last executing test programs: 4.798813542s ago: executing program 1 (id=1492): r0 = socket$netlink(0x10, 0x3, 0xb) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000300)=0xd, 0x4) unshare(0xc040400) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setown(r1, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000180001801400020073797a5f74756e000000000000000000"], 0x2c}}, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000002480)=[{&(0x7f00000001c0)="9718b7b35f0f5725d440a340664128463b2edda3", 0x14}], 0x1, 0x0) r9 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000000080)=0x6, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r7, 0x0, r9, 0x0, 0xe8, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r12 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r12, 0x6, 0xa, &(0x7f0000000180), 0x4) close(r11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.726997647s ago: executing program 1 (id=1494): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="5401fffe1000330600000000000000000000000000ac1e000100000000000000000000000000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000020010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"], 0x154}, 0x1, 0x0, 0x0, 0x4021}, 0x0) 4.726157868s ago: executing program 1 (id=1496): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a300000000014000380060001"], 0x68}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00', @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES16], 0x1, 0x159, &(0x7f0000000780)="$eJzs27Hq01AUB+BTW9uqS2dxCLg4FfUJFKkgBhSlg04K1aWVgl2iUx/FFxSkU7crNdJqaYeKacK/37fkwI+Ec4bk5gby7s6n6WS++Dh/uYp+qxWdR5HFuhWDuBbtKC0DALhK1inFj5RS6i3jxrdIKdXdEQBQtX9c/3uVNwYAVMb+HwAuj/UfAC7P6zdvnz/O89GrLOtHfF8W42JcHsv86bN8dD/7ZbA7a1UU4/Y2f1Dm2d/59bj5O394MO/GvbtlvsmevMj38lsxqX58AAAAuAjDbOvg/n44PJaX1R/fB/b275243TnbGADACRZfvk7fz2YfPiuaWGxewhrQxpmK+D/XiUFEE8Y5qehGI9rYFXU/mYCq7W76ujsBAAAAAAAAAAAAAACOOcfvRHXPCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPt+BgAA///R702o") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x7, 0x1}, 0xc) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) 4.6855205s ago: executing program 1 (id=1500): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") open(&(0x7f0000000200)='./bus\x00', 0x1c507e, 0x0) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d3000dd602000000005cf7ce1fc986bcdf"}) write$binfmt_elf64(r2, &(0x7f0000000240)=ANY=[], 0xfd14) 4.078960246s ago: executing program 1 (id=1506): r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x2d0, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x32}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x10, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xc, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x44, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x3c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x3}, @NL80211_WOWLAN_TCP_DST_MAC={0xa}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @multicast2}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0xfffc}, @NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @broadcast}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x20, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x14, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x2b}, @NL80211_WOWLAN_TCP_DST_PORT={0x6, 0x5, 0x40}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x14, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x1e0, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x1d4, 0x4, 0x0, 0x1, [{0x174, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_PATTERN={0xa8, 0x2, "e77f0b0959a14a1bf5be6dfb12eb6aa21331b1d612e0870ffd4d9eba3f971791bb566f8c571be32cfda3d8d07426149f2ef4585b02d0d83dd582c8cd2390f76dcd65160b8622fd184cd15c23d0a75017661a6e8330411aa919f96e0b7d2821bca6a98a704bfcb6d5743adae63154747332219f6c38b1f5e6cc3e571c8f2aa49f1f71b9eba8a25405eb4ee7bc3287a4141d8b959713da451bf98ef64f2e20cba9bb505895"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8f1}, @NL80211_PKTPAT_PATTERN={0xa7, 0x2, "a4c419919567cef1076c2c0685fd6d09e304d365b6f130016a6dd6db0a603649dca6c46c55f11ed541586808afffaabdec11266e25a22e116ea8216a77525066093777c713b7d0f88dd93cf3592afeb4a496ff0165dd316ede64784c9425ecc2d999bfbf781825dda4876901ae375f92d82d0dd3e8817c404b9e225125cb5a6a1eb1f30e6a6eb162ff4982ae33c39677a56ee779d36c6fac22195efbf413748a67f4fe"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x6}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x58, 