last executing test programs: 3.525855206s ago: executing program 3 (id=294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @multicast2}, {0x20, @local}, 0x2, {0x2, 0x4e23, @multicast1}, 'wg1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b0, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r12, &(0x7f0000000100)={0x0, 0x10}) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40, 0x1}) io_uring_enter(r9, 0x627, 0xc1040000, 0x43, 0x0, 0x0) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@fwd={0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x2}}, @float={0x2, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x61, 0x5f, 0x53b90a3edabcfc3e, 0x5f]}}, &(0x7f00000002c0)=""/125, 0x4f, 0x7d}, 0x28) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r14, 0x0, 0x5d6c}, 0x18) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) 3.525205646s ago: executing program 0 (id=304): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) syz_emit_ethernet(0x48, &(0x7f00000004c0)={@multicast, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x12, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xff}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, [{0x22}]}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r7, 0x80605414, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x7, 0x0, &(0x7f0000000a80)="b8000005000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) 3.136379347s ago: executing program 3 (id=299): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080)=0x0, &(0x7f0000000000)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x38, r9, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x5c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x44854}, 0x80) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x0) r15 = dup(r5) ioctl$TIOCL_SETSEL(r15, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x14, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x12, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) 2.809812633s ago: executing program 3 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='cachefiles_ondemand_cread\x00', r1, 0x0, 0x15}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0, 0x40000000, 0x1}) r7 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000001811000023b97f340b1d112e8c39d8d2735995588717779cea97ae3a95edd15af64a91f0465a8ebac3999ce336f3e82bd988270d9e851bea3194405ea69a4d003c00e1ddf2daeba7200eabd5b8218a96504a6b77bad272e804a7881fb90f88cd556fe2f27b0c6022bcfb936d4598d2842cc59c7b375031ed7498593f09b672851fbf325ace634100"/151, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x18}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r10, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.365234999s ago: executing program 0 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0xfffffffd) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x100, 0xc}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r9, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = syz_open_procfs(r8, 0x0) ioctl$sock_SIOCSIFBR(r10, 0x8941, &(0x7f0000000600)=@get={0x1, 0x0, 0x8}) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) 2.23605343s ago: executing program 1 (id=309): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000002200000000180100002020692500000d60c5b919e70a29000000bfa19ae01bd9f900000000000007010000f8ffffffb70202000000000000000000100000008500000006800000952283f02e2edc7429a904513474e6f2db36cb2e6c3a4fd929541300"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x23, 0x0, &(0x7f0000000080)=0x69) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) close(r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000c85000)={0x8000200d}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000180)={0x40002000}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000980)={0x0, 0x200, 0x0, 0x400}, &(0x7f00000009c0)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000a00)={r8, 0x800, 0xe2e, 0x4, 0xd5, 0x3}, 0x14) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x43bf}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x6aae}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x3}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x4}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r9 = dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) sendmsg$nl_generic(r9, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)={0x1ec, 0x36, 0x2, 0x70bd2b, 0x25dfdbfe, {0x5}, [@nested={0xc3, 0x69, 0x0, 0x1, [@nested={0x4, 0xd5}, @generic="0e7d65db879dc2058f152819f6ca992f45c589d7f440e83652e2cb80c439b9131eaaf2efca3f5ad9003bc07d6aa869a00e46c360aa7b01133bf7e854c89529b622ade023ec48c1", @typed={0x4, 0x149}, @typed={0x4, 0xcb}, @generic="41eba63b914772b82b7bb78640a7cc0d89cdef9b55975a69f5a7cdb17be306f4418953997fb8f154db40694054e25d216c9063dcbc678947edc76fa9672338b048a306962d8c2922d31647133c76681a14ebb6a193332529d12c59c949a5eeedcf49f39aa330a421ee35b3c9"]}, @generic="220c3f2cc210c9a0c00c3c67c605e76ac0a9c911b24ba714452f3b70a2bf1ac22c0e529ce0db114958cb1f8dc8135f3ea256428915449894712722dee5c5cc114f5de961151567d2916297418eea6106a01c2578d79b840a3d63111276119395188c4787a1a19b5ba8334c36159c32e74bcde9a4245054c64b98d76bc9ec482ae43873fdc37282d95566ea5f1f2dafeb83bce380186939e7b283c0755768515b4e82a26eb0cecc21dcf7822a6b774bc1002748b6136431635ed224ff431ea88013259f411362dc19787552de1a3fb1cb8bc9454bc8f6ead1665adc338c1e04b78ebc879c10d9d53c8f6e67a181cf", @nested={0x4}, @generic="f137e093195d79fc50acc0010169c0f772570916c93b6d8ea367ca58cec2c0d51d74"]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='kfree\x00', r10, 0x0, 0x3}, 0x18) r11 = socket$kcm(0xa, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @var={0x1, 0x0, 0x0, 0xe, 0x1}]}}, 0x0, 0x42}, 0x28) 2.23556539s ago: executing program 4 (id=310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000014c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x43642e115bd44d50}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000004c0)={@empty, 0x0}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES16=r0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r4, @ANYRESDEC=r0, @ANYRES8=0x0, @ANYRESDEC=r11], 0xb4}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)={0x2d0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1d}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5e15, 0x3, 0x4, 0x80}, {0x2, 0x4, 0x2, 0x1}, {0x2, 0x9, 0x8f, 0x80}, {0x40, 0xc, 0x7, 0x8}, {0x401, 0x49, 0x3, 0x1}, {0xfefe, 0x80, 0xe4, 0x2}, {0x2, 0x7, 0x4, 0xffffffff}]}}}]}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0xc4}, 0x24044004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r12, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000540)='vegas\x00', 0x6) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2.197475663s ago: executing program 1 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x1d6}, 0x18) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="37030000000000000000000057763070de86717fd750779d4165108f328031fb", @ANYRESHEX=r5, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_create1(0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r6) 1.917376475s ago: executing program 3 (id=313): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0xf, 0x2a4, &(0x7f0000000180)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8080c61) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x9) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffffffffffffff) ioctl$BLKSECTGET(r3, 0x1267, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r9}, 0x18) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r10}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)={0x98, 0x9, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'ext4\x00'}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x48004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x18) 1.760377578s ago: executing program 1 (id=315): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080)=0x0, &(0x7f0000000000)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x38, r9, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x5c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x44854}, 0x80) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x0) r15 = dup(r5) ioctl$TIOCL_SETSEL(r15, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x14, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x12, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) 1.757593078s ago: executing program 2 (id=316): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x12, 0x200, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) dup2(r1, r0) r5 = socket$qrtr(0x2a, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bind$tipc(r6, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f00000004c0)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x1}}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000300)="2b94b46e751b52b5c9bc1e6fa253ccfe79408225e84dcf33524adb70caa7e1fbdc21298b08e93795bc4d7a619b3eecac0ab2e618276fc58aeda4f41e698b3b0570f6b910815fcd209d34e5ca4989874fd2157dfb9812a2bba99355817faea751ce1d43d462b07c5e0eb28ccae2dbd47a3c767c95259f3e5e9f6c4cb148efe819a15069bfafd97ede04214ff2bb4db9c97f49b5df64e80f709baec0cb1f0175815c2d589fddb568362127ed317c3e0ea536", 0xb1}, {&(0x7f00000006c0)="ed85b3fe856953e3c8f023ec194b3d185ea7a8e2969ecdfba53059a63e6b92573cc53a255f8ed4697f439cb93859b5622b4b7dddcdf7a880b9194296496c5d4fe992b2fb19bd1ee0c36ae355ea674ae3ebc0eb6064414e02ed929fafd5281dc432131859a6e9280efe0e481ae7c51cf504b17aefb099d86ef6ccf75e257dd0f4c4cb320627d8879493b946a1e861dae2ea912dcb50ef4d6aca7334f285d77a8b46156242091773503f464be86b6ba74e823f0c058e14ddb38c26fb3e2799c2427a9c79ab006bd7f977802cf25a75944743", 0xd1}, {&(0x7f00000007c0)="fc9e35d94a21fa238dbf94c4bcfc4fce8504f1f9736dc46f4250d7d02d907dbc922af0f0b0a7e68514ded4b8e5a9632fd1f09240a51b856ad693b51578b10fd2a22f21d17372ad222b2fb1f0bd89bf081dd118d62523f6c58a0973cc505eb1f02f66e1ec4ada329d51442fd28e920802017466e0aa5afc9ddef7689b5a54086e7afc137d5ccc357473a4b20054ee1562a633c341dab5f2f02850155b71c85da5b286536142b1e5c1e8701f9a9036", 0xae}, {&(0x7f00000003c0)="458cb74ef0a42b2e227a1c4f024ec1d2fecbac26fe6d9586214cfdb4ac1141ea682286644f2560863945efa798ca2cfe278715a30c44c428ed90909c52735e4f6a85a85b6d22d75f5124ca2cb23236f87acc7237642c36a5418ebcb6089417", 0x5f}, {&(0x7f0000000880)="9f6486266a1a46d015238a1dec036bce3b83fabc9684bf4c70e3d04c274fe7ac709e57f9b4a257b33768620772e15eba751c7a96c1e15328dbb4b60faf3fefe069c05b8c4f7394ef61ca3c68c42a6dc3d424dfed760f3fe8d7b45fcf4d9ff03200edbf5c8fcaaae40c88f7c8292aefa6e21eb9ff33e951c956200d538ed8cee0db6d80b84ec0b1bc11a8fcd0ac00742e6971335c305cbaa75120acedbd3486efd3a4df6b1d1b9dd24ae50e13bd8f07c645d09086ee988b7264af01fe67", 0xbd}, {&(0x7f0000000ac0)="8e16095457fcd10437bea00d7583396a0f1804fffb89a4fd7702bff2711527358624ec262b8a44e39542164123f827d87c7452cc48543046e9965eb95a0e800e602b7e0515988024794ee4d4e507a05b87139978ac4294d2162b86cc260477bb0d81cee328012c0ecfafefd5da3c2d9b38979996214e659a2dd4e20d08ddb85832f5486cf137759a6ce4de640c4d74c82b8abb7f190f0758ab5e190beec81c673741e84e30c7e6101668321b627890e0e3a8d445706d9f63cab5eb269a1abd2f4bfea423d6c79e67410730e0f5bdfaa0534e1ba3e47e71a27a9a6805ee7e19", 0xdf}, {&(0x7f0000000bc0)="68f9e639d087f7b0d29d1d23157339add77cbc624a6f61dcee101532f5e770a0cd2e65e50127ccb8b8707964926d3c5b4b7ec8fbafd25926d403b3a9477b45c40bf5274b9e006f406065a4f7698878370aae0e9ba9de74cc31afa06985de266c197efa6bcf4d95ebe4208b58da2c355e98138c36e47dd8255f25bf4d2927c0d739f9ffe5878479aff6b2cb4e8c", 0x8d}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000200)="97a8a140f742d5ac34feb938c99782ae1152f9546cc3cdba779aec40839e69699a737df39a1558d0510fe16b", 0x2c}, {&(0x7f0000000280)="051040646ce092a89afb82aeb5c01c49b0e1fe645ab0373e1fcbb4f12482b561d74247ea86e46b", 0x27}], 0xa, 0x0, 0x0, 0x20000000}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) 1.744122159s ago: executing program 4 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf09000000bacd6eb88a0055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sync() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000880)='sys_enter\x00', r3}, 0x18) iopl(0x3) r4 = syz_open_dev$hiddev(&(0x7f0000000400), 0xc, 0x5c900) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x3) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r8, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES64=r8, @ANYRESOCT, @ANYRES16, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="020003", @ANYRES64, @ANYBLOB="0200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYRESDEC=r9, @ANYRESOCT, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES32], 0x94, 0x1) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf250200000005000400010000001400020073797a5f74756e000000000000000000140002000000dd640000040200000001000000000900030073797a31000000000900010073797a300000000005000400010000000900010073797a3100000000"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4001) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7766646eb9bb", @ANYRESHEX=r5, @ANYBLOB=',access=any,version=9p2000.L,fowner>', @ANYRESDEC=r9, @ANYBLOB=',\x00']) close(r5) r11 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r11, 0x3a, 0x1, 0x0, &(0x7f0000000100)) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r7) sendmsg$TIPC_CMD_SHOW_STATS(r10, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r12, 0x10, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008000) 1.717604612s ago: executing program 2 (id=319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0xe0, 0x30, 0x1, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ife={0x80, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x4c, 0x6, "715223828bc22379c555b64007d0ce53e23fa639b671eed3bad31d6a9a090db9ec35733a528c1a4f9720287904d7841da90f32dc9569b269592414ca783d52760682480aba308b30"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}}, 0x4010) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b", @ANYRESDEC=r6, @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000680)='kmem_cache_free\x00', r1, 0x0, 0x2000000000000}, 0xffffff5b) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) socket$inet6(0xa, 0x2, 0x3a) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r13}, 0xc) 1.635345718s ago: executing program 4 (id=320): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) syz_emit_ethernet(0x3b1, &(0x7f00000004c0)={@multicast, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x37b, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xff}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, [{0x18, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23a5026e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafa40845f90b6dfc87c6905bbc94d33e4575c853105f543e8e8a8a73b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fd020000000000006ae88c001a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbfeb532188b1"}, {0x22, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7fffffff}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r7, 0x80605414, &(0x7f0000010340)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) 1.4894646s ago: executing program 0 (id=321): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r2, 0x0, 0xeffd) r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='rxrpc_tx_data\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r7, 0x0, 0x3}, 0x18) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000400)={'ip6tnl0\x00', 0x0, 0x4, 0xa, 0x8, 0x9, 0x40, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x20, 0xf2, 0xcc}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x52, 0x2, 0x9, 0x4, 0x20, @loopback, @loopback, 0x7800, 0x80, 0xc2, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00'}) 1.48857099s ago: executing program 1 (id=331): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080)=0x0, &(0x7f0000000000)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x38, r9, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x6, 0x5c}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x44854}, 0x80) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x0) r15 = dup(r5) ioctl$TIOCL_SETSEL(r15, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x14, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x12, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20) 1.028649547s ago: executing program 3 (id=322): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0xe264}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 1.027887797s ago: executing program 0 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r5}, 0x18) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x0) faccessat2(r10, &(0x7f0000000040)='\x00', 0x2, 0x1200) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f00000003c0)={0x0, &(0x7f0000000380)}, 0x10) r11 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r12, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, 0x0, 0x18) setsockopt$bt_hci_HCI_FILTER(r11, 0x0, 0x2, &(0x7f0000000340)={0x9, [0x81, 0x44], 0x9}, 0x10) r13 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r2) sendmsg$SMC_PNETID_DEL(r10, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000227bd7000fedbdf25030000000917030073797a31000000001400020070696d36726567300000000000000000090003007379d06c166b09aac08cddfd2f44416cf5d318ff7a31000000000500040001000000"], 0x48}, 0x1, 0x0, 0x0, 0x41040}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010022bdf000fcdbdf251000000008000300", @ANYRES32=r7, @ANYBLOB="08000604", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f00000000c0)=ANY=[], 0x21, 0x58a, &(0x7f0000000700)="$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") 1.027552277s ago: executing program 1 (id=323): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x10001}, 0x18) mbind(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4005, &(0x7f0000000c00)=0xb, 0x9, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/174, 0xae, 0x1, &(0x7f0000000040)=""/17, 0x11}, &(0x7f0000000100)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) close(r6) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f0000000380)={0x10000008}) 1.027271927s ago: executing program 2 (id=324): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x6}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x0, 0x0, 0x40, 0x0, 0x8, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) unshare(0x2040600) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r2, 0x3) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r3, 0x0, 0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000240)) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, &(0x7f00000002c0), {0x39}, &(0x7f0000000300)=""/37, 0x25, &(0x7f00000004c0)=""/237, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0xe) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2000, 0x181) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 938.393084ms ago: executing program 2 (id=325): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$eJzs3ctrW1caAPBPku3YjmfymGFIMjAJZCDzIJYfDLFnZjOrmVkEhgl000Lq2oqbWraMJaexCdRpd1l0UVpaKF1037+gm2bVUChdt/vSRUlpUxfaQkHlXkmJrViuKI7V+P5+cJNzH9J3jsV3OPfoXt0AMutM8k8uYiQiPoqII43V7Qecafy3ee/GbLLkol6/9GUuPS5Zbx3aet3hiNiIiMGI+P+/I57JPRy3ura+MFMul1aa68Xa4nKxurZ+/urizHxpvrQ0PnVhenpqbHJies/aeuvl525dfPe/A+98+9LdO6+8/15SrZHmvq3t2EuNpvfHsS3b+iLin48iWA8Umu0Z6nVF+FmSz+83EXE2zf8jUUg/TSAL6vV6/Yf6oU67N+rAgZVPx8C5/GhENMr5/OhoYwz/2xjOlyvV2l+vVFaX5hpj5aPRn79ytVwaa54rHI3+XLI+npYfrE+0rU9GpGPgVwtD6frobKU8t79dHdDmcFv+f1No5D+QEU75IbvkP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h0z638WLyVJv3f8+d21tdaFy7fxcqbowurg6OzpbWVkena9U5tN7dhZ/6v3Klcry+N9i9XqxVqrWitW19cuLldWl2uX0vv7Lpf59aRXQjWOnb3+Si4iNvw+lS2KguU+uwsFWr+ei1/cgA71R6HUHBPSMqT/ILuf4QPtP9LaPCwY7vXD5wXwh8HjJ97oCQM+cO+n7P8gq8/+QXeb/IbuM8YEdHtG3zW7z/8Djyfw/ZNtOz//61ZZnd41FxK8j4uNC/6HWs76AgyD/ea45/j935I8j7XsHct+lXxEMRMTzb156/fpMrbYynmz/6v722hvN7RNbXtjxhAHolVaetvIYAMiuzXs3ZlvLfsb94l+NixAejt/XnJscTL+jHN7MbbtWIbdH1y5s3IyIEzvFzzWfd944kRneLDyI90Ij/vFmPXKNt0jr25c+N/0Rx2/GPLkl/h+2xD+1B38XyILbSf8ztlP+5dOcjvv5t73/Gdmjayc693/5+/1foUP/d7rLGM++9eJnHePfjDi1Y/xWvME0Vnv8pG7nuox/96knftdpX/3txvvsFL8lKRVri8vF6tr6+fR35OZLS+NTF6anp8YmJ6aL6Rx1sTVT/bB/nPjwzm7tH+4Qf7f2J9v+3GX7v//9B0+e2SX+n87u/Pkf3yX+UET8pcv4X098+nSnfUn8uQ7tz+8SP9k22WX86mv/OdTloQDAPqiurS/M9EVpJS2UywoKCvtbuPnLqEZbodc9E/CoVdeSU/Mk6XtdEwAAAAAAAAAAAKBb+3E5ca/bCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEPwYAAD//yvJ1G8=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='cachefiles_ondemand_cread\x00', r1, 0x0, 0x15}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0, 0x40000000, 0x1}) r7 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000001811000023b97f340b1d112e8c39d8d2735995588717779cea97ae3a95edd15af64a91f0465a8ebac3999ce336f3e82bd988270d9e851bea3194405ea69a4d003c00e1ddf2daeba7200eabd5b8218a96504a6b77bad272e804a7881fb90f88cd556fe2f27b0c6022bcfb936d4598d2842cc59c7b375031ed7498593f09b672851fbf325ace634100"/151, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x18}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r10, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 877.07593ms ago: executing program 0 (id=326): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2c, 0x1, 0x202, &(0x7f0000000000)) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r3, 0x0, &(0x7f0000000080)=':\x00', 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x300, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r7 = socket$inet_sctp(0x2, 0x5, 0x84) close(r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002780)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000002000000010000000000000100000000590005b50000d75573e68de576494d53de0443370f7a83b3b57d2f5f84630c0834b85441d16acd4f63c683031d3c694234a20e54131e6befde521088bea3b13d2142b29a2f23b05a89d320b8d78e728f20e881db2badc2e2e6c2b3c01e953e1079eab2b35e74fb3a0cafb1e49fd6c07af4abf83896fe1a761264171a4b761102909efd4bf3308f7124af3d5403e269b560"], 0x0, 0x2a, 0x0, 0x1, 0xa}, 0x28) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r9}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000340)={0x8, 0x1, 0x8000, 0xb, 0x6, 0xff, 0x3, 0x5, r9}, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r9, 0x8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r9, &(0x7f0000000080)=0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040)=0x200406, 0x4) sysinfo(&(0x7f0000000540)=""/183) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x14, r10, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x2c, 0x0, @dev, @mcast2, {[@srh={0x2e, 0x4, 0x4, 0x2, 0x2, 0x28, 0xb5, [@local, @private0]}], @echo_reply}}}}}, 0x0) syz_io_uring_setup(0x78f8, &(0x7f00000004c0)={0x0, 0xde55, 0x400, 0x2}, &(0x7f0000000240), &(0x7f0000000000)) 457.158233ms ago: executing program 4 (id=327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x1d6}, 0x18) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r6, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="37030000000000000000000057763070de86717fd750779d4165108f328031fb", @ANYRESHEX=r5, @ANYBLOB, @ANYRES64=0x0], 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) rmdir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) epoll_create1(0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r6) 447.914334ms ago: executing program 1 (id=339): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) syz_emit_ethernet(0x3b1, &(0x7f00000004c0)={@multicast, @random="caf66222e6aa", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x37b, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xff}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, [{0x18, 0xa, "a78ce5400659808000ffffc0fe4023493b87aafaffffffffffffff2373247202fa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "00000000000000000800ee00"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23a5026e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x0, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e4163ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d52cfb3f27fafa40845f90b6dfc87c6905bbc94d33e4575c853105f543e8e8a8a73b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb1fdc5fd020000000000006ae88c001a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbfeb532188b1"}, {0x22, 0x5, "d517fb2cf1a4ffdc1b7e018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_rm_watch(0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x7fffffff}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r7, 0x80605414, &(0x7f0000010340)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000090000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f0000000a80)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) 161.861927ms ago: executing program 4 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b04000000000000000002000000300004802c0001800a0001006e756d67656e00001c0002800800024000000101090001400000000c08000340000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x84}}, 0x0) close(0x3) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x2}, 0xc5) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/rt6_stats\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000180)=""/38, 0x26}], 0x1, 0xffff, 0xddd073cf) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x0, 0x0, 0x23}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mq_timedreceive(r7, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x4a2e, &(0x7f0000003240)=ANY=[], 0x6, 0x365, &(0x7f0000001100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) 101.583552ms ago: executing program 3 (id=329): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000014c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001680)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x43642e115bd44d50}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={r4, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000004c0)={@empty, 0x0}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES16=r0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r4, @ANYRESDEC=r0, @ANYRES8=0x0, @ANYRESDEC=r11], 0xb4}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)={0x2d0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1d}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5e15, 0x3, 0x4, 0x80}, {0x2, 0x4, 0x2, 0x1}, {0x2, 0x9, 0x8f, 0x80}, {0x40, 0xc, 0x7, 0x8}, {0x401, 0x49, 0x3, 0x1}, {0xfefe, 0x80, 0xe4, 0x2}, {0x2, 0x7, 0x4, 0xffffffff}]}}}]}}]}, 0x2d0}, 0x1, 0x0, 0x0, 0xc4}, 0x24044004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r12, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000540)='vegas\x00', 0x6) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 63.634835ms ago: executing program 2 (id=330): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x12, 0x200, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x110d41, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) dup2(r1, r0) r5 = socket$qrtr(0x2a, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bind$tipc(r6, 0x0, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) 46.247947ms ago: executing program 2 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000004c0)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0xfffffffd) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x100, 0xc}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r9, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = syz_open_procfs(r8, 0x0) ioctl$sock_SIOCSIFBR(r10, 0x8941, &(0x7f0000000600)=@get={0x1, 0x0, 0x8}) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xfff2}, {0xa, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) 29.185258ms ago: executing program 0 (id=334): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f00000004c0), 0x1, 0x5e8, &(0x7f0000001200)="$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") bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r4, 0x0, 0x3ffff) sendfile(r6, r4, 0x0, 0x7ffff000) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) syz_emit_ethernet(0x45, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, '\x00\x00eX\x00\x00\x00'}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'}) 0s ago: executing program 4 (id=335): add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000000}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r4 = socket(0x18, 0x5, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r4, r3, 0x0, 0x8) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000750000/0x3000)=nil, 0x3000, 0x17) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x16) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)=r9}, 0x20) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r10, 0x0, 0x0, 0x20000046, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000080)=0x14) kernel console output (not intermixed with test programs): 7814][ T3303] bridge_slave_0: entered allmulticast mode [ 26.744299][ T3303] bridge_slave_0: entered promiscuous mode [ 26.756788][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.763865][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.771012][ T3305] bridge_slave_0: entered allmulticast mode [ 26.777223][ T3305] bridge_slave_0: entered promiscuous mode [ 26.787990][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.795060][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.802177][ T3303] bridge_slave_1: entered allmulticast mode [ 26.808392][ T3303] bridge_slave_1: entered promiscuous mode [ 26.814690][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.821745][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.828862][ T3311] bridge_slave_0: entered allmulticast mode [ 26.835173][ T3311] bridge_slave_0: entered promiscuous mode [ 26.843603][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.850693][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.857750][ T3305] bridge_slave_1: entered allmulticast mode [ 26.864029][ T3305] bridge_slave_1: entered promiscuous mode [ 26.882586][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.889664][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.896843][ T3311] bridge_slave_1: entered allmulticast mode [ 26.903233][ T3311] bridge_slave_1: entered promiscuous mode [ 26.920387][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.930500][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.941040][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.967368][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.974419][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.981738][ T3301] bridge_slave_0: entered allmulticast mode [ 26.988044][ T3301] bridge_slave_0: entered promiscuous mode [ 26.995267][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.013221][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.027752][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.036915][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.044049][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.051272][ T3301] bridge_slave_1: entered allmulticast mode [ 27.057511][ T3301] bridge_slave_1: entered promiscuous mode [ 27.069277][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.083196][ T3305] team0: Port device team_slave_0 added [ 27.089864][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.103391][ T3312] team0: Port device team_slave_0 added [ 27.118575][ T3305] team0: Port device team_slave_1 added [ 27.129718][ T3312] team0: Port device team_slave_1 added [ 27.136454][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.146207][ T3303] team0: Port device team_slave_0 added [ 27.166496][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.175962][ T3303] team0: Port device team_slave_1 added [ 27.191178][ T3311] team0: Port device team_slave_0 added [ 27.197040][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.203985][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.229912][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.254165][ T3311] team0: Port device team_slave_1 added [ 