): 1 truncate cleaned up [ 424.416224][T11780] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 424.426880][T11780] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 424.431633][T26998] bridge_slave_0: entered promiscuous mode [ 424.445505][T26998] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.452946][T26998] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.475926][T11780] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 424.486659][T27120] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 424.491340][T26998] bridge_slave_1: entered allmulticast mode [ 424.543235][T26998] bridge_slave_1: entered promiscuous mode [ 424.631673][T26998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.655778][T26998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.722577][T27153] loop0: detected capacity change from 0 to 1024 [ 424.749967][T27153] EXT4-fs: Ignoring removed nobh option [ 424.755609][T27153] EXT4-fs: Ignoring removed bh option [ 424.781519][T26998] team0: Port device team_slave_0 added [ 424.816694][T27161] netlink: 'syz.7.6647': attribute type 298 has an invalid length. [ 424.826691][T26998] team0: Port device team_slave_1 added [ 424.948162][T26998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.955217][T26998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.981394][T26998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.049237][T26998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.056338][T26998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.083417][T26998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.150131][T26998] hsr_slave_0: entered promiscuous mode [ 425.157071][T26998] hsr_slave_1: entered promiscuous mode [ 425.163839][T26998] debugfs: 'hsr0' already exists in 'hsr' [ 425.169710][T26998] Cannot create hsr debugfs directory [ 425.316009][T27190] loop8: detected capacity change from 0 to 512 [ 425.350370][T27190] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 425.385736][T27190] EXT4-fs (loop8): orphan cleanup on readonly fs [ 425.411958][T27190] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.6657: corrupted inode contents [ 425.446418][T27190] EXT4-fs (loop8): Remounting filesystem read-only [ 425.453531][T27190] EXT4-fs (loop8): 1 truncate cleaned up [ 425.474519][T11780] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 425.485241][T11780] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 425.502119][T26998] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 425.509479][T11780] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 425.521755][T26998] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 425.538470][T26998] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 425.570273][T26998] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 426.003063][T27246] netlink: 'syz.0.6667': attribute type 6 has an invalid length. [ 426.073453][T26998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.105002][T26998] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.140782][ T4163] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.147921][ T4163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.160925][T27259] loop8: detected capacity change from 0 to 512 [ 426.189508][T27267] netlink: 'syz.0.6673': attribute type 10 has an invalid length. [ 426.200148][T27259] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 426.208055][ T4163] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.215459][ T4163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.222109][T27259] EXT4-fs (loop8): orphan cleanup on readonly fs [ 426.235483][T27259] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.6670: corrupted inode contents [ 426.249561][T27271] siw: device registration error -23 [ 426.254952][T27259] EXT4-fs (loop8): Remounting filesystem read-only [ 426.264019][T27259] EXT4-fs (loop8): 1 truncate cleaned up [ 426.270695][ T4163] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 426.281828][ T4163] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 426.306652][T27272] netlink: 'syz.7.6671': attribute type 298 has an invalid length. [ 426.346878][ T4163] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 426.436676][T26998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.819108][T26998] veth0_vlan: entered promiscuous mode [ 426.827158][T26998] veth1_vlan: entered promiscuous mode [ 426.840332][T26998] veth0_macvtap: entered promiscuous mode [ 426.848146][T26998] veth1_macvtap: entered promiscuous mode [ 426.859003][T26998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.867910][T26998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.929603][ T4163] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.053091][T27357] loop9: detected capacity change from 0 to 512 [ 427.249581][ T4163] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.275027][T27357] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 427.297930][ T4163] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.303162][T27379] 9pnet_fd: Insufficient options for proto=fd [ 427.314107][ T4163] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.328482][T27357] EXT4-fs (loop9): orphan cleanup on readonly fs [ 427.341158][T27357] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6690: corrupted inode contents [ 427.354564][T27357] EXT4-fs (loop9): Remounting filesystem read-only [ 427.364153][T27357] EXT4-fs (loop9): 1 truncate cleaned up [ 427.380294][T11811] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 427.391247][T11811] __quota_error: 90 callbacks suppressed [ 427.391266][T11811] Quota error (device loop9): write_blk: dquota write failed [ 427.404653][T11811] Quota error (device loop9): remove_free_dqentry: Can't write block (5) with free entries [ 427.414732][T11811] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 427.425527][T11811] Quota error (device loop9): write_blk: dquota write failed [ 427.433101][T11811] Quota error (device loop9): free_dqentry: Can't move quota data block (5) to free list [ 427.456647][T27379] netlink: 'syz.1.6693': attribute type 1 has an invalid length. [ 427.482704][T27396] loop7: detected capacity change from 0 to 1024 [ 427.499509][T11811] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 427.509900][T11811] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 427.520124][T11811] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 427.554992][T27384] netlink: 'syz.7.6694': attribute type 6 has an invalid length. [ 427.718505][T27425] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6704'. [ 427.730819][T27425] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6704'. [ 427.787032][T27437] 9pnet_fd: Insufficient options for proto=fd [ 427.837212][T27442] loop7: detected capacity change from 0 to 1024 [ 427.869459][T27442] EXT4-fs: Ignoring removed nobh option [ 427.875090][T27442] EXT4-fs: Ignoring removed bh option [ 427.882255][T27448] loop9: detected capacity change from 0 to 512 [ 427.893824][T27437] loop8: detected capacity change from 0 to 512 [ 427.922114][T27448] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 427.924386][T27437] EXT4-fs: Ignoring removed i_version option [ 427.942675][T27448] EXT4-fs (loop9): orphan cleanup on readonly fs [ 427.959946][T27437] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.6708: corrupted in-inode xattr: overlapping e_value [ 427.974634][T27448] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6711: corrupted inode contents [ 428.003802][T27448] EXT4-fs (loop9): Remounting filesystem read-only [ 428.005650][T27437] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.6708: couldn't read orphan inode 15 (err -117) [ 428.013232][T27448] EXT4-fs (loop9): 1 truncate cleaned up [ 428.029303][T11771] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 428.040170][T11771] Quota error (device loop9): write_blk: dquota write failed [ 428.047837][T11771] Quota error (device loop9): remove_free_dqentry: Can't write block (5) with free entries [ 428.058089][T11771] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 428.069031][T11771] Quota error (device loop9): write_blk: dquota write failed [ 428.076479][T11771] Quota error (device loop9): free_dqentry: Can't move quota data block (5) to free list [ 428.086515][T11771] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 428.120853][T27437] netlink: 'syz.8.6708': attribute type 1 has an invalid length. [ 428.408087][T27493] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6719'. [ 428.421176][T27493] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6719'. [ 428.477785][T27502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6722'. [ 428.777687][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6731'. [ 428.810308][T27536] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6732'. [ 428.810507][T27532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6731'. [ 428.830991][T27536] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6732'. [ 428.833553][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6731'. [ 429.104940][T27576] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6746'. [ 429.136747][T27576] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6746'. [ 429.307976][T27598] netlink: 'syz.7.6748': attribute type 298 has an invalid length. [ 429.562868][T27622] loop8: detected capacity change from 0 to 128 [ 429.814377][T27662] netlink: 'syz.9.6761': attribute type 10 has an invalid length. [ 429.827508][T27662] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.837940][T27662] bond0: (slave team0): Enslaving as an active interface with an up link [ 429.846790][T27666] loop8: detected capacity change from 0 to 1024 [ 429.850530][T27662] siw: device registration error -23 [ 429.878389][T27666] netlink: 'syz.8.6759': attribute type 7 has an invalid length. [ 430.002426][T27687] netlink: 'syz.9.6765': attribute type 1 has an invalid length. [ 430.181477][T27710] loop9: detected capacity change from 0 to 512 [ 430.253097][T27710] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 430.271874][T27710] EXT4-fs (loop9): orphan cleanup on readonly fs [ 430.299046][T27710] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6768: corrupted inode contents [ 430.314994][T27710] EXT4-fs (loop9): Remounting filesystem read-only [ 430.322170][T27710] EXT4-fs (loop9): 1 truncate cleaned up [ 430.328436][T11824] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 430.339352][T11824] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 