last executing test programs: 5.846982441s ago: executing program 2 (id=73): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008004503005c00000000002f907800000000e000000124806558000000000000100008000000000086dd86dd88be37000000100000000100000000000015fb"], 0x0) 5.808007545s ago: executing program 4 (id=74): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 5.494583322s ago: executing program 0 (id=76): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f00000000c0)='./mnt\x00', 0x182) r1 = openat(0xffffffffffffff9c, 0x0, 0x181242, 0x0) pwrite64(r0, &(0x7f0000000100)="95", 0x1, 0x2) pwrite64(r1, &(0x7f00000000c0)='a', 0x1, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x4000000000000, 0x0, 0x0, 0x1}) 5.26777355s ago: executing program 3 (id=77): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x4090) read$FUSE(r0, &(0x7f0000002340)={0x2020}, 0x2020) 5.02931137s ago: executing program 2 (id=78): socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x1, 0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0) 4.695555105s ago: executing program 0 (id=79): pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0x2020) 4.385167432s ago: executing program 3 (id=80): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x4480, &(0x7f0000000080)={[{@shortname_mixed}, {@utf8no}, {@utf8}, {@utf8no}]}, 0x83, 0x23a, &(0x7f0000000280)="$eJzs2s9rHGUYB/BnYkprSroRf9GC+KIHFWRocvbQoC2IC4p2hSpIp2ZWlx13w84SWBGbk179EzyLR2+C9OglIP4FHrzlkmMP4kiyMd2GihSxG+3nc9kH3v2yz8u7vPMcZveVrz7pd+u8W4xjIcti4VJsx+0sVmIh/rQdL71w7cdn3rn23hvr7fblt1O6sn51dS2ldO7ZH97/7Nvnbo3Pvvvdue9Px87KB7t7a7/uPLVzfvf3qx/36tSr02A4TkW6MRyOixtVmTZ6dT9P6a2qLOoy9QZ1ObprvVsNNzcnqRhsLC9tjsq6TsVgkvrlJI2HaTyapOKjojdIeZ6n5aXgn+h8c7tpYq85dT2apnn06zh7K5Z/iVZkj6Xs8UvZk9ezp7ez83tN05p3q/wrnP/DbeZSPxNRfbnV2epMP6frr/0UvaiijIvRit9i/29yaFpfeb19+WI68HJ8Ud08zN881XnkIL/ePcyvRitW7p1fnebTbH6rczqWZvNr0Yon7p1fO57ff3R1zsSLz8/k82jFzx/GMKrYiP3snfznqym9+mb72O9fOPgeAMD/TZ6OrNw9/0zntzz/q/Vp/mi++vv58Nh8tRgXFue7dyLqyaf9oqrKkeKoWIwT0cZ99jx1UvpR/NeLOV9MPBB3Dn3enQAAAAAAAAAAAHA/HsTrhPPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLL9EQAA//8VvdA9") socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x161842, 0x0) 4.289683569s ago: executing program 4 (id=81): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000feffff", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 4.244606186s ago: executing program 1 (id=82): syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$overlay(0x0, 0x0, 0x0, 0x200008, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 3.995832374s ago: executing program 2 (id=83): r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0x4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006140)=@newchain={0x20c8, 0x64, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0x7, 0x5}, {0x3, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xaf, 0xf}}, @filter_kind_options=@f_fw={{0x7}, {0x2094, 0x2, [@TCA_FW_POLICE={0x1014, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x6, 0xd, 0xfffffff8, 0x6, 0x80000001, 0x8, 0xd5bd, 0x90, 0x9, 0x80, 0x7ff, 0x8, 0x5, 0xfffffbff, 0x7, 0x1, 0xf, 0xe, 0xca67, 0x7, 0xd406a961, 0x0, 0x0, 0xa18, 0xe0000000, 0xce64, 0x0, 0xffffffff, 0x0, 0x4, 0x8, 0x7ff, 0xfffffffa, 0x40, 0x8, 0x7, 0x7a, 0x7, 0x1000, 0x0, 0x4e, 0x6e0, 0x8, 0xa, 0x4, 0x1, 0x3, 0x6, 0x5, 0x9b49, 0x8, 0x5, 0x8e8, 0x7, 0x8, 0x7f, 0x1, 0x3, 0x5762a229, 0xffffffff, 0x3, 0x1, 0x12e, 0xfffffffb, 0x0, 0x3, 0xfffffff8, 0x5, 0xffff, 0xe437, 0x1, 0x7ff, 0xc0, 0x650b6ce0, 0x4, 0x0, 0x5, 0x6, 0x8000, 0x7e, 0x1ff, 0xfffffff9, 0x4, 0x4, 0x800, 0x5, 0x6, 0x10001, 0x11, 0x7, 0x4, 0xffffffff, 0x6, 0x81, 0x6, 0x200, 0x0, 0x2, 0x1, 0x3, 0xd5b, 0x8, 0xff, 0x6, 0x9, 0x8, 0x0, 0x825, 0xadc1, 0x0, 0x1, 0x4, 0x8, 0xd, 0x6, 0xf2, 0x100, 0x74, 0x2, 0x4, 0xfffffff9, 0x3, 0x8, 0x9, 0x5da, 0x8, 0xb, 0xfffffffb, 0xffff357c, 0x7, 0x9, 0x1ff, 0x6d3, 0x8, 0x800, 0x3, 0xce6, 0xffff, 0x4, 0x1, 0x3454, 0x7, 0x1, 0x7fa, 0x0, 0x1, 0x7f, 0xd05f, 0x4, 0x40, 0x9, 0x2, 0x100, 0xed, 0x9, 0x45, 0x5, 0x1, 0x8, 0xcf4e, 0x80000000, 0x3, 0x10000000, 0x8, 0x5, 0x10, 0x800, 0xfffffffc, 0x5, 0x6, 0x978f, 0x6, 0x0, 0x9, 0x2, 0x1, 0x5, 0x3, 0x3, 0x1, 0x4, 0x2bd, 0xcf, 0x8076, 0x8, 0x4a, 0x1, 0xb6, 0x1, 0x3, 0xd08, 0x5, 0x1, 0x0, 0x9, 0x9, 0x9, 0xba3, 0x5, 0x80000000, 0x6, 0x80000001, 0x9, 0x4, 0x9, 0x3, 0x6, 0x5, 0x1, 0xa9ed, 0x2, 0x5, 0xfffffffa, 0x6, 0x2, 0x7, 0x7fff, 0x9, 0x1c, 0x1, 0x5, 0x3, 0x3, 0x7, 0x8000, 0x8, 0x5, 0x0, 0x0, 0x68, 0x0, 0x9, 0x1, 0xe707, 0x6, 0x9, 0xfffff000, 0x3, 0x4, 0x1d, 0x6, 0x6d, 0x9, 0x8, 0xffff, 0x4, 0x800, 0x1, 0xe5c, 0x0, 0xad9, 0x6, 0x4, 0x4, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x401, 0x1, 0x9, 0x9, 0x3, 0xffffffff, 0x6, 0x3, 0x3, 0x5, 0x40, 0xfff, 0x0, 0xffffffff, 0x3, 0x0, 0x8f3, 0x52, 0xffffffec, 0x311, 0x3, 0x20, 0x7, 0x101, 0x2, 0x800, 0xa141, 0x11df, 0x1d31, 0x6, 0x8, 0x0, 0x5, 0x5, 0x7fffffff, 0x5, 0x1000, 0x22, 0x8, 0x3, 0x8, 0xfffffff8, 0xe1, 0xffff, 0xfffffffe, 0x6, 0x6, 0x5, 0x9, 0xffffffff, 0x679c, 0x5, 0x0, 0x55f, 0x1000, 0xfffffff9, 0x7f, 0x5, 0x3, 0x0, 0x36a, 0x9, 0x1, 0x81, 0x0, 0x5, 0x5, 0x5, 0x5, 0x3, 0x9, 0x7, 0x6, 0xd, 0xffffa5ca, 0x665, 0x7, 0x101, 0x200, 0x3, 0xd, 0x6, 0x1, 0x80000001, 0x5, 0x459, 0x0, 0x7, 0x7, 0x8, 0xfffff801, 0xffffff7f, 0x4, 0x401, 0x0, 0x9, 0x1cf6, 0x80, 0x200, 0x6, 0x7, 0x9, 0xffffff1f, 0x4, 0x1, 0x5, 0x10000, 0xe, 0x0, 0xff, 0x10d, 0x2, 0x7, 0x6, 0x19, 0x0, 0x93e7, 0x200, 0x1, 0xa, 0x2, 0x7, 0x10000, 0xffff1aaf, 0xd, 0x182, 0xfff, 0x9, 0x4, 0x1, 0x80000001, 0x8, 0x14000, 0x10, 0xb, 0x1, 0x2, 0x0, 0x40, 0x3, 0x3, 0x6, 0x7, 0x6c60, 0x2, 0xff, 0xce, 0x7, 0x88, 0x400, 0x7233, 0xfff, 0x1, 0xc, 0x6, 0x0, 0x7f, 0x5c34, 0x8, 0xc916, 0x0, 0x9, 0x11, 0x2, 0xe542, 0x3, 0x2, 0xa, 0x4, 0x3, 0x8, 0x8, 0x7, 0x80, 0xebcf, 0x1fef, 0x6a76, 0x2, 0x10001, 0x7, 0x7, 0x3, 0xa, 0x7, 0x1, 0x0, 0x80, 0x81, 0x7, 0x3, 0xfffffffe, 0xff, 0x0, 0x8, 0x80000000, 0x5, 0x4, 0x0, 0x73a, 0xff, 0x7, 0x4, 0xffff, 0x401, 0x3, 0xd0000000, 0xf, 0x200, 0x2, 0x9c, 0x7f, 0xfffffffe, 0x0, 0x3f8000, 0xcf49, 0x5, 0xc, 0x7, 0x50, 0x10001, 0x4, 0x2, 0x8, 0x1, 0xffffff40, 0x1, 0xff, 0x0, 0x0, 0x10000, 0x9, 0x357027a3, 0x2, 0x4, 0x699, 0x5, 0x3, 0xc21a, 0x1, 0x1, 0x6, 0x401, 0x7, 0x8, 0x7, 0x2, 0x2, 0x2, 0x3, 0x22, 0x10000, 0x4, 0x3, 0x4, 0x960]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x9, 0x1, 0x3, 0x1, 0x8, 0x80, 0x3, 0x5, 0xd, 0xfff, 0xffffff03, 0x4, 0x800, 0x9, 0x2, 0x125, 0x7, 0x4, 0x8, 0x6, 0x0, 0x7fff, 0xfff, 0x9, 0x4, 0x9, 0x9, 0x19934683, 0x6, 0x6c8, 0x9, 0x2, 0x0, 0x8, 0x4, 0x8000, 0x9, 0x3ff, 0x1ff, 