0x1, "23b75784719261857bc98259f5d1d4e1755c484136f52700b9c60d02958de3d6a8034facf7acd677f78d73531a7106171cacd7e1318fcc08cc1d48da910d44e08ae335424066404479da1bfb1e2314e283505972"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x80}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1a}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x9000000}, 0x1f00) r7 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)={0x1}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r3, 0x5}, 0x10) ftruncate(r1, 0x7fff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000002000a00000004000500e889adb7511de2363ee7d605b1c62a274e135b3085ed384225acc38aa9"], 0x20}}, 0x0) mlockall(0x1) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002}, 0x40052) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r10, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 3.761262459s ago: executing program 1 (id=1515): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, 0x90) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) unshare(0x20000600) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x401070cd, 0x0) ioctl$TCFLSH(r0, 0x5608, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001280)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x10, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000c0ffffff00", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b70200000000"], &(0x7f00000013c0)='GPL\x00', 0x6, 0x28, &(0x7f0000001400)=""/40, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xb, 0xde5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001480)=[{0x5, 0x1, 0xd, 0x3}], 0x10, 0x1}, 0x90) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000580)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) socket$key(0xf, 0x3, 0x2) syz_open_dev$vcsa(&(0x7f0000001580), 0x0, 0x40000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000010000000000000000000000b708000000000000dbaab8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300004e2fee54c7527e7853a297ad5972759be74922fb868970270c51cad70269b58ed8790fe1f6a5e6a6c3d5e953f994e7f0e0486a41df27db5d39223a1a733ac3156bfd12d2ea002c8d7d4889152deeead4f1f448efa9ccd00a43fee131cb8a7539b7a5a73e2142948538", @ANYRES16=0x0, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{0x1}, &(0x7f00000015c0), &(0x7f0000001600)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0x7f, 0x7, 0x108, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r5, 0x4, 0x5, 0x4, 0xb}, 0x48) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r7 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x235, &(0x7f00000002c0)="$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") openat(r7, &(0x7f0000000080)='./file0\x00', 0x2400, 0x0) 3.041511313s ago: executing program 3 (id=1537): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000005c0), 0x10) read(r2, &(0x7f00000017c0)=""/4090, 0xffa) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x9, 0x7, 0x20}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000040)={r4, 0x0, 0x0}, 0x20) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x20, 0x100, 0x1, 0x7, 0x60, r1, 0x7, '\x00', r3, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r8}, 0x10) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) write$cgroup_int(r10, &(0x7f00000001c0), 0xfffffdef) 3.017238345s ago: executing program 4 (id=1539): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = open(&(0x7f0000000240)='./file0/file0\x00', 0xa4c0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r2, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x5e, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40880) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffde3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r5, 0x0, 0x5, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0xb}, @private, 0x0, "66c5aff8a7eb3af1f6cec2e7420000000800", 0x4, 0x0, 0x80}, 0x3c) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x9, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) r8 = epoll_create(0x7ffffffe) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r9 = syz_open_pts(r7, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x15) r11 = openat$cgroup_ro(r10, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYRES8=r8], 0x0, 0x7f, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4255}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x18, &(0x7f00000010c0)={@broadcast, @local, @val={@void}, {@generic={0x88fb, "e30506f82e85"}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000480)='mm_vmscan_wakeup_kswapd\x00', r1}, 0x10) 2.396644161s ago: executing program 2 (id=1542): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0) recvmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000080)=@tipc=@id, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)=""/244, 