27.260026][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.266975][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.292960][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.303896][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.310878][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.336845][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.347811][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.354791][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.380670][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.391827][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.398760][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.424652][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.440509][ T3301] team0: Port device team_slave_0 added [ 27.450549][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.457484][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.483428][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.501537][ T3301] team0: Port device team_slave_1 added [ 27.528369][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.535342][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.561290][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.586133][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.593103][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.619537][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.630406][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.637336][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.663327][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.686926][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.693873][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.719765][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.742544][ T3305] hsr_slave_0: entered promiscuous mode [ 27.748357][ T3305] hsr_slave_1: entered promiscuous mode [ 27.755935][ T3303] hsr_slave_0: entered promiscuous mode [ 27.761888][ T3303] hsr_slave_1: entered promiscuous mode [ 27.767605][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 27.773347][ T3303] Cannot create hsr debugfs directory [ 27.780966][ T3312] hsr_slave_0: entered promiscuous mode [ 27.786903][ T3312] hsr_slave_1: entered promiscuous mode [ 27.792873][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.798579][ T3312] Cannot create hsr debugfs directory [ 27.816607][ T3301] hsr_slave_0: entered promiscuous mode [ 27.822587][ T3301] hsr_slave_1: entered promiscuous mode [ 27.828308][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 27.834041][ T3301] Cannot create hsr debugfs directory [ 27.865926][ T3311] hsr_slave_0: entered promiscuous mode [ 27.872815][ T3311] hsr_slave_1: entered promiscuous mode [ 27.878731][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 27.884471][ T3311] Cannot create hsr debugfs directory [ 28.054585][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.063038][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.073962][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.084794][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.103075][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.111590][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.120229][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.128770][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.168008][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.180707][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.193455][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.202370][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.225555][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.234547][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.243236][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.252191][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.270169][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.294072][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.302867][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.312332][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.326762][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.333836][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.343234][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.350258][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.358481][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.367377][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.405625][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.415701][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.446705][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.460483][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.467559][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.477696][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.498287][ T2294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.505351][ T2294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.519873][ T2294] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.526961][ T2294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.535526][ T2294] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.542549][ T2294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.582871][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.593303][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.618310][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.627386][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.644934][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.657290][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.673622][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.680784][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.689699][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.696808][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.711051][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.718082][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.727649][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.734710][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.744738][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.753649][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.778008][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.900474][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.918336][ T3303] veth0_vlan: entered promiscuous mode [ 28.935795][ T3303] veth1_vlan: entered promiscuous mode [ 28.950667][ T3305] veth0_vlan: entered promiscuous mode [ 28.957158][ T3301] veth0_vlan: entered promiscuous mode [ 28.971610][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.980452][ T3305] veth1_vlan: entered promiscuous mode [ 28.994305][ T3303] veth0_macvtap: entered promiscuous mode [ 29.008459][ T3305] veth0_macvtap: entered promiscuous mode [ 29.025535][ T3305] veth1_macvtap: entered promiscuous mode [ 29.032845][ T3303] veth1_macvtap: entered promiscuous mode [ 29.040720][ T3301] veth1_vlan: entered promiscuous mode [ 29.072523][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.080269][ T3312] veth0_vlan: entered promiscuous mode [ 29.086622][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.098735][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.112018][ T3301] veth0_macvtap: entered promiscuous mode [ 29.126303][ T2294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.136606][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.145943][ T3301] veth1_macvtap: entered promiscuous mode [ 29.153570][ T2294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.162799][ T2294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.172276][ T3312] veth1_vlan: entered promiscuous mode [ 29.183736][ T2294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.200746][ T3312] veth0_macvtap: entered promiscuous mode [ 29.208846][ T2294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.224084][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.232642][ T3312] veth1_macvtap: entered promiscuous mode [ 29.238830][ T2294] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.253553][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.267549][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.274862][ T2294] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.283683][ T2294] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.304126][ T2294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.312956][ T3311] veth0_vlan: entered promiscuous mode [ 29.329726][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.336933][ T2294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.351771][ T3311] veth1_vlan: entered promiscuous mode [ 29.362630][ T2294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.373183][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.391394][ T2294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.421410][ T2294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.457274][ T3311] veth0_macvtap: entered promiscuous mode [ 29.477804][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.496787][ T3311] veth1_macvtap: entered promiscuous mode [ 29.530815][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.543904][ T3481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=3481 comm=syz.2.3 [ 29.545142][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.577524][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.588201][ T3481] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 29.607268][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.616566][ T3488] random: crng reseeded on system resumption [ 29.616615][ C1] hrtimer: interrupt took 33403 ns [ 29.631791][ T2294] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.646803][ T2294] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.670878][ T2294] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.717059][ T2294] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.801533][ T3497] loop3: detected capacity change from 0 to 8192 [ 29.809520][ T3497] ======================================================= [ 29.809520][ T3497] WARNING: The mand mount option has been deprecated and [ 29.809520][ T3497] and is ignored by this kernel. Remove the mand [ 29.809520][ T3497] option from the mount to silence this warning. [ 29.809520][ T3497] ======================================================= [ 29.863657][ T3507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 29.898762][ T3511] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 29.917666][ T3503] loop4: detected capacity change from 0 to 8192 [ 29.932346][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 29.932360][ T29] audit: type=1326 audit(1756666330.057:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 29.933960][ T3507] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3507 comm=syz.2.7 [ 29.938531][ T29] audit: type=1326 audit(1756666330.057:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 29.996924][ T29] audit: type=1326 audit(1756666330.057:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 30.031290][ T29] audit: type=1326 audit(1756666330.057:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 30.054502][ T29] audit: type=1326 audit(1756666330.057:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 30.077522][ T29] audit: type=1326 audit(1756666330.057:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 30.078458][ T3488] syz.3.6: attempt to access beyond end of device [ 30.078458][ T3488] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 30.100565][ T29] audit: type=1326 audit(1756666330.057:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd745ae0a7c code=0x7ffc0000 [ 30.100594][ T29] audit: type=1400 audit(1756666330.127:272): avc: denied { create } for pid=3506 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 30.100635][ T29] audit: type=1400 audit(1756666330.127:273): avc: denied { write } for pid=3506 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 30.100657][ T29] audit: type=1326 audit(1756666330.127:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.2.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd745ae09b4 code=0x7ffc0000 [ 30.200966][ T3488] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.210983][ T3377] loop4: p3 p4 < > [ 30.215414][ T3377] loop4: p3 size 33554432 extends beyond EOD, truncated [ 30.224787][ T3488] syz.3.6: attempt to access beyond end of device [ 30.224787][ T3488] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 30.249759][ T3488] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.278653][ T3520] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 30.307899][ T3488] syz.3.6: attempt to access beyond end of device [ 30.307899][ T3488] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 30.321877][ T3488] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.332705][ T3488] syz.3.6: attempt to access beyond end of device [ 30.332705][ T3488] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 30.346985][ T3488] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.356940][ T3503] loop4: p3 p4 < > [ 30.361479][ T3503] loop4: p3 size 33554432 extends beyond EOD, truncated [ 30.383293][ T3485] syz.3.6: attempt to access beyond end of device [ 30.383293][ T3485] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 30.396556][ T3485] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.418835][ T3488] syz.3.6: attempt to access beyond end of device [ 30.418835][ T3488] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 30.432339][ T3488] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.449666][ T3485] syz.3.6: attempt to access beyond end of device [ 30.449666][ T3485] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 30.462813][ T3485] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.477777][ T3525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.488619][ T3488] syz.3.6: attempt to access beyond end of device [ 30.488619][ T3488] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 30.505690][ T3488] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.517123][ T3485] syz.3.6: attempt to access beyond end of device [ 30.517123][ T3485] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 30.530379][ T3485] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.540533][ T3488] syz.3.6: attempt to access beyond end of device [ 30.540533][ T3488] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 30.555035][ T3488] Buffer I/O error on dev loop3, logical block 57847, async page read [ 30.687819][ T3528] netlink: 'syz.4.11': attribute type 10 has an invalid length. [ 30.725847][ T3528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.735527][ T3528] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 30.744481][ T3530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 30.790601][ T3530] netem: change failed [ 30.799927][ T3530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 30.808657][ T3530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12'. [ 30.824519][ T3535] mmap: syz.0.13 (3535) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.863445][ T3528] loop4: detected capacity change from 0 to 1024 [ 30.870301][ T3530] syz.2.12 (3530) used greatest stack depth: 10600 bytes left [ 30.878496][ T3528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.897786][ T3528] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 30.906070][ T3528] System zones: 0-1, 3-36 [ 30.944272][ T3532] loop0: detected capacity change from 0 to 128 [ 30.957327][ T3528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.050681][ T3528] capability: warning: `syz.4.11' uses deprecated v2 capabilities in a way that may be insecure [ 31.055447][ T3543] loop2: detected capacity change from 0 to 736 [ 31.123409][ T3528] syz.4.11 (3528) used greatest stack depth: 10144 bytes left [ 31.138025][ T3543] rock: directory entry would overflow storage [ 31.144555][ T3543] rock: sig=0x3b10, size=4, remaining=3 [ 31.153442][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.251682][ T3547] loop4: detected capacity change from 0 to 512 [ 31.274224][ T3547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.291508][ T3525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.593438][ T3587] loop3: detected capacity change from 0 to 512 [ 