430.370028][T11824] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 430.527820][T11811] bridge_slave_1: left allmulticast mode [ 430.533809][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.567704][T11811] bridge_slave_0: left allmulticast mode [ 430.573611][T11811] bridge_slave_0: left promiscuous mode [ 430.579430][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.647672][T27755] 9pnet_fd: Insufficient options for proto=fd [ 430.741727][T11811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.754423][T27773] netlink: 'syz.7.6780': attribute type 1 has an invalid length. [ 430.771139][T11811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.796478][T11811] bond0 (unregistering): (slave team0): Releasing backup interface [ 430.813577][T11811] bond0 (unregistering): Released all slaves [ 430.846607][T27761] netlink: 'syz.0.6777': attribute type 298 has an invalid length. [ 430.893285][T11811] hsr_slave_0: left promiscuous mode [ 430.901090][T11811] hsr_slave_1: left promiscuous mode [ 430.911544][T11811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.920032][T11811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.993765][T11811] team0 (unregistering): Port device team_slave_1 removed [ 431.017553][T27804] loop9: detected capacity change from 0 to 1024 [ 431.025080][T11811] team0 (unregistering): Port device team_slave_0 removed [ 431.034513][T27804] EXT4-fs: Ignoring removed nobh option [ 431.040396][T27804] EXT4-fs: Ignoring removed bh option [ 431.139742][T27691] chnl_net:caif_netlink_parms(): no params data found [ 431.256016][T27691] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.263339][T27691] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.287864][T27691] bridge_slave_0: entered allmulticast mode [ 431.294768][T27691] bridge_slave_0: entered promiscuous mode [ 431.318530][T27691] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.325746][T27691] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.346713][T27691] bridge_slave_1: entered allmulticast mode [ 431.353942][T27691] bridge_slave_1: entered promiscuous mode [ 431.394809][T27691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.437323][T27691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.493659][T27691] team0: Port device team_slave_0 added [ 431.514724][T27691] team0: Port device team_slave_1 added [ 431.549509][T27726] chnl_net:caif_netlink_parms(): no params data found [ 431.588916][T27691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.596364][T27691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.624351][T27691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.636246][T27691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.643674][T27691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.670500][T27691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.757577][T27726] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.765102][T27726] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.796094][T27726] bridge_slave_0: entered allmulticast mode [ 431.809756][T27726] bridge_slave_0: entered promiscuous mode [ 431.835359][T11811] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.871044][T27726] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.878723][T27726] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.900456][T27726] bridge_slave_1: entered allmulticast mode [ 431.916655][T27726] bridge_slave_1: entered promiscuous mode [ 431.976232][T27691] hsr_slave_0: entered promiscuous mode [ 431.991756][T27691] hsr_slave_1: entered promiscuous mode [ 432.030857][T11811] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.061681][T27887] netlink: 'syz.7.6799': attribute type 1 has an invalid length. [ 432.099247][T27887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.134606][T11811] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.147853][T27726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.184858][T27726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.224120][T11811] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.262360][T27909] netlink: 'syz.0.6803': attribute type 10 has an invalid length. [ 432.315965][T27726] team0: Port device team_slave_0 added [ 432.324911][T27726] team0: Port device team_slave_1 added [ 432.370858][T27726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.372447][T27909] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 432.378009][T27726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.412291][T27726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.448913][T27726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.456156][T27726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.483490][T27726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.581237][T27726] hsr_slave_0: entered promiscuous mode [ 432.587684][T27726] hsr_slave_1: entered promiscuous mode [ 432.602031][T27726] debugfs: 'hsr0' already exists in 'hsr' [ 432.608084][T27726] Cannot create hsr debugfs directory [ 432.676215][T11811] bridge_slave_1: left allmulticast mode [ 432.682127][T11811] bridge_slave_1: left promiscuous mode [ 432.688019][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.716177][T11811] bridge_slave_0: left