0x7, 0x2, 0x1, 0x2, 0x7f, 0xffffffff, 0x6, 0xfffffffb, 0xebd, 0x2, 0x2, 0x5, 0x0, 0xff, 0xfff, 0x8, 0x8, 0x1, 0x1, 0x7, 0xe, 0xfff, 0x3, 0x0, 0x0, 0xee79, 0xa8, 0x1000, 0xec3d, 0x4, 0x4e, 0x6, 0x6, 0x7, 0xfffffbff, 0x2, 0x7, 0x9d48, 0x0, 0x2325, 0x7, 0x2, 0x9, 0x7, 0x1000, 0xfffffff9, 0xb, 0x5, 0x8, 0x80000001, 0x4, 0x80000000, 0x7, 0xf, 0x7, 0x2, 0xd813, 0x10, 0x2, 0xa51c, 0x7fffffff, 0x5, 0x80000000, 0x11, 0xfffffffc, 0x9, 0x406b4d2f, 0x4, 0x3, 0x6, 0xea70, 0x10001, 0xfffffff8, 0x0, 0x1bd, 0xffa, 0x10001, 0x1, 0x8, 0x23178f8c, 0xfffffff1, 0x7, 0x5, 0xc3, 0x4, 0x5, 0x9, 0xc, 0xf, 0x4, 0x5, 0x0, 0x8000, 0x7, 0x2, 0x4, 0x81, 0x2, 0x9, 0x10, 0x3, 0x6, 0xd, 0xfffffff9, 0x0, 0x4, 0x6, 0x0, 0x5, 0x5, 0x6, 0xfff, 0x7fffffff, 0x0, 0x7, 0x851, 0x3, 0x7ff, 0x6, 0x1, 0x7b5f, 0xed34, 0x9, 0xfff, 0xc, 0xe6c, 0x2, 0x1000, 0x6, 0xffff8e71, 0x0, 0x2, 0x3, 0x9, 0x5, 0xfffffffd, 0xf, 0x6, 0x4, 0xf2, 0xcb, 0xeb2, 0x1, 0x1, 0x57, 0xfff, 0x3, 0xfb200000, 0x800, 0x6f, 0x9, 0x4, 0x4, 0x0, 0x1d, 0x4, 0x8, 0xffff, 0x4, 0x3, 0x1, 0x0, 0x3350b99b, 0xfffffffc, 0x4, 0x81, 0x0, 0x2, 0x7, 0x7c0b45ad, 0x0, 0x6d956380, 0x10000000, 0x1, 0xc42, 0x8, 0xc2, 0x0, 0x8b, 0xdb, 0xd, 0x7fff, 0x3, 0x8, 0x9, 0x8001, 0xff, 0x3, 0xfffffff9, 0x3, 0x0, 0x7f, 0x81, 0x83b3f20, 0xf, 0x4, 0xd, 0x4, 0x1, 0x2, 0x400000, 0x4, 0x6, 0x5, 0xfffffffb, 0x40, 0x0, 0x3, 0x5, 0xffffffdb, 0x1, 0x5, 0xffff, 0x101, 0xf4000000, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x6, 0x200, 0x1, 0xf, 0x4, 0x200, 0x1, 0x0, 0x6, 0x8, 0x0, 0x3, 0x4306, 0x8, 0x3ff, 0x4, 0x5, 0x0, 0x4, 0x81, 0x3, 0x6, 0x1, 0x9, 0x3ff, 0x2, 0x8, 0x80, 0x81, 0x4, 0x7fff, 0xffff, 0x4, 0xb, 0xffff, 0x2, 0xdd8, 0xffff0000, 0x3, 0x77de, 0xd, 0x5, 0x1ff, 0x6, 0x0, 0x2, 0x7, 0x9, 0xfffffffc, 0x10, 0x7, 0x4, 0x6, 0x2, 0x7d14, 0x0, 0x81, 0x3, 0x56, 0x1, 0x5, 0x0, 0x2, 0x6, 0x7fff, 0x7, 0x3, 0x8, 0x46cd9b4d, 0x4, 0xc3, 0x80000000, 0x4, 0x1, 0x4, 0x4, 0x0, 0x3, 0x6, 0x6, 0x40, 0x7, 0x400000, 0xffff, 0x2, 0x3, 0x1, 0xc, 0x4, 0x2, 0x2, 0x9, 0x0, 0x8, 0xfffffffd, 0x4, 0x9, 0xb, 0x4, 0x1, 0x3, 0x1, 0x7, 0x100, 0x8, 0x57, 0x100, 0xffff, 0xeb, 0x8, 0xfffffffc, 0x1200000, 0x1, 0x2, 0x0, 0x7, 0x2, 0x2, 0x1, 0x3, 0x1, 0x0, 0x400, 0x2, 0x3, 0x0, 0x3b52, 0x228d, 0x1, 0x6, 0x0, 0x41, 0xb0, 0x9, 0x4, 0x7, 0x6, 0x280000, 0x3, 0x6, 0x8, 0x200, 0x100, 0x10, 0xee, 0x80, 0xb, 0xfffffffd, 0x7, 0x1, 0x9, 0xff, 0x4, 0x7f46268d, 0x8001, 0x1, 0x9, 0x3ff, 0x4, 0x4, 0xffffffff, 0x1, 0x8, 0x80000000, 0x7, 0x4, 0x6, 0xf, 0x0, 0xc5e, 0x2, 0xfffff800, 0x7, 0x7, 0x2, 0x4, 0x2, 0x5, 0x4, 0x7fff, 0x7ff, 0x400, 0x7, 0x38dd, 0xa, 0x2, 0x8, 0x2, 0x6, 0xd406, 0x80, 0x4, 0x9, 0x0, 0x5, 0x0, 0x1, 0x7, 0x800, 0x80000001, 0x100, 0xa3fa, 0x8e24, 0x4, 0x446, 0x7, 0x2, 0x9, 0x5, 0xfda0, 0x5fa, 0x10, 0xfffffff9, 0xe000000, 0x6, 0x40, 0x2, 0xddea, 0xa, 0x6, 0x5, 0x10001, 0x4, 0x4, 0xf043, 0x10001, 0x2, 0x3, 0x0, 0x8, 0x80000001, 0x5, 0x7ff, 0x9, 0x6, 0x2, 0x95e9, 0x1, 0x5, 0x1, 0x4, 0x8, 0x5, 0x7, 0x0, 0x3, 0x80000000, 0x7f, 0x2, 0x8, 0x5, 0xd, 0x1, 0x0, 0x80000000]}]}, @TCA_FW_MASK={0x8, 0x5, 0xf}, @TCA_FW_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0x0, 0x9, 0x81, 0x5, 0x7e7, 0xb98f, 0xdb, 0x5, 0x3, 0x900, 0x9, 0x1, 0x5, 0x9, 0x7, 0x6, 0xff, 0x19c6, 0xfb, 0xfffffe00, 0x7, 0x3, 0x1, 0x7ff, 0x3, 0x81, 0x8000, 0x7, 0x7, 0x7, 0x6, 0xff, 0x1, 0x9, 0x5, 0x80000001, 0x2, 0x4, 0x3f, 0x9, 0xc, 0x0, 0x7, 0x6, 0x5, 0x4c0, 0x77eb, 0x2, 0x1ff, 0xa76, 0xf2, 0x8000, 0x5, 0x8000, 0x8, 0x400, 0x0, 0x10000, 0x5, 0xe, 0x10000, 0x932, 0x5, 0x5, 0x2, 0x8, 0x2fa, 0x4, 0x2, 0x3ff, 0xd, 0x1000, 0x7fffffff, 0x7, 0x401, 0x6, 0x3ff, 0x2ebf, 0xae46, 0x4, 0xfff, 0x7, 0x10000, 0x4, 0x1, 0x3, 0x1, 0x10001, 0xffff2fb2, 0x1, 0x6, 0x8, 0x1, 0xffffffff, 0x5, 0x2, 0x0, 0x9, 0x8339, 0x5, 0x8001, 0x400, 0x4a64, 0xfffffffd, 0x4, 0x4, 0x179c, 0x1, 0x9, 0xb, 0x3, 0x0, 0xf223d040, 0x5, 0x68, 0x7, 0x9, 0x2, 0x76f0, 0xa, 0x101, 0x2, 0x1, 0x81, 0x0, 0x9, 0x3, 0x9, 0x3ff, 0x3, 0x1, 0x932, 0x9, 0x2, 0xfff, 0x1000, 0xc, 0x80, 0x80, 0x1, 0xfffffffa, 0xaad, 0x80000000, 0x8, 0xaf8, 0x0, 0x61, 0x7ff, 0x80000001, 0x4, 0xdf, 0x2, 0x6, 0xd, 0x66, 0x5f4600, 0xfffffffe, 0x8, 0x8, 0x280000, 0x1, 0xd8, 0xb7, 0x2, 0x6, 0x0, 0xadbf, 0x8, 0x2, 0x4, 0x8, 0x8, 0x10001, 0x516, 0x8, 0x3, 0x6, 0x6, 0x8, 0xbf0f, 0x0, 0x0, 0x81, 0x1, 0x2, 0x8, 0x2, 0x7fff, 0xf2, 0x1b6, 0x8, 0x4, 0x6d4a, 0x7, 0x3, 0x3, 0x1, 0x2, 0x6, 0x0, 0xfff, 0xf, 0x0, 0xfff, 0x9, 0x37, 0x8, 0x80000001, 0x2, 0x7, 0x4, 0x5, 0x1000, 0x99df, 0x6, 0x593, 0x8, 0x5, 0x6, 0x2, 0xfffffcb3, 0xfffffffa, 0xfffffc01, 0x0, 0x0, 0x3, 0x0, 0xfffffff9, 0x34, 0x7, 0x9f, 0x5, 0x2, 0x280000, 0x1, 0x6, 0xa, 0xb, 0xf, 0x8001, 0x7ff, 0x800, 0x9, 0xfff, 0x6, 0x3, 0x0, 0x9, 0x5, 0x200, 0x1000, 0x6, 0x8, 0x30e30761]}]}, @TCA_FW_ACT={0xc6c, 0x4, [@m_police={0xc3c, 0x2, 0x0, 0x0, {{0xb}, {0xc10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7d0, 0x6, 0x7, 0x1, 0x9, 0xd6b, 0x9, 0x8, 0x80000000, 0xc9a0, 0xff, 0x1, 0xa870, 0x2ad39b71, 0x4, 0x6, 0x1ff, 0x3c7b, 0x1000, 0x0, 0x8, 0x8, 0x6, 0x4, 0xb63, 0xffffffff, 0x7, 0x1, 0xad6, 0x8, 0x0, 0x9, 0xbee0, 0x0, 0x4, 0x3, 0xfffffff9, 0x6, 0x5, 0x5, 0x0, 0x8, 0x81, 0x3, 0x6, 0x100, 0xc, 0x8, 0x5, 0x8637, 0x100, 0x1, 0xc, 0x3, 0xffff, 0x4, 0xffff, 0xfffffffe, 0x7ff, 0xed, 0x6, 0x7, 0xffff, 0x400, 0xfffffff9, 0x9, 0x3, 0x1, 0x40, 0x7, 0x86b, 0x4000, 0x6, 0x11ea, 0x2, 0x6, 0x0, 0x80000000, 0xfffffff8, 0x8, 0x0, 0xfffffff8, 0x2f0, 0x2, 0x2ef2, 0xb, 0x80000001, 0x0, 0x597, 0xb, 0x3, 0x4, 0x54e, 0x7a, 0xfffffffe, 0x8, 0x1c, 0x9, 0x7, 0x1000, 0x5, 0x4, 0x0, 0xf34c, 0x3f0, 0x8, 0xdc, 0x0, 0x9, 0xf58, 0x0, 0x4, 0xfffffff8, 0x5db, 0x10001, 0x1, 0x9, 0x5, 0x3ff, 0x9, 0x1, 0x623b, 0x31b, 0x8, 0x7ff, 0xffff, 0x8001, 0x7, 0x3ff, 0x8, 0x5, 0xfffffffd, 0x8, 0x8, 0x8000, 0xfffffffa, 0x8, 0x0, 0x1, 0x5, 0xfffff769, 0x4, 0x39eb, 0x0, 0x5, 0x1, 0x0, 0x3, 0x8000, 0x3, 0x6, 0x4, 0x3, 0x2, 0x3, 0x5, 0xd12c, 0x6, 0x8000, 0x8ce, 0x0, 0x4, 0x100, 0x7, 0x5, 0x3, 0x5, 0x8, 0xba, 0x6, 0x2, 0x3, 0x0, 0x2, 0x89d, 0x10, 0x5, 0x3, 0xe, 0x100, 0x9, 0x9, 0x5, 0x2, 0x2, 0x4, 0x6, 0x4, 0xb2b0, 0x5, 0x7, 0x0, 0x440, 0xe, 0x7, 0xc, 0x4, 0x334a0000, 0x7f, 0x254, 0x3, 0x80000001, 0x2b1e, 0x3f, 0x5, 0xf21e, 0x2, 0x10000, 0x4, 0x7fffffff, 0x1000, 0xfffffb07, 0x80, 0x36, 0xfffffffd, 0xf, 0x3, 0xe87b, 0x0, 0xffff, 0x401, 0x6, 0x6, 0x9beb, 0x2, 0x6, 0x0, 0x8, 0x2, 0xe165, 0x6, 0x5, 0x0, 0x8, 0x401, 0x8, 0x2, 0x1, 0x9, 0x4, 0x7, 0x6, 0x9, 0x9, 0x101, 0x4, 0x7f, 0x80, 0x6, 0x5, 0x21, 0x7f, 0x5, 0x4, 0x39f]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80, 0x7, 0x200, 0xff, 0x5, 0xe210, 0x401, 0xc674, 0x80000001, 0x200, 