31.652561][ T3587] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 31.661284][ T3587] EXT4-fs (loop3): orphan cleanup on readonly fs [ 31.673041][ T3587] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.18: Failed to acquire dquot type 1 [ 31.679894][ T3592] lo speed is unknown, defaulting to 1000 [ 31.696581][ T3592] lo speed is unknown, defaulting to 1000 [ 31.699254][ T3587] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.18: bg 0: block 40: padding at end of block bitmap is not set [ 31.716980][ T3592] lo speed is unknown, defaulting to 1000 [ 31.717517][ T3587] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 31.730017][ T3592] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 31.741324][ T3592] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 31.742108][ T3587] EXT4-fs (loop3): 1 truncate cleaned up [ 31.753219][ T3593] 9pnet_fd: Insufficient options for proto=fd [ 31.765418][ T3592] lo speed is unknown, defaulting to 1000 [ 31.770068][ T3587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.786982][ T3592] lo speed is unknown, defaulting to 1000 [ 31.797600][ T3592] lo speed is unknown, defaulting to 1000 [ 31.803982][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 31.817831][ T3587] bridge0: entered promiscuous mode [ 31.824802][ T3587] bridge0: port 3(macvlan2) entered blocking state [ 31.831378][ T3587] bridge0: port 3(macvlan2) entered disabled state [ 31.838292][ T3587] macvlan2: entered allmulticast mode [ 31.843706][ T3587] bridge0: entered allmulticast mode [ 31.849532][ T3587] macvlan2: left allmulticast mode [ 31.854671][ T3587] bridge0: left allmulticast mode [ 31.860098][ T3587] bridge0: left promiscuous mode [ 31.868568][ T3592] lo speed is unknown, defaulting to 1000 [ 31.875930][ T3592] lo speed is unknown, defaulting to 1000 [ 31.934575][ T3595] Zero length message leads to an empty skb [ 31.943317][ T3595] loop0: detected capacity change from 0 to 512 [ 31.972087][ T3595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.986706][ T3595] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.999503][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.002556][ T3595] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.20: corrupted inode contents [ 32.020428][ T3595] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.20: mark_inode_dirty error [ 32.032546][ T3595] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.20: corrupted inode contents [ 32.045371][ T3595] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.20: mark_inode_dirty error [ 32.045626][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.104395][ T3525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.154314][ T3607] loop9: detected capacity change from 0 to 7 [ 32.245607][ T3525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.326612][ T3616] loop3: detected capacity change from 0 to 1024 [ 32.380702][ T3616] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.450823][ T3616] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 32.458956][ T3616] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.490552][ T3430] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.514642][ T3616] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 32.529474][ T3616] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 32.536388][ T3616] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.21: Freeing blocks not in datazone - block = 0, count = 4096 [ 32.560210][ T3616] EXT4-fs (loop3): 1 orphan inode deleted [ 32.566513][ T3616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.613710][ T3430] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.613705][ T3608] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.21: iget: bad extended attribute block 6 [ 32.634679][ T3430] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.635716][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.643582][ T3430] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.687661][ T3608] lo speed is unknown, defaulting to 1000 [ 32.793229][ T3627] batadv_slave_1: entered promiscuous mode [ 32.989291][ T3638] openvswitch: netlink: Message has 6 unknown bytes. [ 33.068852][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.154809][ T3647] siw: device registration error -23 [ 33.384980][ T3656] loop3: detected capacity change from 0 to 2048 [ 33.429530][ T3656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 33.442565][ T3652] loop4: detected capacity change from 0 to 512 [ 33.462008][ T3652] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 33.471694][ T3652] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 33.502777][ T3652] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm +}[@: Invalid inode table block 1 in block_group 0 [ 33.521821][ T3652] EXT4-fs (loop4): Remounting filesystem read-only [ 33.528334][ T3652] EXT4-fs (loop4): get root inode failed [ 33.534101][ T3652] EXT4-fs (loop4): mount failed [ 33.558317][ T3677] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.605115][ T3652] loop4: detected capacity change from 0 to 512 [ 33.606316][ T3624] batadv_slave_1: left promiscuous mode [ 33.618589][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 33.627320][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 33.636245][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 33.695990][ T3652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.701461][ T3688] loop1: detected capacity change from 0 to 1024 [ 33.719536][ T3688] ext4: Unknown parameter 'obj_role' [ 33.730334][ T3652] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.742276][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 33.750998][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 33.791133][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.817566][ T3701] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.837267][ T3701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.867353][ T3704] netlink: 'syz.0.35': attribute type 13 has an invalid length. [ 33.910538][ T3704] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.917692][ T3704] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.954262][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.964305][ T3704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.972269][ T3708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3708 comm=syz.0.35 [ 34.027437][ T1035] lo speed is unknown, defaulting to 1000 [ 34.033312][ T1035] syz0: Port: 1 Link DOWN [ 34.056976][ T3701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.068579][ T2294] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.077852][ T2294] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.086905][ T2294] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.096000][ T2294] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.128389][ T3701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.143354][ T3713] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.157707][ T3713] raw_sendmsg: syz.2.37 forgot to set AF_INET. Fix it! [ 34.185898][ T3701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.216362][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 34.258022][ T2294] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.306680][ T3430] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.326384][ T3430] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.337101][ T3733] loop0: detected capacity change from 0 to 512 [ 34.346618][ T3430] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.368216][ T3733] ext2: Unknown parameter 'nouser_xattr' [ 34.404567][ T3735] loop3: detected capacity change from 0 to 256 [ 34.527334][ T3735] netlink: '+}[@': attribute type 13 has an invalid length. [ 34.787114][ T3748] loop0: detected capacity change from 0 to 128 [ 34.822324][ T3735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 35.642769][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 35.642783][ T29] audit: type=1326 audit(1756666335.767:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 35.694898][ T3742] tipc: Started in network mode [ 35.699839][ T3742] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 35.799857][ T3742] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 35.808072][ T3742] tipc: Enabled bearer , priority 10 [ 35.857977][ T3757] loop0: detected capacity change from 0 to 512 [ 35.864664][ T3757] EXT4-fs: Ignoring removed nobh option [ 35.878965][ T29] audit: type=1326 audit(1756666335.797:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 35.902347][ T29] audit: type=1326 audit(1756666335.797:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 35.902715][ T3747] loop1: detected capacity change from 0 to 512 [ 35.925662][ T29] audit: type=1326 audit(1756666335.797:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 35.955210][ T29] audit: type=1326 audit(1756666335.797:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 35.978763][ T29] audit: type=1326 audit(1756666335.797:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 35.979151][ T3757] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.002673][ T29] audit: type=1326 audit(1756666335.797:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 36.020934][ T3747] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.039459][ T29] audit: type=1326 audit(1756666335.857:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 36.048147][ T3747] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.43: bg 0: block 248: padding at end of block bitmap is not set [ 36.069218][ T29] audit: type=1326 audit(1756666335.857:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 36.084400][ T3747] Quota error (device loop1): write_blk: dquota write failed [ 36.109326][ T3757] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.45: corrupted inode contents [ 36.114045][ T3747] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.43: Failed to acquire dquot type 1 [ 36.126563][ T3757] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.45: mark_inode_dirty error [ 36.158111][ T3757] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.45: corrupted inode contents [ 36.171681][ T3747] EXT4-fs (loop1): 1 truncate cleaned up [ 36.177406][ T3757] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.45: mark_inode_dirty error [ 36.195613][ T3757] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.45: Failed to acquire dquot type 0 [ 36.195733][ T3747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.207516][ T3757] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.45: corrupted inode contents [ 36.231082][ T3767] __nla_validate_parse: 7 callbacks suppressed [ 36.231093][ T3767] netlink: 240 bytes leftover after parsing attributes in process `syz.2.48'. [ 36.248471][ T3769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 36.261099][ T3757] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.45: mark_inode_dirty error [ 36.278210][ T3757] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.45: corrupted inode contents [ 36.290448][ T3757] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.45: mark_inode_dirty error [ 36.312390][ T3766] tipc: Started in network mode [ 36.317282][ T3766] tipc: Node identity ac141413, cluster identity 4711 [ 36.325466][ T3766] tipc: New replicast peer: 10.1.1.2 [ 36.330245][ T3757] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.45: corrupted inode contents [ 36.330895][ T3766] tipc: Enabled bearer , priority 10 [ 36.360229][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 36.369855][ T3757] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 36.370059][ T3767] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.390090][ T3757] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.45: corrupted inode contents [ 36.398192][ T3766] loop3: detected capacity change from 0 to 1024 [ 36.409549][ T3757] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.45: mark_inode_dirty error [ 36.425412][ T3766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.437583][ T3766] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.450136][ T3757] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 36.468015][ T3747] syz.1.43 (3747) used greatest stack depth: 9280 bytes left [ 36.480556][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.494838][ T3757] EXT4-fs (loop0): 1 truncate cleaned up [ 36.501626][ T3757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.514336][ T3757] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.525827][ T3767] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.552425][ T3757] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.561600][ T3778] loop1: detected capacity change from 0 to 1024 [ 36.583714][ T3767] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.612185][ T3778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.624574][ T3778] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.658357][ T3767] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.675847][ T3784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 36.750864][ T3791] netlink: 5 bytes leftover after parsing attributes in process `syz.0.52'. [ 36.760969][ T3791] 0ªî{X¹¦: renamed from gretap0 [ 36.767364][ T3791] 0ªî{X¹¦: entered allmulticast mode [ 36.775422][ T3791] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 36.800473][ T3526] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.809804][ T10] tipc: Node number set to 1 [ 36.832749][ T3526] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.847015][ T3526] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.860826][ T3789] loop4: detected capacity change from 0 to 1024 [ 36.871064][ T3789] EXT4-fs: Ignoring removed nobh option [ 36.916038][ T3797] hub 9-0:1.0: USB hub found [ 36.920754][ T3797] hub 9-0:1.0: 8 ports detected [ 36.973349][ T3789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.090213][ T3526] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.120977][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.155841][ T3801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.53'. [ 37.262167][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.298010][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 37.351044][ T3809] syz.2.56 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.453272][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.463061][ T10] tipc: Node number set to 2886997011 [ 37.490512][ T3809] loop2: detected capacity change from 0 to 764 [ 37.510856][ T3809] iso9660: Unknown parameter 'ÿÿÿ' [ 37.592760][ T3818] loop4: detected capacity change from 0 to 1024 [ 37.621497][ T3818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.644190][ T3818] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.666764][ T3818] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #12: comm syz.4.59: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 4(0), depth 0(0) [ 37.705334][ T3818] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #12: comm syz.4.59: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 4(0), depth 0(0) [ 37.746147][ T3825] netlink: 104 bytes leftover after parsing attributes in process `syz.3.60'. [ 37.751820][ T3809] lo speed is unknown, defaulting to 1000 [ 37.775542][ T3809] lo speed is unknown, defaulting to 1000 [ 37.794768][ T3809] lo speed is unknown, defaulting to 1000 [ 37.807587][ T3825] loop3: detected capacity change from 0 to 8192 [ 37.835607][ T3825] bio_check_eod: 845 callbacks suppressed [ 37.835619][ T3825] syz.3.60: attempt to access beyond end of device [ 37.835619][ T3825] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 37.843378][ T3822] loop2: detected capacity change from 0 to 128 [ 37.854630][ T3825] buffer_io_error: 845 callbacks suppressed [ 37.854643][ T3825] Buffer I/O error on dev loop3, logical block 57847, async page read [ 37.885232][ T3822] msdos: Bad value for 'fmask' [ 37.908453][ T3809] infiniband sz1: set active [ 37.913302][ T3809] infiniband sz1: added lo [ 37.930218][ T36] lo speed is unknown, defaulting to 1000 [ 