allmulticast mode [ 432.722028][T11811] bridge_slave_0: left promiscuous mode [ 432.728041][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.833233][T27956] loop9: detected capacity change from 0 to 1024 [ 432.850841][T11811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.861072][T27956] netlink: 'syz.9.6815': attribute type 7 has an invalid length. [ 432.871878][T11811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.882362][T11811] bond0 (unregistering): (slave team0): Releasing backup interface [ 432.891745][T11811] bond0 (unregistering): Released all slaves [ 432.900702][T11811] bond1 (unregistering): Released all slaves [ 432.950409][T11811] hsr_slave_0: left promiscuous mode [ 432.958552][T11811] hsr_slave_1: left promiscuous mode [ 432.964385][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.972601][T11811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.982255][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.990226][T11811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.046802][T11811] veth1_macvtap: left promiscuous mode [ 433.067077][T11811] veth0_macvtap: left promiscuous mode [ 433.073063][T11811] veth1_vlan: left promiscuous mode [ 433.089643][T11811] veth0_vlan: left promiscuous mode [ 433.194232][T11811] team0 (unregistering): Port device team_slave_1 removed [ 433.207562][T11811] team0 (unregistering): Port device team_slave_0 removed [ 433.416207][T27691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 433.432313][T27691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 433.449802][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 433.449906][ T29] audit: type=1107 audit(433.420:10495): pid=28014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 433.449906][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 433.451079][T27691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 433.512603][T27691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 433.726922][T27691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.752986][T27691] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.779091][T11807] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.786305][T11807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.823821][T11807] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.831011][T11807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.926024][T27726] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 433.943073][T28070] 9pnet_fd: Insufficient options for proto=fd [ 433.954870][T27726] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.985995][T27726] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 434.013649][T27726] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 434.028113][T28084] loop7: detected capacity change from 0 to 512 [ 434.049747][T28084] EXT4-fs: Ignoring removed i_version option [ 434.070351][T28084] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.6841: corrupted in-inode xattr: overlapping e_value [ 434.081819][T27691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.108156][T28084] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6841: couldn't read orphan inode 15 (err -117) [ 434.137530][T28070] netlink: 'syz.7.6841': attribute type 1 has an invalid length. [ 434.149610][T27726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.191180][T27726] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.222868][T11824] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.230239][T11824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.272891][T11824] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.280061][T11824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.369177][T27691] veth0_vlan: entered promiscuous mode [ 434.391823][T27691] veth1_vlan: entered promiscuous mode [ 434.428037][T27691] veth0_macvtap: entered promiscuous mode [ 434.451316][T27691] veth1_macvtap: entered promiscuous mode [ 434.462179][T28131] loop0: detected capacity change from 0 to 1024 [ 434.477627][T27691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.494503][T27691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.512147][T27726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.524839][T28131] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.6852: lblock 0 mapped to illegal pblock 0 (length 1) [ 434.543570][T11780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.555795][T28131] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 434.568769][T28131] EXT4-fs (loop0): This should not happen!! Data will be lost [ 434.568769][T28131] [ 434.573026][T11780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.580377][T28131] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.6852: lblock 0 mapped to illegal pblock 0 (length 1) [ 434.595314][T28140] 9pnet_fd: Insufficient options for proto=fd [ 434.604455][T28131] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 434.618890][T11780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.620977][T28131] EXT4-fs (loop0): This should not happen!! Data will be lost [ 434.620977][T28131] [ 434.678409][T11807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.709922][T28149] loop7: detected capacity change from 0 to 512 [ 434.716848][T28149] EXT4-fs: Ignoring