0x5, 0x401, 0x2, 0x7, 0x7, 0x7, 0x9, 0x4, 0x80000000, 0x4, 0x9, 0x7, 0xad1, 0x2, 0x8, 0x6, 0x8000, 0x8, 0x8ab, 0xee6, 0x48, 0x7, 0x0, 0x89c, 0x8, 0x8, 0x5, 0x8, 0x5, 0x980e, 0x7, 0x8, 0x6, 0xb, 0xacec, 0x10, 0x2, 0xff, 0x3, 0x1, 0x9, 0xd7, 0x9, 0x9, 0x667f, 0x4, 0x800, 0x4, 0x2, 0x4, 0x0, 0x6, 0x0, 0x7, 0x10, 0x8, 0x7f, 0x2, 0x1, 0x1, 0x8, 0x1, 0x6, 0x2, 0xff, 0x7ff, 0xb, 0x1ff, 0x89, 0x5, 0x80, 0x8, 0x1, 0xff, 0x2, 0x7fff, 0xf, 0xffffffff, 0x3, 0x5, 0x100, 0x1, 0xfffff801, 0x35, 0x2, 0x37, 0x400, 0x6, 0x2, 0x9, 0x7f, 0x2, 0x10, 0x59, 0x361c, 0x9, 0x2, 0x80, 0x1ff, 0x7, 0x0, 0x0, 0xffff, 0x382d, 0x0, 0x1, 0x7ff, 0x1, 0x0, 0x7, 0x6, 0x842, 0xffff9b91, 0x200, 0x5, 0x5e2c, 0x2, 0x1ff, 0x7f6, 0x4, 0x3, 0x7fffffff, 0x3, 0x7f, 0xc99, 0xfffffff8, 0x9, 0x6, 0x81, 0x1, 0x0, 0x800, 0x8, 0x495022f2, 0xc, 0x8, 0x9, 0x8, 0x1, 0x8, 0x6, 0x600, 0x6, 0x7ff, 0x7, 0x10001, 0x0, 0x7f8, 0x5, 0x10001, 0xb9, 0x3, 0x5, 0x6, 0x6, 0x26, 0x80000000, 0x0, 0x7, 0x7, 0x11, 0xf7e, 0x4, 0xfffffffb, 0x1, 0xffff7fff, 0x6, 0x5, 0x13f2, 0x9, 0x6, 0x8, 0x80000001, 0x1, 0x5, 0x9, 0xd, 0xd49d, 0x5, 0x7fff, 0x0, 0x3ff, 0x200, 0x5, 0x120, 0x7, 0x7, 0x4df7, 0x8, 0x2, 0x8, 0x7fff, 0x2, 0xe29, 0x0, 0x8, 0xffff3255, 0x7, 0x2, 0x1, 0x54, 0xffffffff, 0x2, 0xffffffff, 0x1, 0x36b, 0x10000000, 0x4000, 0x5, 0x3, 0x7, 0x5, 0x8, 0x7, 0xc1, 0xc000, 0x6, 0x200, 0x9, 0x1, 0x8, 0x6, 0x0, 0xee, 0x4, 0xd, 0x86a, 0x8, 0xffff, 0xf, 0x6000000, 0x287, 0xf, 0x1, 0x0, 0x1, 0x5a10, 0x1, 0x7fffffff, 0x80000000, 0x9, 0x0, 0x4, 0x400, 0xe9, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x0, 0x200000, 0xfe, 0x6, 0x1f8, 0x8, 0x6, 0xa3, 0xfffffff9, 0x800, 0xfa080000, 0x8, 0x7b2, 0x9, 0x4, 0x80000001, 0x0, 0x1, 0x10, 0x5, 0x2ac, 0x5, 0xfffffffe, 0x59b7, 0x8, 0xe3, 0x9, 0x2, 0x61fc, 0x6, 0x9, 0x2, 0x7a, 0x2, 0x1, 0x80000000, 0x9, 0x8, 0x4, 0x3, 0x61, 0x1, 0x1000, 0x2, 0xfffffff9, 0x0, 0x3, 0x10000, 0x3, 0x6, 0x0, 0x4, 0x5, 0x4, 0x4, 0x5, 0x1f8, 0xa, 0x2, 0x0, 0x6, 0x400, 0x402, 0x3, 0xa5b, 0x6, 0x8, 0x80000001, 0x8, 0x5, 0x0, 0x3ff, 0x6, 0x0, 0x10001, 0x9, 0x9, 0x3, 0x4, 0x1, 0x1, 0x81, 0x5, 0xffff, 0x40, 0x7, 0x2, 0xb3, 0x7, 0xf, 0x7, 0x60, 0x2, 0x5, 0x3, 0x4, 0x699, 0x119, 0x2ef5e7c2, 0xc, 0x6, 0x2, 0x5, 0x3, 0x800, 0x6, 0x3, 0x6, 0x99, 0x7, 0x0, 0x4, 0x9, 0x80000001, 0xffff, 0x0, 0x9, 0x9, 0x44, 0x2, 0x200, 0x9, 0x3, 0x6, 0x1, 0x7, 0x8, 0x8000, 0x2, 0xc, 0x9, 0x4, 0xef0, 0x6, 0x7, 0x1, 0x6, 0x9, 0x3, 0x40, 0x3, 0x2, 0x80000001, 0x9, 0x3, 0x5, 0x80, 0x47, 0x8000, 0x4, 0x101, 0xffffff64, 0xe, 0x3, 0x1172, 0x4, 0x3, 0x1, 0x474, 0x0, 0x7fff, 0x1, 0xfffffff7, 0x8000, 0x3, 0xffff7fff, 0x5, 0x4, 0x0, 0x0, 0x81, 0x400, 0x10, 0xfffffffc, 0x5826, 0x524, 0x1ff, 0x3, 0x80000001, 0x8, 0xb6, 0xda9, 0x4, 0xb30e, 0x3, 0x0, 0xff, 0x3, 0x9, 0x7c, 0x0, 0x6, 0x9, 0x101, 0x6, 0x2bf4, 0x1, 0x8, 0x0, 0x1ff, 0x7, 0x3, 0xf, 0xfffffffd, 0xff, 0x8, 0xa5c, 0xc, 0x6, 0x4, 0x3, 0x1000, 0x1, 0xcd0, 0xfff, 0x7, 0x4, 0x1, 0x4, 0xfff, 0x1, 0x7, 0x6, 0x4, 0x4, 0x80000000, 0x40, 0x9, 0xb3, 0x2, 0x3, 0x1, 0x3, 0x8, 0x3, 0x7, 0x40, 0x2, 0x100, 0x5, 0x6, 0x5, 0x7, 0x7, 0x7, 0x2, 0x7f, 0x8, 0x0, 0x7, 0x5, 0x5, 0xef53fdb, 0x5, 0x3]}], []]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x20c8}, 0x1, 0x0, 0x0, 0x44014}, 0x4024004) 3.697562818s ago: executing program 0 (id=84): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000007000000bf65000009"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40022}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd, &(0x7f0000000040)=""/13, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x41, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 3.652120609s ago: executing program 4 (id=85): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000003080)=""/4093, 0xffd}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000180)=""/192, 0xc0}], 0x4}, 0x8}], 0x1800, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 3.352271221s ago: executing program 1 (id=86): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4) 3.351783574s ago: executing program 3 (id=87): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 2.968017928s ago: executing program 2 (id=88): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xbe, @mcast1, 0xbfd}}, {{0xa, 0x4624, 0x9, @empty, 0xfffffe01}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) 2.674877266s ago: executing program 0 (id=89): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = creat(&(0x7f00000000c0)='./mnt\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) pwrite64(r0, 0x0, 0x0, 0x2) pwrite64(r1, &(0x7f00000000c0)='a', 0x1, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x4000000000000, 0x0, 0x0, 0x1}) 2.431941885s ago: executing program 1 (id=90): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x4004092b, 0x80000008) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) getdents(r2, 0x0, 0x58) syz_open_procfs$userns(0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) umount2(0x0, 0x9) 2.188963257s ago: executing program 2 (id=91): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.184651195s ago: executing program 3 (id=92): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa}, 0x94) 1.740836776s ago: executing program 0 (id=93): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)='M', 0x1}], 0x1}}], 0x2, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 1.60601013s ago: executing program 4 (id=94): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) io_setup(0x8, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f00000016c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xb, r0, 0x0, 0x0, 0x7ff}]) 1.46033544s ago: executing program 1 (id=95): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000feffff", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffff7f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 1.275420414s ago: executing program 3 (id=96): syz_emit_ethernet(0x56, &(0x7f00000007c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "6ab8de", 0x20, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x89}, @srh={0xc, 0x0, 0x4, 0x0, 0x5, 0x54}, @routing={0x43, 0x0, 0x0, 0x15}, @srh={0xff, 0x0, 0x4, 0x0, 0x3, 0x48, 0x2}]}}}}}, 0x0) 841.745199ms ago: executing program 4 (id=97): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000005400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 810.282124ms ago: executing program 1 (id=98): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r1, 0x11, 0x6, @broadcast}, 0x10) r2 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 755.435605ms ago: executing program 0 (id=99): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000007000000bf65000009"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40022}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd, &(0x7f0000000040)=""/13, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x7, 0x41, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 679.402218ms ago: executing program 2 (id=100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 476.70664ms ago: executing program 3 (id=101): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x0) 167.473763ms ago: executing program 4 (id=102): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 0s ago: executing program 1 (id=103): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) dup3(r1, r0, 0x80000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 184.944553][ T5787] cgroup: Unknown subsys name 'net' [ 185.094604][ T5787] cgroup: Unknown subsys name 'cpuset' [ 185.110924][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.394964][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.401604][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.605618][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 239.873508][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 239.882606][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 239.906192][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 239.918108][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 239.931934][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.965149][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.977556][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.000267][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.008966][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.026102][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.046818][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.061484][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.074572][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.086491][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.099956][ T5102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 240.141770][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.151691][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.162499][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 240.186042][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.196550][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.210096][ T5102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 240.220248][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.238330][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.251014][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 240.275630][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.281289][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 241.432278][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 241.995671][ T49] Bluetooth: hci0: command tx timeout [ 242.153260][ T49] Bluetooth: hci2: command tx timeout [ 242.199173][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 242.295298][ T49] Bluetooth: hci1: command tx timeout [ 242.301420][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.309173][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.317000][ T5809] bridge_slave_0: entered allmulticast mode [ 242.326851][ T5809] bridge_slave_0: entered promiscuous mode [ 242.361353][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 242.381562][ T49] Bluetooth: hci3: command tx timeout [ 242.390682][ T5817] Bluetooth: hci4: command tx timeout [ 242.423201][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.431033][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.438705][ T5809] bridge_slave_1: entered allmulticast mode [ 242.448065][ T5809] bridge_slave_1: entered promiscuous mode [ 242.504304][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 242.744971][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.752683][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.762112][ T5822] bridge_slave_0: entered allmulticast mode [ 242.771196][ T5822] bridge_slave_0: entered promiscuous mode [ 242.872038][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.884416][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.892205][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.899863][ T5822] bridge_slave_1: entered allmulticast mode [ 242.909085][ T5822] bridge_slave_1: entered promiscuous mode [ 242.934054][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.151380][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.219311][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.246931][ T5809] team0: Port device team_slave_0 added [ 243.349195][ T5809] team0: Port device team_slave_1 added [ 243.567698][ T5822] team0: Port device team_slave_0 added [ 243.680638][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.689397][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.699024][ T5815] bridge_slave_0: entered allmulticast mode [ 243.708486][ T5815] bridge_slave_0: entered promiscuous mode [ 243.726767][ T5822] team0: Port device team_slave_1 added [ 243.734290][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.742123][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.749750][ T5815] bridge_slave_1: entered allmulticast mode [ 243.759027][ T5815] bridge_slave_1: entered promiscuous mode [ 243.870980][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.878350][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.904820][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.919684][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.928580][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.936390][ T5816] bridge_slave_0: entered allmulticast mode [ 243.945705][ T5816] bridge_slave_0: entered promiscuous mode [ 244.023267][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.030875][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.038649][ T5813] bridge_slave_0: entered allmulticast mode [ 244.047638][ T5813] bridge_slave_0: entered promiscuous mode [ 244.055044][ T49] Bluetooth: hci0: command tx timeout [ 244.063162][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.070754][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.078672][ T5813] bridge_slave_1: entered allmulticast mode [ 244.088429][ T5813] bridge_slave_1: entered promiscuous mode [ 