38.084475][ T3809] RDS/IB: sz1: added [ 38.092485][ T3809] smc: adding ib device sz1 with port count 1 [ 38.103179][ T3809] smc: ib device sz1 port 1 has pnetid [ 38.109139][ T10] lo speed is unknown, defaulting to 1000 [ 38.120274][ T3809] lo speed is unknown, defaulting to 1000 [ 38.222162][ T3839] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 38.278498][ T3809] lo speed is unknown, defaulting to 1000 [ 38.522761][ T3809] lo speed is unknown, defaulting to 1000 [ 38.559957][ T3809] lo speed is unknown, defaulting to 1000 [ 38.594141][ T3809] lo speed is unknown, defaulting to 1000 [ 38.629643][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.702768][ T3845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 38.753451][ T3845] lo speed is unknown, defaulting to 1000 [ 38.882111][ T3849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.66'. [ 38.962137][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.969530][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.989638][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.997028][ T3854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.023623][ T3843] loop4: detected capacity change from 0 to 1024 [ 39.072582][ T3843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 39.227655][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 39.268901][ T3864] loop4: detected capacity change from 0 to 1024 [ 39.276641][ T3864] ext2: Unknown parameter 'uid<00000000000000000000' [ 39.352424][ T3864] bond1: entered promiscuous mode [ 39.368317][ T3864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.569561][ T3876] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 39.646440][ T3880] Illegal XDP return value 4294967262 on prog (id 97) dev N/A, expect packet loss! [ 39.689977][ T3878] 9pnet_fd: Insufficient options for proto=fd [ 39.720865][ T3885] loop4: detected capacity change from 0 to 512 [ 39.748311][ T3889] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.795200][ T3872] lo speed is unknown, defaulting to 1000 [ 39.812699][ T3885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.909962][ T3885] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.934451][ T3885] netlink: 'syz.4.77': attribute type 13 has an invalid length. [ 39.997353][ T3896] loop1: detected capacity change from 0 to 1024 [ 40.008035][ T3897] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.77: iget: bad i_size value: 2533274857506816 [ 40.030684][ T3897] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.77: iget: bad i_size value: 2533274857506816 [ 40.049135][ T3885] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.053429][ T3896] EXT4-fs: Ignoring removed orlov option [ 40.056367][ T3885] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.061907][ T3896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.085330][ T3900] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.77: iget: bad i_size value: 2533274857506816 [ 40.104962][ T3897] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.77: iget: bad i_size value: 2533274857506816 [ 40.137106][ T3896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.152878][ T3897] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.77: iget: bad i_size value: 2533274857506816 [ 40.268288][ T3885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.278130][ T3885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.381616][ T3903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.435507][ T3430] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.447644][ T3430] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.456149][ T3899] veth0_to_team: entered promiscuous mode [ 40.460020][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.461921][ T3899] veth0_to_team: entered allmulticast mode [ 40.478736][ T3919] batman_adv: batadv0: Adding interface: dummy0 [ 40.485105][ T3919] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.510389][ T3919] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 40.532976][ T3922] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 40.542113][ T3430] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.553535][ T3430] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.563946][ T3922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.574172][ T3922] team0: Port device bond0 added [ 40.594179][ T3927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3927 comm=syz.0.85 [ 40.708778][ T29] kauditd_printk_skb: 717 callbacks suppressed [ 40.708833][ T29] audit: type=1326 audit(1756666340.827:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 40.738400][ T29] audit: type=1326 audit(1756666340.827:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 40.761732][ T29] audit: type=1326 audit(1756666340.827:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 40.785043][ T29] audit: type=1326 audit(1756666340.827:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 40.808346][ T29] audit: type=1326 audit(1756666340.827:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 40.831562][ T29] audit: type=1326 audit(1756666340.837:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 40.854762][ T29] audit: type=1326 audit(1756666340.837:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 40.878526][ T29] audit: type=1326 audit(1756666340.867:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6fe0cec23 code=0x7ffc0000 [ 40.880526][ T3937] SELinux: security_context_str_to_sid () failed with errno=-22 [ 40.901652][ T29] audit: type=1326 audit(1756666340.867:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6fe0cec23 code=0x7ffc0000 [ 40.932416][ T29] audit: type=1326 audit(1756666340.867:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 40.965517][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.004431][ T3946] $Hÿ: renamed from bond0 [ 41.013920][ T3946] $Hÿ: entered promiscuous mode [ 41.018964][ T3946] bond_slave_0: entered promiscuous mode [ 41.024743][ T3946] bond_slave_1: entered promiscuous mode [ 41.033964][ T3947] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 41.055714][ T3944] loop1: detected capacity change from 0 to 512 [ 41.074326][ T3944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.087237][ T3944] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.120576][ T3951] netlink: '+}[@': attribute type 7 has an invalid length. [ 41.264012][ T3944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.291193][ T3956] siw: device registration error -23 [ 41.317843][ T3958] tipc: Enabling not permitted [ 41.323363][ T3958] tipc: Enabling of bearer rejected, failed to enable media [ 41.396213][ T3962] netlink: 'gtp': attribute type 30 has an invalid length. [ 41.417095][ T3964] __nla_validate_parse: 9 callbacks suppressed [ 41.417108][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.96'. [ 41.439283][ T3964] loop4: detected capacity change from 0 to 2048 [ 41.452354][ T3964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 41.493684][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 41.495630][ T3968] loop1: detected capacity change from 0 to 512 [ 41.525417][ T3972] netlink: 'syz.4.98': attribute type 11 has an invalid length. [ 41.526375][ T3968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.533144][ T3972] netlink: 140 bytes leftover after parsing attributes in process `syz.4.98'. [ 41.555568][ T3968] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.685302][ T3968] wg1 speed is unknown, defaulting to 1000 [ 41.692192][ T3968] wg1 speed is unknown, defaulting to 1000 [ 41.701136][ T3968] wg1 speed is unknown, defaulting to 1000 [ 41.709143][ T3968] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 41.733884][ T3968] wg1 speed is unknown, defaulting to 1000 [ 41.741540][ T3968] wg1 speed is unknown, defaulting to 1000 [ 41.747939][ T3968] wg1 speed is unknown, defaulting to 1000 [ 41.754668][ T3968] wg1 speed is unknown, defaulting to 1000 [ 41.761485][ T3968] wg1 speed is unknown, defaulting to 1000 [ 41.812663][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.952502][ T3984] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 41.981104][ T3984] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.988299][ T3984] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.016979][ T3986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 42.072773][ T3986] netlink: 277 bytes leftover after parsing attributes in process `syz.1.102'. [ 42.101089][ T3990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.103'. [ 42.110025][ T3990] unsupported nla_type 10042 [ 42.309214][ T4000] netlink: 240 bytes leftover after parsing attributes in process `syz.1.105'. [ 42.333128][ T47] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 42.352140][ T4000] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.405757][ T4002] loop2: detected capacity change from 0 to 128 [ 42.422666][ T4000] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.481286][ T4000] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.528541][ T4008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.108'. [ 42.540186][ T4008] netlink: 'syz.0.108': attribute type 21 has an invalid length. [ 42.611225][ T4000] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.695988][ T41] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.706554][ T4015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 42.769787][ T4015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 42.790194][ T173] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.811886][ T173] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.829878][ T2294] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.880855][ T4022] netlink: 44 bytes leftover after parsing attributes in process `syz.4.111'. [ 43.034663][ T4025] lo speed is unknown, defaulting to 1000 [ 43.090110][ T4030] loop3: detected capacity change from 0 to 1024 [ 43.093633][ T4025] wg1 speed is unknown, defaulting to 1000 [ 43.104368][ T4030] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.115406][ T4030] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.132723][ T4030] JBD2: no valid journal superblock found [ 43.138459][ T4030] EXT4-fs (loop3): Could not load journal inode [ 43.180205][ T4030] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 43.273481][ T4033] lo speed is unknown, defaulting to 1000 [ 43.294724][ T4033] lo speed is unknown, defaulting to 1000 [ 43.300889][ T4033] lo speed is unknown, defaulting to 1000 [ 43.309296][ T4033] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 43.348733][ T4033] lo speed is unknown, defaulting to 1000 [ 43.385487][ T4033] lo speed is unknown, defaulting to 1000 [ 43.427751][ T4033] lo speed is unknown, defaulting to 1000 [ 43.434172][ T4033] lo speed is unknown, defaulting to 1000 [ 43.446598][ T4033] lo speed is unknown, defaulting to 1000 [ 43.708981][ T4052] loop4: detected capacity change from 0 to 2048 [ 43.740821][ T4055] bridge0: entered promiscuous mode [ 43.752156][ T4055] macsec1: entered promiscuous mode [ 43.762657][ T4052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 43.780590][ T4055] bridge0: port 3(macsec1) entered blocking state [ 43.787053][ T4055] bridge0: port 3(macsec1) entered disabled state [ 43.795157][ T4055] macsec1: entered allmulticast mode [ 43.800726][ T4055] bridge0: entered allmulticast mode [ 43.806717][ T4066] loop1: detected capacity change from 0 to 1024 [ 43.814614][ T4066] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 43.817818][ T4055] macsec1: left allmulticast mode [ 43.829563][ T4055] bridge0: left allmulticast mode [ 43.831657][ T4066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.849951][ T4055] bridge0: left promiscuous mode [ 43.870293][ T4066] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.124: missing EA_INODE flag [ 43.882197][ T4066] EXT4-fs (loop1): Remounting filesystem read-only [ 43.888740][ T4066] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.908289][ T4070] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.924490][ T4070] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1802 with error 28 [ 43.937006][ T4070] EXT4-fs (loop4): This should not happen!! Data will be lost [ 43.937006][ T4070] [ 43.946765][ T4070] EXT4-fs (loop4): Total free blocks count 0 [ 43.952764][ T4070] EXT4-fs (loop4): Free/Dirty block details [ 43.958675][ T4070] EXT4-fs (loop4): free_blocks=2415919104 [ 43.964547][ T4070] EXT4-fs (loop4): dirty_blocks=1808 [ 43.969829][ T4070] EXT4-fs (loop4): Block reservation details [ 43.975806][ T4070] EXT4-fs (loop4): i_reserved_data_blocks=113 [ 44.215619][ T4086] lo speed is unknown, defaulting to 1000 [ 44.264135][ T4086] wg1 speed is unknown, defaulting to 1000 [ 44.270798][ T4086] lo speed is unknown, defaulting to 1000 [ 44.314759][ T4087] lo speed is unknown, defaulting to 1000 [ 44.363964][ T4087] wg1 speed is unknown, defaulting to 1000 [ 44.370216][ T4087] lo speed is unknown, defaulting to 1000 [ 44.546439][ T4091] loop3: detected capacity change from 0 to 1024 [ 44.561546][ T4091] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 44.571361][ T4091] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 44.589706][ T4091] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 44.621568][ T4091] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: inode #5: comm syz.3.127: unexpected bad inode w/o EXT4_IGET_BAD [ 44.637333][ T4091] EXT4-fs (loop3): no journal found [ 44.640510][ T4089] loop2: detected capacity change from 0 to 4096 [ 44.642584][ T4091] EXT4-fs (loop3): can't get journal size [ 44.645352][ T4091] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.668639][ T4089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.690554][ T41] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 44.691983][ T4089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.759529][ T4100] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 44.775317][ T4089] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.795918][ T4101] bridge_slave_1: left allmulticast mode [ 44.801675][ T4101] bridge_slave_1: left promiscuous mode [ 44.807507][ T4101] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.815834][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.825351][ T4101] bridge_slave_0: left allmulticast mode [ 44.831180][ T4101] bridge_slave_0: left promiscuous mode [ 44.837131][ T4101] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.921299][ T4111] binfmt_misc: register: failed to install interpreter file ./file0 [ 45.115634][ T4119] lo speed is unknown, defaulting to 1000 [ 45.167838][ T4119] wg1 speed is unknown, defaulting to 1000 [ 45.174219][ T4119] lo speed is unknown, defaulting to 1000 [ 45.508619][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.516439][ T4118] loop1: detected capacity change from 0 to 8192 [ 45.570685][ T4123] hsr_slave_0: left promiscuous mode [ 45.577411][ T4123] hsr_slave_1: left promiscuous mode [ 45.614166][ T4121] infiniband syz!: set down [ 45.618752][ T4121] infiniband syz!: added team_slave_0 [ 45.630525][ T4127] smc: net device bond0 applied user defined pnetid SYZ0 [ 45.648822][ T4127] smc: net device bond0 erased user defined pnetid SYZ0 [ 45.677432][ T4121] RDS/IB: syz!: added [ 45.684162][ T4121] smc: adding ib device syz! with port count 1 [ 45.697471][ T4121] smc: ib device syz! port 1 has pnetid [ 45.710064][ T29] kauditd_printk_skb: 909 callbacks suppressed [ 45.710075][ T29] audit: type=1326 audit(1756666345.837:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6fe0c5ba7 code=0x7ffc0000 [ 45.739505][ T29] audit: type=1326 audit(1756666345.837:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fe06adb9 code=0x7ffc0000 [ 45.762725][ T29] audit: type=1326 audit(1756666345.837:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 45.786088][ T29] audit: type=1326 audit(1756666345.837:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6fe0c5ba7 code=0x7ffc0000 [ 45.809295][ T29] audit: type=1326 audit(1756666345.837:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fe06adb9 code=0x7ffc0000 [ 45.832492][ T29] audit: type=1326 audit(1756666345.837:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 45.967227][ T29] audit: type=1400 audit(1756666346.087:2674): avc: denied { map } for pid=4128 comm="syz.2.136" path="socket:[6978]" dev="sockfs" ino=6978 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.061554][ T29] audit: type=1326 audit(1756666346.167:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 46.085082][ T29] audit: type=1326 audit(1756666346.167:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 46.108410][ T29] audit: type=1326 audit(1756666346.167:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4136 comm="syz.1.