removed i_version option [ 434.755189][T28149] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.6854: corrupted in-inode xattr: overlapping e_value [ 434.821989][T28149] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.6854: couldn't read orphan inode 15 (err -117) [ 434.857596][T28140] netlink: 'syz.7.6854': attribute type 1 has an invalid length. [ 434.960139][T28177] loop9: detected capacity change from 0 to 128 [ 435.005799][T28181] __nla_validate_parse: 2 callbacks suppressed [ 435.005896][T28181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6865'. [ 435.009144][T28177] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.9.6863: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 435.031826][T27726] veth0_vlan: entered promiscuous mode [ 435.052667][T28181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6865'. [ 435.064843][T27726] veth1_vlan: entered promiscuous mode [ 435.090941][T27726] veth0_macvtap: entered promiscuous mode [ 435.105707][T28177] EXT4-fs (loop9): Remounting filesystem read-only [ 435.115412][T27726] veth1_macvtap: entered promiscuous mode [ 435.137701][T27726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.173990][T27726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.207707][T11786] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.250915][T11786] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.277526][T11786] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.333730][T11786] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.383973][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6877'. [ 435.418499][ T29] audit: type=1107 audit(435.380:10496): pid=28222 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 435.418499][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 435.453234][T28221] loop7: detected capacity change from 0 to 164 [ 435.471321][T28221] syz.7.6877: attempt to access beyond end of device [ 435.471321][T28221] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 435.544486][T28221] syz.7.6877: attempt to access beyond end of device [ 435.544486][T28221] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 435.609271][T28239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6877'. [ 435.770726][T28255] 9pnet_fd: Insufficient options for proto=fd [ 435.790725][T28260] loop6: detected capacity change from 0 to 128 [ 435.800381][T28260] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 435.876290][T28274] loop0: detected capacity change from 0 to 512 [ 435.912529][T28274] EXT4-fs: Ignoring removed i_version option [ 435.966737][T28274] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.6888: corrupted in-inode xattr: overlapping e_value [ 435.983786][T28283] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6896'. [ 435.997491][T28283] loop7: detected capacity change from 0 to 164 [ 436.010959][T28274] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.6888: couldn't read orphan inode 15 (err -117) [ 436.064275][T28283] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6896'. [ 436.092543][T28255] netlink: 'syz.0.6888': attribute type 1 has an invalid length. [ 436.243851][T28314] netlink: 'syz.7.6904': attribute type 10 has an invalid length. [ 436.268874][T28314] siw: device registration error -23 [ 436.547093][ T29] audit: type=1107 audit(436.510:10497): pid=28335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='xtkWÈxDژA q#/"߿F&@ l=i7X/'}dR>w&7HkN}QJd0$r^T[ByFwn % [ 436.547093][ T29] Y@(&@jbvjhܚ,Ø9|DJle|˨oIq3.TAtFH}' [ 436.728422][ T3352] ================================================================== [ 436.736932][ T3352] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 436.744085][ T3352] [ 436.746447][ T3352] read-write to 0xffff888237c29d64 of 4 bytes by task 3413 on cpu 0: [ 436.754844][ T3352] wq_worker_running+0x95/0x120 [ 436.759979][ T3352] schedule_timeout+0xb7/0x170 [ 436.764779][ T3352] msleep+0x50/0x90 [ 436.768875][ T3352] nsim_fib_event_work+0x1ebc/0x21a0 [ 436.774182][ T3352] process_scheduled_works+0x4ce/0x9d0 [ 436.780096][ T3352] worker_thread+0x582/0x770 [ 436.785063][ T3352] kthread+0x486/0x510 [ 436.789158][ T3352] ret_from_fork+0xda/0x150 [ 436.793762][ T3352] ret_from_fork_asm+0x1a/0x30 [ 436.798624][ T3352] [ 436.800955][ T3352] read to 0xffff888237c29d64 of 4 bytes by task 3352 on cpu 1: [ 436.808496][ T3352] kick_pool+0x49/0x2d0 [ 436.812827][ T3352] __queue_work+0x8cb/0xb50 [ 436.817510][ T3352] queue_work_on+0xd1/0x160 [ 436.822040][ T3352] process_srcu+0x999/0xbc0 [ 436.826758][ T3352] process_scheduled_works+0x4ce/0x9d0 [ 436.832246][ T3352] worker_thread+0x582/0x770 [ 436.836958][ T3352] kthread+0x486/0x510 [ 436.841216][ T3352] ret_from_fork+0xda/0x150 [ 436.845767][ T3352] ret_from_fork_asm+0x1a/0x30 [ 436.850727][ T3352] [ 436.853143][ T3352] value changed: 0x00000000 -> 0x00000001 [ 436.858881][ T3352] [ 436.861216][ T3352] Reported by Kernel Concurrency Sanitizer on: [ 436.867593][ T3352] CPU: 1 UID: 0 PID: 3352 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 436.877499][ T3352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 436.887775][ T3352] Workqueue: rcu_gp process_srcu [ 436.893178][ T3352] ==================================================================