244.101597][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.108833][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.135369][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.147706][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.155596][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.163220][ T5816] bridge_slave_1: entered allmulticast mode [ 244.172664][ T5816] bridge_slave_1: entered promiscuous mode [ 244.221775][ T49] Bluetooth: hci2: command tx timeout [ 244.254542][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.377129][ T49] Bluetooth: hci1: command tx timeout [ 244.379543][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.394810][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.401977][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.428605][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.459713][ T49] Bluetooth: hci3: command tx timeout [ 244.465660][ T5817] Bluetooth: hci4: command tx timeout [ 244.493525][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.573270][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.580504][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.608024][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.658375][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.712346][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.738933][ T5809] hsr_slave_0: entered promiscuous mode [ 244.751512][ T5809] hsr_slave_1: entered promiscuous mode [ 244.815546][ T5815] team0: Port device team_slave_0 added [ 244.884057][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.945769][ T5815] team0: Port device team_slave_1 added [ 245.047957][ T5813] team0: Port device team_slave_0 added [ 245.151455][ T5822] hsr_slave_0: entered promiscuous mode [ 245.161273][ T5822] hsr_slave_1: entered promiscuous mode [ 245.170033][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.178021][ T5822] Cannot create hsr debugfs directory [ 245.192176][ T5813] team0: Port device team_slave_1 added [ 245.385872][ T5816] team0: Port device team_slave_0 added [ 245.417294][ T5816] team0: Port device team_slave_1 added [ 245.456908][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.464081][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.490652][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.505263][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.512456][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.538812][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.620410][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.627762][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.654179][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.670303][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.677659][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.705429][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.867164][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.874343][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.901011][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.019133][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.026531][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.052998][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.152583][ T49] Bluetooth: hci0: command tx timeout [ 246.159933][ T5813] hsr_slave_0: entered promiscuous mode [ 246.169822][ T5813] hsr_slave_1: entered promiscuous mode [ 246.178445][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.186485][ T5813] Cannot create hsr debugfs directory [ 246.295231][ T49] Bluetooth: hci2: command tx timeout [ 246.458751][ T49] Bluetooth: hci1: command tx timeout [ 246.484748][ T5815] hsr_slave_0: entered promiscuous mode [ 246.493470][ T5815] hsr_slave_1: entered promiscuous mode [ 246.501945][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.509763][ T5815] Cannot create hsr debugfs directory [ 246.534917][ T49] Bluetooth: hci3: command tx timeout [ 246.540531][ T49] Bluetooth: hci4: command tx timeout [ 246.816869][ T5816] hsr_slave_0: entered promiscuous mode [ 246.827356][ T5816] hsr_slave_1: entered promiscuous mode [ 246.835698][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.843476][ T5816] Cannot create hsr debugfs directory [ 247.449083][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.522888][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.615153][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.682627][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.815653][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.882138][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.942949][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.971812][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.161069][ T5813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.195297][ T5813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.215475][ T5817] Bluetooth: hci0: command tx timeout [ 248.244896][ T5813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.268293][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 248.321020][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 248.339418][ T5813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.385200][ T5817] Bluetooth: hci2: command tx timeout [ 248.445386][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.537127][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.538350][ T5817] Bluetooth: hci1: command tx timeout [ 248.571705][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 248.607309][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 248.616823][ T5817] Bluetooth: hci4: command tx timeout [ 248.617524][ T49] Bluetooth: hci3: command tx timeout [ 248.729528][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.778904][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.243976][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.531263][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.585414][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.684795][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.740266][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.747844][ T3986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.812037][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.854114][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.861796][ T3714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.901376][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.987640][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.017003][ T3714] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.024521][ T3714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.068030][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.102863][ T3714] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.110549][ T3714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.194111][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.201818][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.303827][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.327232][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.334816][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.366080][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.373637][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.406317][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.413825][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.928216][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.994276][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.047219][ T3943] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.055484][ T3943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.161895][ T3943] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.169468][ T3943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.526585][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.792781][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.831064][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.886841][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.180811][ T5809] veth0_vlan: entered promiscuous mode [ 253.308476][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.319065][ T5809] veth1_vlan: entered promiscuous mode [ 253.447458][ T5815] veth0_vlan: entered promiscuous mode [ 253.571216][ T5815] veth1_vlan: entered promiscuous mode [ 253.590236][ T5822] veth0_vlan: entered promiscuous mode [ 253.782649][ T5809] veth0_macvtap: entered promiscuous mode [ 253.798773][ T5822] veth1_vlan: entered promiscuous mode [ 253.896335][ T5809] veth1_macvtap: entered promiscuous mode [ 253.989312][ T5816] veth0_vlan: entered promiscuous mode [ 254.013095][ T5815] veth0_macvtap: entered promiscuous mode [ 254.111244][ T5816] veth1_vlan: entered promiscuous mode [ 254.138276][ T5815] veth1_macvtap: entered promiscuous mode [ 254.228233][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.300741][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.336710][ T5822] veth0_macvtap: entered promiscuous mode [ 254.387563][ T5822] veth1_macvtap: entered promiscuous mode [ 254.426732][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.435988][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.445316][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.454346][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.547400][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.589809][ T5816] veth0_macvtap: entered promiscuous mode [ 254.669392][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.682722][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.711693][ T5816] veth1_macvtap: entered promiscuous mode [ 254.780124][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.842365][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.851749][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.861154][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.870302][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.912242][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.921590][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.930891][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.940034][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.980132][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.069916][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.180173][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.190714][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.200152][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.209273][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.702522][ T5813] veth0_vlan: entered promiscuous mode [ 255.891251][ T5813] veth1_vlan: entered promiscuous mode [ 256.253530][ T5813] veth0_macvtap: entered promiscuous mode [ 256.361682][ T5813] veth1_macvtap: entered promiscuous mode [ 256.614479][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.763004][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.843641][ T5813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.854333][ T5813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.865844][ T5813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.877275][ T5813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.071481][ T3747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.079802][ T3747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.347349][ T3747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.355570][ T3747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.489458][ T3774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.510853][ T3774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.634941][ T3986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.643038][ T3986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.833900][ T3747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.840947][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.842103][ T3747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.849907][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.967049][ T5809] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 262.015336][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.023385][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.338212][ T1889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.346800][ T1889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.235646][ T5995] Zero length message leads to an empty skb [ 263.490141][ T3714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.498331][ T3714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.721565][ T3986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.729981][ T3986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.028655][ T6000] loop0: detected capacity change from 0 to 2048 [ 264.078427][ T6000] EXT4-fs: Ignoring removed mblk_io_submit option [ 264.085489][ T6000] EXT4-fs: Ignoring removed bh option [ 264.233575][ T6000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.741859][ T30] audit: type=1326 audit(1752745955.307:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 264.885313][ T30] audit: type=1326 