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282582ebe9 code=0x7ffc0000 [ 46.139256][ T4143] loop2: detected capacity change from 0 to 1024 [ 46.161937][ T4143] EXT4-fs: Ignoring removed orlov option [ 46.182818][ T4146] IPv6: Can't replace route, no match found [ 46.187350][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.238266][ T4153] IPv6: Can't replace route, no match found [ 46.258026][ T41] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 46.377353][ T4157] loop1: detected capacity change from 0 to 1764 [ 46.459111][ T4161] 9pnet_fd: Insufficient options for proto=fd [ 46.473143][ T4161] loop4: detected capacity change from 0 to 512 [ 46.479538][ T4162] loop1: detected capacity change from 0 to 1024 [ 46.493626][ T4162] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 46.503458][ T4162] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 46.514668][ T4162] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 46.530666][ T4162] EXT4-fs error (device loop1): ext4_get_journal_inode:5800: inode #5: comm syz.1.145: unexpected bad inode w/o EXT4_IGET_BAD [ 46.544355][ T4162] EXT4-fs (loop1): no journal found [ 46.549559][ T4162] EXT4-fs (loop1): can't get journal size [ 46.578448][ T4162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.630919][ T4162] __nla_validate_parse: 14 callbacks suppressed [ 46.630935][ T4162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.145'. [ 46.646150][ T4162] bridge_slave_1: left allmulticast mode [ 46.651813][ T4162] bridge_slave_1: left promiscuous mode [ 46.657558][ T4162] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.668239][ T4162] bridge_slave_0: left allmulticast mode [ 46.673985][ T4162] bridge_slave_0: left promiscuous mode [ 46.679712][ T4162] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.702482][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.713811][ T4165] netlink: 'syz.0.147': attribute type 11 has an invalid length. [ 46.721645][ T4165] netlink: 140 bytes leftover after parsing attributes in process `syz.0.147'. [ 46.787783][ T4169] syzkaller0: entered allmulticast mode [ 46.797622][ T4169] syzkaller0: entered promiscuous mode [ 46.807073][ T4173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'. [ 46.846330][ T4166] syzkaller0: left promiscuous mode [ 46.851778][ T4166] syzkaller0: left allmulticast mode [ 47.014700][ T4179] tipc: Enabling not permitted [ 47.020232][ T4179] tipc: Enabling of bearer rejected, failed to enable media [ 47.092691][ T4180] lo speed is unknown, defaulting to 1000 [ 47.142425][ T4180] wg1 speed is unknown, defaulting to 1000 [ 47.148850][ T4180] lo speed is unknown, defaulting to 1000 [ 47.393001][ T4176] loop3: detected capacity change from 0 to 8192 [ 47.730969][ T4187] siw: device registration error -23 [ 47.879946][ T4193] loop3: detected capacity change from 0 to 1024 [ 47.895360][ T4193] EXT4-fs: Ignoring removed orlov option [ 47.901196][ T4193] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.941790][ T4194] netlink: 92 bytes leftover after parsing attributes in process `syz.2.156'. [ 47.951238][ T4194] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.982164][ T4193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.052514][ T4204] 0ªî{X¹¦: left allmulticast mode [ 48.066588][ T4204] $Hÿ: left promiscuous mode [ 48.071517][ T4204] bond_slave_0: left promiscuous mode [ 48.077133][ T4204] bond_slave_1: left promiscuous mode [ 48.084711][ T4204] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 48.093450][ T4204] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.095684][ T4204] batman_adv: batadv0: Interface activated: dummy0 [ 48.108372][ T4204] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.144814][ T4209] IPv6: Can't replace route, no match found [ 48.159372][ T4204] veth0_to_team: entered promiscuous mode [ 48.159388][ T4204] veth0_to_team: entered allmulticast mode [ 48.171715][ T4209] loop2: detected capacity change from 0 to 1764 [ 48.217056][ T4215] lo speed is unknown, defaulting to 1000 [ 48.231618][ T4217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 48.243250][ T4217] netlink: 'syz.2.162': attribute type 21 has an invalid length. [ 48.263686][ T4215] wg1 speed is unknown, defaulting to 1000 [ 48.264730][ T4217] loop2: detected capacity change from 0 to 1024 [ 48.276419][ T4215] lo speed is unknown, defaulting to 1000 [ 48.280294][ T4217] EXT4-fs: Ignoring removed bh option [ 48.287636][ T4217] EXT4-fs: inline encryption not supported [ 48.295429][ T4217] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.306730][ T4217] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.162: lblock 2 mapped to illegal pblock 2 (length 1) [ 48.322007][ T4217] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.162: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.336292][ T4217] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.162: Failed to acquire dquot type 0 [ 48.347886][ T4217] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 48.357532][ T4217] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.162: mark_inode_dirty error [ 48.369431][ T4217] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 48.379729][ T4217] EXT4-fs (loop2): 1 orphan inode deleted [ 48.385804][ T4217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.399370][ T3430] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.442120][ T3430] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 48.454459][ T4217] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.463613][ T4225] loop4: detected capacity change from 0 to 256 [ 48.464991][ T4217] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.162: Invalid inode table block 1 in block_group 0 [ 48.502662][ T4217] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 48.513304][ T4217] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz.2.162: mark_inode_dirty error [ 48.547344][ T4225] netlink: '+}[@': attribute type 13 has an invalid length. [ 48.579948][ T4225] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.590292][ T4225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.676019][ T4230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 48.678012][ T4231] $Hÿ: renamed from bond0 (while UP) [ 48.689607][ T3906] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 48.697828][ T3906] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 48.705247][ T3906] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 48.714423][ T4231] $Hÿ: entered promiscuous mode [ 48.719451][ T4231] bond_slave_0: entered promiscuous mode [ 48.725171][ T4231] bond_slave_1: entered promiscuous mode [ 48.735447][ T3906] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 48.779983][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.794685][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.885879][ T4240] netlink: 36 bytes leftover after parsing attributes in process `syz.2.170'. [ 48.913593][ T4241] netlink: 'syz.1.168': attribute type 4 has an invalid length. [ 48.926853][ T4240] loop2: detected capacity change from 0 to 512 [ 48.942376][ T4240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.037821][ T4235] lo speed is unknown, defaulting to 1000 [ 49.069304][ T4235] wg1 speed is unknown, defaulting to 1000 [ 49.075586][ T4235] lo speed is unknown, defaulting to 1000 [ 49.195151][ T4243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.211911][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.236311][ T4243] veth0_to_team: entered promiscuous mode [ 49.242224][ T4243] veth0_to_team: entered allmulticast mode [ 49.288797][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 49.327700][ T4255] netlink: 'syz.1.175': attribute type 21 has an invalid length. [ 49.339218][ T4262] loop2: detected capacity change from 0 to 256 [ 49.358893][ T4255] loop1: detected capacity change from 0 to 1024 [ 49.369338][ T4255] EXT4-fs: Ignoring removed bh option [ 49.376831][ T4255] EXT4-fs: inline encryption not supported [ 49.386321][ T4255] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.398182][ T4255] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.175: lblock 2 mapped to illegal pblock 2 (length 1) [ 49.413945][ T4255] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.175: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.428193][ T4255] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.175: Failed to acquire dquot type 0 [ 49.439568][ T4255] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 49.449264][ T4262] netlink: '+}[@': attribute type 13 has an invalid length. [ 49.450160][ T4255] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.175: mark_inode_dirty error [ 49.468132][ T4255] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 49.478491][ T4255] EXT4-fs (loop1): 1 orphan inode deleted [ 49.484991][ T4255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.497863][ T3526] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.515919][ T3526] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 49.516373][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.534382][ T4262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.539689][ T4267] netlink: 'syz.4.176': attribute type 4 has an invalid length. [ 49.541741][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.556314][ T4262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.565223][ T4255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.574922][ T4255] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.175: Invalid inode table block 1 in block_group 0 [ 49.591192][ T4262] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 49.601543][ T4255] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 49.612186][ T4262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.627627][ T3906] lo speed is unknown, defaulting to 1000 [ 49.634596][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 49.635427][ T4255] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz.1.175: mark_inode_dirty error [ 49.744605][ T4272] loop2: detected capacity change from 0 to 1024 [ 49.766449][ T4272] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 49.776249][ T4272] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 49.789794][ T4272] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 49.800865][ T4272] EXT4-fs error (device loop2): ext4_get_journal_inode:5800: inode #5: comm syz.2.179: unexpected bad inode w/o EXT4_IGET_BAD [ 49.815180][ T4272] EXT4-fs (loop2): no journal found [ 49.820418][ T4272] EXT4-fs (loop2): can't get journal size [ 49.833214][ T3367] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 49.840707][ T3367] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 49.843566][ T4272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.848085][ T3367] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 49.887778][ T4272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.179'. [ 49.898080][ T4272] bridge_slave_1: left allmulticast mode [ 49.903834][ T4272] bridge_slave_1: left promiscuous mode [ 49.909545][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.919033][ T4272] bridge_slave_0: left allmulticast mode [ 49.924766][ T4272] bridge_slave_0: left promiscuous mode [ 49.930656][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.938339][ T3367] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 49.973853][ T2294] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 50.001596][ T4283] hsr_slave_0: left promiscuous mode [ 50.012530][ T4283] hsr_slave_1: left promiscuous mode [ 50.039367][ T4289] loop1: detected capacity change from 0 to 512 [ 50.053625][ T4289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.081783][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.163275][ T4298] loop3: detected capacity change from 0 to 1024 [ 50.165983][ T4295] $Hÿ: left promiscuous mode [ 50.173552][ T4298] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 50.174497][ T4295] bond_slave_0: left promiscuous mode [ 50.189806][ T4295] bond_slave_1: left promiscuous mode [ 50.201697][ T4295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.202034][ T4298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.242264][ T4298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.250852][ T4295] veth0_to_team: entered promiscuous mode [ 50.257076][ T4295] veth0_to_team: entered allmulticast mode [ 50.388090][ T3405] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 50.395679][ T3405] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 50.403124][ T3405] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 50.419853][ T3405] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 50.700831][ T4320] lo speed is unknown, defaulting to 1000 [ 50.753618][ T4320] wg1 speed is unknown, defaulting to 1000 [ 50.760159][ T4320] lo speed is unknown, defaulting to 1000 [ 51.038972][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.075694][ T4323] loop1: detected capacity change from 0 to 512 [ 51.083372][ T4323] EXT4-fs: Ignoring removed nobh option [ 51.102462][ T4323] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.191: corrupted inode contents [ 51.127549][ T4323] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.191: mark_inode_dirty error [ 51.139430][ T4323] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.191: corrupted inode contents [ 51.152371][ T4323] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.191: mark_inode_dirty error [ 51.165182][ T4323] __quota_error: 876 callbacks suppressed [ 51.165196][ T4323] Quota error (device loop1): write_blk: dquota write failed [ 51.179419][ T4323] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 51.189492][ T4323] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.191: Failed to acquire dquot type 0 [ 51.202095][ T4323] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.191: corrupted inode contents [ 51.214282][ T4323] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.191: mark_inode_dirty error [ 51.230657][ T4323] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.191: corrupted inode contents [ 51.300340][ T29] audit: type=1326 audit(1756666351.427:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 51.347682][ T29] audit: type=1326 audit(1756666351.447:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 51.353335][ T4327] loop2: detected capacity change from 0 to 2048 [ 51.371006][ T29] audit: type=1326 audit(1756666351.447:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 51.400579][ T29] audit: type=1326 audit(1756666351.447:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 51.423866][ T29] audit: type=1326 audit(1756666351.447:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 51.440861][ T4323] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.191: mark_inode_dirty error [ 51.447216][ T29] audit: type=1326 audit(1756666351.447:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd745adebe9 code=0x7ffc0000 [ 51.461276][ T3398] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 51.481640][ T29] audit: type=1326 audit(1756666351.447:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd745adec23 code=0x7ffc0000 [ 51.481703][ T29] audit: type=1326 audit(1756666351.457:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861c1ebe9 code=0x7ffc0000 [ 51.537822][ T4323] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.191: corrupted inode contents [ 51.554771][ T3398] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 51.620077][ T4323] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 51.651119][ T4327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 51.672539][ T4323] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.191: corrupted inode contents [ 51.697218][ T4323] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.191: mark_inode_dirty error [ 51.723938][ T4323] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 51.760450][ T4323] EXT4-fs (loop1): 1 truncate cleaned up [ 51.771145][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 51.773187][ T4323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.814125][ T4323] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.897711][ T4323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.934176][ T3526] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 52.012187][ T4349] SELinux: security_context_str_to_sid () failed with errno=-22 [ 52.242727][ T4359] netlink: 'syz.4.202': attribute type 4 has an invalid length. [ 52.296644][ T3904] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 52.337808][ T4370] loop4: detected capacity change from 0 to 1024 [ 52.343904][ T4367] fido_id[4367]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 52.357764][ T4370] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.377482][ T4360] __nla_validate_parse: 4 callbacks suppressed [ 52.377495][ T4360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.197'. [ 52.411958][ T4360] bridge_slave_1: left allmulticast mode [ 52.417627][ T4360] bridge_slave_1: left promiscuous mode [ 52.423328][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.485409][ T4370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.503422][ T4360] bridge_slave_0: left allmulticast mode [ 52.509088][ T4360] bridge_slave_0: left promiscuous mode [ 52.514766][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.922539][ T4380] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 52.976973][ T4384] IPv6: Can't replace route, no match found [ 53.118520][ T3405] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 53.153237][ T4389] loop2: detected capacity change from 0 to 512 [ 53.154517][ T4395] netlink: 'syz.1.212': attribute type 13 has an invalid length. [ 53.167650][ T4389] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 53.177389][ T4389] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 53.187361][ T4389] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm +}[@: Invalid inode table block 1 in block_group 0 [ 53.202209][ T4389] EXT4-fs (loop2): Remounting filesystem read-only [ 53.208726][ T4389] EXT4-fs (loop2): get root inode failed [ 53.214432][ T4389] EXT4-fs (loop2): mount failed [ 53.220324][ T4391] netlink: 148 bytes leftover after parsing attributes in process `syz.1.212'. [ 53.245564][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.256498][ T4389] loop2: detected capacity change from 0 to 512 [ 53.272690][ T4389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.273237][ T4400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4400 comm=syz.1.212 [ 53.293915][ T4389] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.342595][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.352444][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.362702][ T4395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.400962][ T4400] netlink: 360 bytes leftover after parsing attributes in process `syz.1.212'. [ 53.427309][ T3405] wg1 speed is unknown, defaulting to 1000 [ 53.430897][ T3526] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.433325][ T3405] syz2: Port: 1 Link DOWN [ 53.442050][ T3526] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.464496][ T3526] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.473503][ T3526] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.483932][ T4414] netlink: 44 bytes leftover after parsing attributes in process `syz.2.215'. [ 53.493412][ T4411] netlink: 44 bytes leftover after parsing attributes in process `syz.2.215'. [ 53.519828][ T4413] netlink: 'syz.0.217': attribute type 13 has an invalid length. [ 53.532867][ T4413] 0ªî{X¹¦: refused to change device tx_queue_len [ 53.539925][ T4413] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 54.158767][ T4421] loop3: detected capacity change from 0 to 512 [ 54.163407][ T4416] loop4: detected capacity change from 0 to 1024 [ 54.178169][ T4421] EXT4-fs: Ignoring removed oldalloc option [ 54.191198][ T4416] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 54.201036][ T4416] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 54.210968][ T4416] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 54.218997][ T4423] team0 (unregistering): Port device team_slave_0 removed [ 54.230968][ T4423] team0 (unregistering): Port device team_slave_1 removed [ 54.244764][ T4421] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.221: Parent and EA inode have the same ino 15 [ 54.257914][ T4416] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #5: comm syz.4.218: unexpected bad inode w/o EXT4_IGET_BAD [ 54.272057][ T4416] EXT4-fs (loop4): no journal found [ 54.277282][ T4416] EXT4-fs (loop4): can't get journal size [ 54.282364][ T4426] syzkaller0: entered allmulticast mode [ 54.289279][ T4416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.320206][ T4421] EXT4-fs (loop3): Remounting filesystem read-only [ 54.326877][ T4421] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 54.335879][ T4421] EXT4-fs (loop3): 1 orphan inode deleted [ 54.342054][ T4421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.365353][ T4421] netlink: 56 bytes leftover after parsing attributes in process `syz.3.221'. [ 54.382912][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.218'. [ 54.391974][ T4416] bridge_slave_1: left allmulticast mode [ 54.397626][ T4416] bridge_slave_1: left promiscuous mode [ 54.403481][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.415026][ T4421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4421 comm=syz.3.221 [ 54.440936][ T4416] bridge_slave_0: left allmulticast mode [ 54.446614][ T4416] bridge_slave_0: left promiscuous mode [ 54.452316][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.490739][ T4420] syzkaller0: left allmulticast mode [ 54.513538][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.540795][ T4439] netlink: 14 bytes leftover after parsing attributes in process `syz.2.223'. [ 54.558570][ T4439] hsr_slave_0: left promiscuous mode [ 54.574753][ T4439] hsr_slave_1: left promiscuous mode [ 54.616911][ T4440] lo speed is unknown, defaulting to 1000 [ 54.671555][ T4440] wg1 speed is unknown, defaulting to 1000 [ 54.677769][ T4440] lo speed is unknown, defaulting to 1000 [ 54.890753][ T4441] smc: net device bond0 applied user defined pnetid SYZ0 [ 54.899025][ T4441] smc: net device bond0 erased user defined pnetid SYZ0 [ 54.944277][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.987464][ T4449] IPv6: Can't replace route, no match found [ 55.035227][ T3398] hid_parser_main: 8 callbacks suppressed [ 55.035315][ T3398] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 55.048507][ T3398] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 55.055912][ T3398] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 55.077397][ T4449] loop4: detected capacity change from 0 to 1764 [ 55.095262][ T3398] hid-generic 0000:0004:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 55.242461][ T4458] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 55.277245][ T4462] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 55.277245][ T4462] program syz.3.232 not setting count and/or reply_len properly [ 55.302115][ T4462] pimreg: entered allmulticast mode [ 55.309245][ T4462] pimreg: left allmulticast mode [ 55.382335][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 55.400368][ T4467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4467 comm=syz.1.233 [ 55.489640][ T4473] pimreg: entered allmulticast mode [ 55.518277][ T4471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.527428][ T4471] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.527836][ T4476] netlink: 'syz.4.237': attribute type 10 has an invalid length. [ 55.542132][ T4471] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.558188][ T4473] pimreg: left allmulticast mode [ 55.563554][ T4478] loop3: detected capacity change from 0 to 512 [ 55.585547][ T4478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.609362][ T4480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.614284][ T4478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.629088][ T4478] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.645625][ T4474] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.236: corrupted xattr block 19: overlapping e_value [ 55.650031][ T4471] veth0_to_team: entered promiscuous mode [ 55.664974][ T4471] veth0_to_team: entered allmulticast mode [ 55.670767][ T4474] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 55.670801][ T4474] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.236: corrupted xattr block 19: overlapping e_value [ 55.721078][ T4474] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 55.730435][ T4474] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.236: corrupted xattr block 19: overlapping e_value [ 55.765527][ T4474] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.236: corrupted xattr block 19: overlapping e_value [ 55.780807][ T4474] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 55.790589][ T4474] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.236: corrupted xattr block 19: overlapping e_value [ 55.804685][ T4474] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.236: corrupted xattr block 19: overlapping e_value [ 55.819025][ T4474] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 55.829055][ T4474] EXT4-fs error (device loop3): ext4_get_inode_usage:884: inode #15: comm syz.3.236: corrupted xattr block 19: overlapping e_value [ 55.962017][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.125134][ T4511] lo speed is unknown, defaulting to 1000 [ 56.179523][ T4511] wg1 speed is unknown, defaulting to 1000 [ 56.186066][ T4511] lo speed is unknown, defaulting to 1000 [ 56.595405][ T4520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4520 comm=syz.4.246 [ 56.624656][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 56.624665][ T29] audit: type=1326 audit(1756666356.747:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861c1ebe9 code=0x7ffc0000 [ 56.677493][ T4520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4520 comm=syz.4.246 [ 56.679745][ T29] audit: type=1326 audit(1756666356.767:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fd861c1ebe9 code=0x7ffc0000 [ 56.712977][ T29] audit: type=1326 audit(1756666356.767:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861c1ebe9 code=0x7ffc0000 [ 56.736355][ T29] audit: type=1326 audit(1756666356.767:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd861c1ebe9 code=0x7ffc0000 [ 56.759727][ T29] audit: type=1326 audit(1756666356.767:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861c1ebe9 code=0x7ffc0000 [ 56.783053][ T29] audit: type=1326 audit(1756666356.767:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fd861c1ebe9 code=0x7ffc0000 [ 56.806366][ T29] audit: type=1326 audit(1756666356.797:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861c1ebe9 code=0x7ffc0000 [ 56.829869][ T29] audit: type=1326 audit(1756666356.797:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd861c1ebe9 code=0x7ffc0000 [ 56.853237][ T29] audit: type=1326 audit(1756666356.797:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd861c1ebe9 code=0x7ffc0000 [ 56.876758][ T29] audit: type=1326 audit(1756666356.797:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4516 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd861c1ebe9 code=0x7ffc0000 [ 56.900641][ T4501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.952050][ T4526] IPv6: Can't replace route, no match found [ 56.998866][ T4526] loop2: detected capacity change from 0 to 1764 [ 57.033131][ T4530] pim6reg1: entered promiscuous mode [ 57.092242][ T3398] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 57.099766][ T3398] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 57.107148][ T3398] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 57.116868][ T4534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.135961][ T3398] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 57.195598][ T4540] fido_id[4540]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.220290][ T4543] capability: warning: `syz.0.248' uses 32-bit capabilities (legacy support in use) [ 57.231211][ T4542] IPv6: Can't replace route, no match found [ 57.284248][ T4522] netlink: 'syz.0.248': attribute type 298 has an invalid length. [ 57.332443][ T4551] loop2: detected capacity change from 0 to 1764 [ 57.342099][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.349734][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.500429][ T4563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4563 comm=syz.2.261 [ 57.579874][ T4566] loop2: detected capacity change from 0 to 8192 [ 57.663571][ T4567] lo speed is unknown, defaulting to 1000 [ 57.717351][ T4567] wg1 speed is unknown, defaulting to 1000 [ 57.723690][ T4567] lo speed is unknown, defaulting to 1000 [ 57.956615][ T3605] loop2: p3 p4 < > [ 57.977374][ T3605] loop2: p3 size 33554432 extends beyond EOD, truncated [ 57.996690][ T4566] loop2: p3 p4 < > [ 58.008991][ T4566] loop2: p3 size 33554432 extends beyond EOD, truncated [ 58.036724][ T4570] lo speed is unknown, defaulting to 1000 [ 58.060927][ T4573] can0: slcan on ttyS3. [ 58.129748][ T4573] can0 (unregistered): slcan off ttyS3. [ 58.229969][ T1035] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 58.237439][ T1035] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 58.244949][ T1035] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 58.256774][ T1035] hid-generic 0000:0004:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 58.316818][ T4570] wg1 speed is unknown, defaulting to 1000 [ 58.325293][ T4600] fido_id[4600]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.374437][ T4570] lo speed is unknown, defaulting to 1000 [ 58.543498][ T2993] loop2: p3 p4 < > [ 58.547359][ T2993] loop2: p3 size 33554432 extends beyond EOD, truncated [ 58.581356][ T4620] __nla_validate_parse: 7 callbacks suppressed [ 58.581367][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 58.631120][ T4620] netlink: 'syz.4.269': attribute type 21 has an invalid length. [ 58.642597][ T3377] udevd[3377]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 58.657361][ T3605] udevd[3605]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 58.674798][ T4624] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.693227][ T4620] loop4: detected capacity change from 0 to 1024 [ 58.707588][ T4620] EXT4-fs: Ignoring removed bh option [ 58.725106][ T4620] EXT4-fs: inline encryption not supported [ 58.730855][ T4627] lo speed is unknown, defaulting to 1000 [ 58.756022][ T4631] netlink: 24 bytes leftover after parsing attributes in process `syz.1.272'. [ 58.768246][ T4624] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.772037][ T4620] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.799173][ T4620] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.269: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.814413][ T4637] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4637 comm=syz.1.272 [ 58.817922][ T4627] wg1 speed is unknown, defaulting to 1000 [ 58.833555][ T4620] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.269: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.847800][ T4627] lo speed is unknown, defaulting to 1000 [ 58.847931][ T4620] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.269: Failed to acquire dquot type 0 [ 58.871111][ T4624] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.881314][ T4620] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 58.903973][ T4620] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.269: mark_inode_dirty error [ 58.916924][ T4620] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 58.927998][ T4620] EXT4-fs (loop4): 1 orphan inode deleted [ 58.939370][ T3526] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.954126][ T3526] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 58.967391][ T4620] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.269: Invalid inode table block 1 in block_group 0 [ 58.980798][ T4624] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.981025][ T4620] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 59.000693][ T4620] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz.4.269: mark_inode_dirty error [ 59.048063][ T2294] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.059228][ T3526] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.076154][ T1382] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.137945][ T4648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.153694][ T1382] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.165759][ T4659] loop2: detected capacity change from 0 to 512 [ 59.206102][ T4659] EXT4-fs: Ignoring removed nobh option [ 59.223454][ T4661] loop4: detected capacity change from 0 to 512 [ 59.243118][ T4661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.262512][ T4659] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.279: corrupted inode contents [ 59.278278][ T4661] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.288984][ T4659] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.279: mark_inode_dirty error [ 59.303112][ T4661] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.281: corrupted xattr block 19: overlapping e_value [ 59.317762][ T4659] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.279: corrupted inode contents [ 59.330202][ T4659] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.279: mark_inode_dirty error [ 59.341347][ T4661] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 59.341645][ T4659] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.279: Failed to acquire dquot type 0 [ 59.356775][ T4661] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.281: corrupted xattr block 19: overlapping e_value [ 59.375814][ T4668] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.281: corrupted xattr block 19: overlapping e_value [ 59.376840][ T4659] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.279: corrupted inode contents [ 59.389770][ T4661] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 59.403424][ T4659] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.279: mark_inode_dirty error [ 59.421744][ T4668] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 59.429732][ T4661] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.281: corrupted xattr block 19: overlapping e_value [ 59.431488][ T4659] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.279: corrupted inode contents [ 59.457061][ T4659] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.279: mark_inode_dirty error [ 59.468781][ T4659] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.279: corrupted inode contents [ 59.482149][ T4671] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.281: corrupted xattr block 19: overlapping e_value [ 59.482651][ T4659] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 59.505080][ T4659] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.279: corrupted inode contents [ 59.517144][ T4659] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.279: mark_inode_dirty error [ 59.528738][ T4671] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.281: corrupted xattr block 19: overlapping e_value [ 59.529908][ T4659] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 59.546846][ T4670] lo speed is unknown, defaulting to 1000 [ 59.552182][ T4659] EXT4-fs (loop2): 1 truncate cleaned up [ 59.564508][ T4659] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.575851][ T4671] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 59.623075][ T4670] wg1 speed is unknown, defaulting to 1000 [ 59.629571][ T4670] lo speed is unknown, defaulting to 1000 [ 59.669193][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 59.687530][ T4675] loop4: detected capacity change from 0 to 164 [ 59.698341][ T4675] iso9660: Unknown parameter '' [ 59.706051][ T4675] siw: device registration error -23 [ 59.766979][ T4679] loop4: detected capacity change from 0 to 512 [ 59.773360][ T4677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4677 comm=syz.2.284 [ 59.796252][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 59.825707][ T4677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.837030][ T4679] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.854012][ T4679] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.285: corrupted inode contents [ 59.855427][ T4677] macvlan2: entered promiscuous mode [ 59.866178][ T4679] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.285: mark_inode_dirty error [ 59.871100][ T4677] macvlan2: entered allmulticast mode [ 59.872525][ T4677] bond0: entered promiscuous mode [ 59.883014][ T4679] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.285: corrupted inode contents [ 59.895250][ T4677] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 59.911943][ T4679] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.285: mark_inode_dirty error [ 59.924384][ T4677] bond0: left promiscuous mode [ 60.796680][ T4713] $Hÿ: renamed from bond0 (while UP) [ 60.807115][ T4713] $Hÿ: entered promiscuous mode [ 60.812201][ T4713] bond_slave_0: entered promiscuous mode [ 60.818115][ T4713] bond_slave_1: entered promiscuous mode [ 60.830830][ T4716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.872378][ T4716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.942358][ T4716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.002592][ T4716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.066663][ T3526] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.078001][ T3526] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.089084][ T3526] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.110267][ T4724] loop4: detected capacity change from 0 to 512 [ 61.116942][ T3430] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.125950][ T4724] EXT4-fs: Ignoring removed nobh option [ 61.148981][ T4727] netlink: 56 bytes leftover after parsing attributes in process `syz.2.298'. [ 61.159528][ T4724] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.296: corrupted inode contents [ 61.188071][ T4724] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.296: mark_inode_dirty error [ 61.194880][ T4727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4727 comm=syz.2.298 [ 61.213123][ T4724] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.296: corrupted inode contents [ 61.229385][ T4724] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.296: mark_inode_dirty error [ 61.241261][ T4724] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.296: Failed to acquire dquot type 0 [ 61.255283][ T4724] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.296: corrupted inode contents [ 61.267756][ T4724] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.296: mark_inode_dirty error [ 61.278176][ T4733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4733 comm=syz.3.299 [ 61.280355][ T4724] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.296: corrupted inode contents [ 61.292012][ T4733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 61.304198][ T4724] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.296: mark_inode_dirty error [ 61.317800][ T4733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.323998][ T4724] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.296: corrupted inode contents [ 61.339871][ T4733] macvlan2: entered promiscuous mode [ 61.342252][ T4724] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 61.346653][ T4733] macvlan2: entered allmulticast mode [ 61.355331][ T4724] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.296: corrupted inode contents [ 61.361791][ T4733] bond1: entered promiscuous mode [ 61.373299][ T4724] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.296: mark_inode_dirty error [ 61.377655][ T4733] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 61.389096][ T4724] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 61.404476][ T4733] bond1: left promiscuous mode [ 61.404722][ T4724] EXT4-fs (loop4): 1 truncate cleaned up [ 61.415580][ T4724] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.461535][ T4744] IPv6: Can't replace route, no match found [ 61.473261][ T4742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=4742 comm=syz.4.300 [ 61.485995][ T4742] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 61.567829][ T4751] loop3: detected capacity change from 0 to 512 [ 61.580438][ T4751] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #3: comm syz.3.301: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 61.598675][ T4751] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.301: Bad quota inode: 3, type: 0 [ 61.610020][ T4751] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 61.624849][ T4751] EXT4-fs (loop3): mount failed [ 61.645993][ T29] kauditd_printk_skb: 615 callbacks suppressed [ 61.646002][ T29] audit: type=1326 audit(1756666361.767:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 61.675582][ T29] audit: type=1326 audit(1756666361.767:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 61.699907][ T29] audit: type=1326 audit(1756666361.767:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 61.723640][ T29] audit: type=1326 audit(1756666361.767:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 61.747140][ T29] audit: type=1326 audit(1756666361.767:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 61.770424][ T29] audit: type=1326 audit(1756666361.767:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 61.793843][ T29] audit: type=1326 audit(1756666361.767:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 61.817275][ T29] audit: type=1326 audit(1756666361.767:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 61.840587][ T29] audit: type=1326 audit(1756666361.767:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 61.863782][ T29] audit: type=1326 audit(1756666361.767:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4745 comm="syz.3.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fe0cebe9 code=0x7ffc0000 [ 62.088867][ T4768] netlink: 'syz.4.310': attribute type 13 has an invalid length. [ 62.190036][ T4774] netlink: 148 bytes leftover after parsing attributes in process `syz.4.310'. [ 62.253050][ T4777] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4777 comm=syz.4.310 [ 62.365013][ T4779] netlink: 360 bytes leftover after parsing attributes in process `syz.4.310'. [ 62.416494][ T4782] loop3: detected capacity change from 0 to 512 [ 62.444065][ T4782] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.628284][ T4793] siw: device registration error -23 [ 62.634963][ T4795] netlink: 3 bytes leftover after parsing attributes in process `syz.2.319'. [ 62.644337][ T4793] 9pnet_fd: Insufficient options for proto=fd [ 62.651147][ T4790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4790 comm=syz.1.315 [ 62.670488][ T4790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.315'. [ 62.687332][ T4790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.696460][ T4795] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.710117][ T4790] macvlan2: entered promiscuous mode [ 62.715425][ T4790] macvlan2: entered allmulticast mode [ 62.726362][ T4790] bond0: entered promiscuous mode [ 62.746444][ T4790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 62.754716][ T4790] bond0: left promiscuous mode [ 62.769053][ T4795] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.831519][ T4795] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.892843][ T4811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=4811 comm=syz.1.331 [ 62.907373][ T4795] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.927773][ T4811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.939479][ T4811] macvlan2: entered promiscuous mode [ 62.944867][ T4811] macvlan2: entered allmulticast mode [ 62.952202][ T4811] bond1: entered promiscuous mode [ 62.957474][ T4811] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 62.965480][ T4811] bond1: left promiscuous mode [ 62.980298][ T1382] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.995569][ T1382] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.019926][ T1382] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.032554][ T1382] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.557487][ T4833] lo speed is unknown, defaulting to 1000 [ 63.610246][ T4833] wg1 speed is unknown, defaulting to 1000 [ 63.617058][ T4833] lo speed is unknown, defaulting to 1000 [ 64.240951][ T4849] netlink: 'syz.3.329': attribute type 13 has an invalid length. [ 64.297172][ T4856] __nla_validate_parse: 1 callbacks suppressed [ 64.297231][ T4856] netlink: 148 bytes leftover after parsing attributes in process `syz.3.329'. [ 64.363308][ T4849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.371986][ T4862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4862 comm=syz.3.329 [ 64.566262][ T4849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.689708][ T4855] ================================================================== [ 64.697799][ T4855] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 64.706144][ T4855] [ 64.708460][ T4855] write to 0xffff88811a33de04 of 4 bytes by task 4864 on cpu 1: [ 64.716080][ T4855] inode_update_timestamps+0x147/0x270 [ 64.721536][ T4855] file_update_time+0x20e/0x2b0 [ 64.726389][ T4855] shmem_file_write_iter+0x9c/0xf0 [ 64.731494][ T4855] iter_file_splice_write+0x663/0xa60 [ 64.736868][ T4855] direct_splice_actor+0x153/0x2a0 [ 64.741976][ T4855] splice_direct_to_actor+0x30f/0x680 [ 64.747340][ T4855] do_splice_direct+0xda/0x150 [ 64.752095][ T4855] do_sendfile+0x380/0x650 [ 64.756517][ T4855] __x64_sys_sendfile64+0x105/0x150 [ 64.761709][ T4855] x64_sys_call+0x2bb0/0x2ff0 [ 64.766376][ T4855] do_syscall_64+0xd2/0x200 [ 64.770873][ T4855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.776753][ T4855] [ 64.779065][ T4855] read to 0xffff88811a33de04 of 4 bytes by task 4855 on cpu 0: [ 64.786590][ T4855] atime_needs_update+0x2a8/0x3e0 [ 64.791612][ T4855] touch_atime+0x4a/0x340 [ 64.795935][ T4855] shmem_file_read_iter+0x477/0x540 [ 64.801133][ T4855] copy_splice_read+0x442/0x660 [ 64.805970][ T4855] splice_direct_to_actor+0x290/0x680 [ 64.811337][ T4855] do_splice_direct+0xda/0x150 [ 64.816092][ T4855] do_sendfile+0x380/0x650 [ 64.820510][ T4855] __x64_sys_sendfile64+0x105/0x150 [ 64.825708][ T4855] x64_sys_call+0x2bb0/0x2ff0 [ 64.830378][ T4855] do_syscall_64+0xd2/0x200 [ 64.834887][ T4855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.840777][ T4855] [ 64.843088][ T4855] value changed: 0x302811ef -> 0x30c0a872 [ 64.848789][ T4855] [ 64.851099][ T4855] Reported by Kernel Concurrency Sanitizer on: [ 64.857250][ T4855] CPU: 0 UID: 0 PID: 4855 Comm: syz.0.334 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.866874][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.876911][ T4855] ================================================================== [ 65.263521][ T3526] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.279660][ T3526] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.290230][ T3526] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.309908][ T3526] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.331769][ T4849] netlink: 360 bytes leftover after parsing attributes in process `syz.3.329'.