audit(1752745955.377:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 264.907518][ T30] audit: type=1326 audit(1752745955.377:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 264.929572][ T30] audit: type=1326 audit(1752745955.407:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=236 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 264.957340][ T30] audit: type=1326 audit(1752745955.407:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 264.981295][ T30] audit: type=1326 audit(1752745955.407:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 265.003296][ T30] audit: type=1326 audit(1752745955.467:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 265.025357][ T30] audit: type=1326 audit(1752745955.487:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6014 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 265.156944][ T6000] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 265.315426][ T6000] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 265.328161][ T6000] EXT4-fs (loop0): This should not happen!! Data will be lost [ 265.328161][ T6000] [ 265.346527][ T6000] EXT4-fs (loop0): Total free blocks count 0 [ 265.362074][ T6000] EXT4-fs (loop0): Free/Dirty block details [ 265.370273][ T6000] EXT4-fs (loop0): free_blocks=2415919104 [ 265.376375][ T6000] EXT4-fs (loop0): dirty_blocks=16 [ 265.381723][ T6000] EXT4-fs (loop0): Block reservation details [ 265.388063][ T6000] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 265.908678][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.519949][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 267.089839][ T6033] loop2: detected capacity change from 0 to 2048 [ 267.319811][ T6037] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 267.394050][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.482124][ T30] audit: type=1800 audit(1752745958.057:10): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 267.685735][ T5822] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.286348][ T6072] loop0: detected capacity change from 0 to 128 [ 270.316902][ T6072] EXT4-fs: Ignoring removed nobh option [ 270.406006][ T6072] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 270.435209][ T6072] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.022502][ T5809] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.265151][ T6083] loop4: detected capacity change from 0 to 512 [ 271.472077][ T6083] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 271.545630][ T6083] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 271.566705][ T6083] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.34: iget: bad i_size value: 12154757448730 [ 271.592449][ T6083] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.34: couldn't read orphan inode 13 (err -117) [ 271.712516][ T6083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.914249][ T6092] loop3: detected capacity change from 0 to 512 [ 271.989164][ T6092] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 272.002806][ T6092] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 272.254236][ T6092] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 272.278639][ T5813] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.355251][ T6092] EXT4-fs (loop3): 1 truncate cleaned up [ 272.363225][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.189988][ T5816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.701595][ T6106] loop1: detected capacity change from 0 to 1024 [ 273.738285][ T6106] ======================================================= [ 273.738285][ T6106] WARNING: The mand mount option has been deprecated and [ 273.738285][ T6106] and is ignored by this kernel. Remove the mand [ 273.738285][ T6106] option from the mount to silence this warning. [ 273.738285][ T6106] ======================================================= [ 273.745137][ T6110] loop4: detected capacity change from 0 to 128 [ 273.859967][ T6109] overlayfs: failed to resolve './file0': -2 [ 273.875387][ T6112] loop0: detected capacity change from 0 to 128 [ 273.920709][ T6112] EXT4-fs: Ignoring removed nobh option [ 273.961225][ T6110] EXT4-fs: Ignoring removed nobh option [ 274.021343][ T6106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.037366][ T6110] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.061375][ T6112] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 274.105328][ T6112] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 274.155514][ T6110] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 274.357623][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.844470][ T5809] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 274.919837][ T5813] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 276.813136][ T6145] overlayfs: failed to resolve './file0': -2 [ 277.217226][ T6148] loop0: detected capacity change from 0 to 128 [ 277.262679][ T6148] EXT4-fs: Ignoring removed nobh option [ 277.329244][ T6148] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.403197][ T6148] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 277.884450][ T6161] capability: warning: `syz.3.63' uses deprecated v2 capabilities in a way that may be insecure [ 277.995837][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.086240][ T5809] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.896717][ T6172] loop1: detected capacity change from 0 to 512 [ 278.948219][ T6172] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 279.064140][ T6172] EXT4-fs (loop1): 1 truncate cleaned up [ 279.076949][ T6172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.266379][ T6172] EXT4-fs error (device loop1): ext4_find_extent:903: inode #15: comm syz.1.68: inode has invalid extent depth: 25964 [ 279.346331][ T6172] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 279.579542][ T6181] overlayfs: failed to resolve './file0': -2 [ 279.836486][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.214547][ T6190] loop0: detected capacity change from 0 to 128 [ 280.266394][ T6190] EXT4-fs: Ignoring removed nobh option [ 280.330878][ T6190] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 280.376249][ T6190] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 280.602923][ T5809] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.464020][ T6204] loop3: detected capacity change from 0 to 128 [ 282.374080][ T6212] syzkaller0: entered promiscuous mode [ 282.380824][ T6212] syzkaller0: entered allmulticast mode [ 282.630145][ T6217] overlayfs: failed to resolve './file0': -2 [ 283.187297][ T6221] loop0: detected capacity change from 0 to 128 [ 283.247428][ T6221] EXT4-fs: Ignoring removed nobh option [ 283.321869][ T6221] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 283.354012][ T6221] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.629999][ T5809] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.864559][ T6242] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 285.298291][ T6248] ===================================================== [ 285.305634][ T6248] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 285.314032][ T6248] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 285.320159][ T6248] do_xdp_generic+0xd52/0x1690 [ 285.325254][ T6248] tun_get_user+0x447a/0x6b40 [ 285.330225][ T6248] tun_chr_write_iter+0x3e9/0x5c0 [ 285.335537][ T6248] vfs_write+0xb48/0x1580 [ 285.340142][ T6248] __ia32_sys_write+0x1f9/0x4d0 [ 285.345323][ T6248] ia32_sys_call+0x30f2/0x42c0 [ 285.350291][ T6248] __do_fast_syscall_32+0xb0/0x150 [ 285.355781][ T6248] do_fast_syscall_32+0x38/0x80 [ 285.360927][ T6248] do_SYSENTER_32+0x1f/0x30 [ 285.365757][ T6248] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.372307][ T6248] [ 285.374878][ T6248] Uninit was stored to memory at: [ 285.380232][ T6248] pskb_expand_head+0x310/0x1610 [ 285.385488][ T6248] do_xdp_generic+0xa79/0x1690 [ 285.390522][ T6248] tun_get_user+0x447a/0x6b40 [ 285.395578][ T6248] tun_chr_write_iter+0x3e9/0x5c0 [ 285.400851][ T6248] vfs_write+0xb48/0x1580 [ 285.405513][ T6248] __ia32_sys_write+0x1f9/0x4d0 [ 285.410582][ T6248] ia32_sys_call+0x30f2/0x42c0 [ 285.415624][ T6248] __do_fast_syscall_32+0xb0/0x150 [ 285.420986][ T6248] do_fast_syscall_32+0x38/0x80 [ 285.426189][ T6248] do_SYSENTER_32+0x1f/0x30 [ 285.430914][ T6248] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.437615][ T6248] [ 285.440094][ T6248] Uninit was created at: [ 285.444740][ T6248] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 285.451489][ T6248] kmalloc_reserve+0x22f/0x4b0 [ 285.456596][ T6248] __alloc_skb+0x347/0x7d0 [ 285.461249][ T6248] alloc_skb_with_frags+0xc5/0xa60 [ 285.466751][ T6248] sock_alloc_send_pskb+0xad8/0xc70 [ 285.472239][ T6248] tun_get_user+0x1019/0x6b40 [ 285.477230][ T6248] tun_chr_write_iter+0x3e9/0x5c0 [ 285.482484][ T6248] vfs_write+0xb48/0x1580 [ 285.487161][ T6248] __ia32_sys_write+0x1f9/0x4d0 [ 285.492286][ T6248] ia32_sys_call+0x30f2/0x42c0 [ 285.497395][ T6248] __do_fast_syscall_32+0xb0/0x150 [ 285.502795][ T6248] do_fast_syscall_32+0x38/0x80 [ 285.508027][ T6248] do_SYSENTER_32+0x1f/0x30 [ 285.512792][ T6248] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.519441][ T6248] [ 285.521929][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: syz.3.101 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(none) [ 285.534137][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.544545][ T6248] ===================================================== [ 285.551740][ T6248] Disabling lock debugging due to kernel taint [ 285.558143][ T6248] Kernel panic - not syncing: kmsan.panic set ... [ 285.564720][ T6248] CPU: 1 UID: 0 PID: 6248 Comm: syz.3.101 Tainted: G B 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(none) [ 285.578431][ T6248] Tainted: [B]=BAD_PAGE [ 285.582735][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.592973][ T6248] Call Trace: [ 285.596387][ T6248] [ 285.599438][ T6248] __dump_stack+0x26/0x30 [ 285.603974][ T6248] dump_stack_lvl+0x53/0x270 [ 285.608804][ T6248] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 285.614843][ T6248] dump_stack+0x1e/0x25 [ 285.619186][ T6248] panic+0x4bd/0xd50 [ 285.623382][ T6248] kmsan_report+0x31c/0x320 [ 285.628105][ T6248] ? __msan_warning+0x1b/0x30 [ 285.632980][ T6248] ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 285.639091][ T6248] ? do_xdp_generic+0xd52/0x1690 [ 285.644302][ T6248] ? tun_get_user+0x447a/0x6b40 [ 285.649369][ T6248] ? tun_chr_write_iter+0x3e9/0x5c0 [ 285.654863][ T6248] ? vfs_write+0xb48/0x1580 [ 285.659584][ T6248] ? __ia32_sys_write+0x1f9/0x4d0 [ 285.664850][ T6248] ? ia32_sys_call+0x30f2/0x42c0 [ 285.669999][ T6248] ? __do_fast_syscall_32+0xb0/0x150 [ 285.675635][ T6248] ? do_fast_syscall_32+0x38/0x80 [ 285.680891][ T6248] ? do_SYSENTER_32+0x1f/0x30 [ 285.685784][ T6248] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.692557][ T6248] ? ___bpf_prog_run+0xea65/0xeba0 [ 285.697929][ T6248] ? __bpf_prog_run32+0xc2/0xf0 [ 285.703002][ T6248] ? kmsan_get_metadata+0xfb/0x160 [ 285.708367][ T6248] __msan_warning+0x1b/0x30 [ 285.713091][ T6248] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 285.719144][ T6248] do_xdp_generic+0xd52/0x1690 [ 285.724150][ T6248] ? tun_get_user+0x3fc1/0x6b40 [ 285.729193][ T6248] ? filter_irq_stacks+0x49/0x190 [ 285.734436][ T6248] ? tun_get_user+0x43f5/0x6b40 [ 285.739460][ T6248] tun_get_user+0x447a/0x6b40 [ 285.744315][ T6248] ? stack_depot_save_flags+0x35/0x7b0 [ 285.749950][ T6248] ? __rcu_read_unlock+0x6d/0xd0 [ 285.755086][ T6248] ? kmsan_get_metadata+0xfb/0x160 [ 285.760385][ T6248] ? kmsan_get_metadata+0xfb/0x160 [ 285.765692][ T6248] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 285.772208][ T6248] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 285.778535][ T6248] tun_chr_write_iter+0x3e9/0x5c0 [ 285.783777][ T6248] vfs_write+0xb48/0x1580 [ 285.788334][ T6248] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 285.794105][ T6248] __ia32_sys_write+0x1f9/0x4d0 [ 285.799204][ T6248] ia32_sys_call+0x30f2/0x42c0 [ 285.804214][ T6248] __do_fast_syscall_32+0xb0/0x150 [ 285.809560][ T6248] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 285.815550][ T6248] do_fast_syscall_32+0x38/0x80 [ 285.820624][ T6248] do_SYSENTER_32+0x1f/0x30 [ 285.825348][ T6248] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.831905][ T6248] RIP: 0023:0xf710e539 [ 285.836155][ T6248] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 285.855990][ T6248] RSP: 002b:00000000f50fe520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 285.864603][ T6248] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000240 [ 285.872754][ T6248] RDX: 000000000000fdef RSI: 00000000f7474ff4 RDI: 0000000000000000 [ 285.880865][ T6248] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.888972][ T6248] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 285.897097][ T6248] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.905256][ T6248] [ 285.908752][ T6248] Kernel Offset: disabled [ 285.913355][ T6248] Rebooting in 86400 seconds..