0xf4}, {&(0x7f0000000200)=""/242, 0xf2}], 0x2, &(0x7f0000000340)=""/23, 0x17}, 0x5048}], 0x1, 0x2, 0x0) timer_create(0x3, &(0x7f0000000500)={0x0, 0x4, 0x1, @thr={&(0x7f00000003c0)="538964230e709b07c6884f00e05c4be10051d6689cbf8562de041175aeed8b970557690b135070dfdd5dc267f6d26032387c4398e7c5a05cea8b22161bfe35df6164b03ce9ae8b8799a5462251810280de6ae5bf238c60ce1793302acc263296b80a5595a4c9fccdd6", &(0x7f0000000440)="bea824fc535ba19ac61d5af810975d4c8166cb8cfaf75894ad2158fd2cbf01eaf96f2b30d918ea41c205ae098be412c9b1cd17a3168bef5e6811099e7b2995f121127a632fcd3e3d2b86143c21d8d50c41a1ff83988e324fcbfd165ba69254341ee2724021dc08891d6d923b16771d944fbcd097fc2bec39a5d8b6a9e5ace2a43ac984dab6039d6417227e1853d3b12aefbf2237c464d20261"}}, &(0x7f0000000540)=0x0) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000005c0)={{r2, r3+10000000}, {0x77359400}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000600)={{0x0, 0x989680}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x43, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a40)=@updsa={0x250, 0x1a, 0x10, 0x70bd2c, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in=@multicast2, 0x4e22, 0x1, 0x4e24, 0x1, 0x2, 0x0, 0x80, 0x3c, r4, r5}, {@in=@empty, 0x4d2, 0x3c}, @in=@local, {0x6, 0x4, 0xfffffffffffffffb, 0x0, 0xb, 0x1, 0xa1, 0xc10121a}, {0x2, 0x244f917a, 0xffffffff, 0x3}, {0x101, 0x3, 0xe}, 0x70bd2d, 0x3501, 0xa, 0x1, 0x6, 0x40}, [@mark={0xc, 0x15, {0x35075d, 0x9}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast1, 0x0, 0xa}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd29, 0x7}}, @algo_auth={0x8d, 0x1, {{'cbcmac(aes)\x00'}, 0x228, "076c5834b21f84981bb16a1c2f203c6d3b852bf1d08d716c24379040043ec55c3b8466bc841e71916f102a20ed3c22b2387927ffe0a6bcbdf589fdc69c1a3088aa3c99789e"}}, @replay_thresh={0x8, 0xb, 0x101}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xffffff7f}, @extra_flags={0x8, 0x18, 0x10000}, @sec_ctx={0x67, 0x8, {0x63, 0x8, 0x0, 0x1, 0x5b, "64d90ffc149a11e60be6669e0a9dbfe4d3d34fd76bc57981376e85a230b9e7af1c2be84a31b3d9d2e04ce6a03b60bb22fbc2e1be7aaccd1ad1b637179b0f528704ba63f81e582ab4180ad6a20e8505518282f530a9593c76a25737"}}, @tfcpad={0x8, 0x16, 0x6}]}, 0x250}, 0x1, 0x0, 0x0, 0x40010}, 0x4c090) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x40000) pselect6(0x40, &(0x7f0000000e80)={0x7, 0x3, 0x50b0, 0x1, 0x2, 0xc5, 0x7fffffffffffffff, 0xd}, &(0x7f0000000ec0)={0x2d10, 0x0, 0x3, 0x0, 0x3, 0x2, 0x4, 0xc00000}, &(0x7f0000000f00)={0x4, 0x11, 0x8, 0xfffffffffffffc01, 0xa90, 0x4, 0x9, 0xffffffff}, &(0x7f0000000f40)={0x0, 0x3938700}, &(0x7f0000000fc0)={&(0x7f0000000f80)={[0x80]}, 0x8}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000001000), 0x4) r9 = mq_open(&(0x7f0000001040)='batadv\x00', 0x40, 0x90, &(0x7f0000001080)={0xd96, 0x6, 0x8}) mq_timedsend(r9, &(0x7f00000010c0)="c773f23102af74a2842e0d1457e94925f7c265b34ceacafd28243d54d5ba37c33de0933c6ab02d90bd849b8a090bc375a37c6aa4591943c7bcbfc619c3580a8408c508a425079894c74b4fb8baf897cce5c809eadf17d592faed1fe2c7a1b061fa890610b6b7e896a66a6d706a4d95f948dce631d0801300f1cc2cf429c08950ee0c36d3b2bd03002c357aa616863dc362fb2219b56998bd69b26edc192e237b64092b969ba7b17b6418", 0xaa, 0xfffffffffffffffe, &(0x7f0000001180)={0x77359400}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x200000, 0xa) r11 = openat$incfs(r10, &(0x7f0000001200)='.pending_reads\x00', 0x200000, 0x3) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000001280)={{0x77359400}, {r12, r13+10000000}}, &(0x7f00000012c0)) r14 = open(&(0x7f0000001300)='./file0\x00', 0x400400, 0x11) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000001380), r11) sendmsg$DEVLINK_CMD_TRAP_GET(r11, &(0x7f0000001680)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f00000013c0)={0x258, r15, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x258}, 0x1, 0x0, 0x0, 0x20000001}, 0x4840) setxattr$incfs_metadata(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), &(0x7f0000001740)="162f0bee9604efcd206a07f970697aff22e67d954526c26bba23447e5d6185415327d5d73d8e34ea5dcf315a9284aef49595c075139d6d909b60b61e4343410955ca8ade05fe7cc464994359e7bfb7b3f2747857e414964697a2d0f4feb1fb628eb73dbe9a1a0e28120d70a726f0e9676e3617bb56f957ec6156af8847e5c29dd800903c4c0515345d999a2268c1186edbf596bb4b35b68588f9b2096bc5ae5a7b4f61fa62025a4da7f9bef5836cfeb8404ca36618451e27bd54242d9f29b46a4ed48c775ed6f4c808d965a04b4cde8df7c4f6427ad2d4bde5a2d5a0788f032ea26b8815", 0xe4, 0x2) mq_timedsend(r14, &(0x7f0000001840)="fd13daa95d2b319c5d268332ba33c50cc3bfd30fd52142c17c06ae64fac5911281ed12833a87de3d22f656c49ee156ffb63e2715e0dda793b409fe1228473ebc4ccd8fd8325bb6c0bc960b3f594c9a3efd9094bf8e6826fcea0b16b20bc859f1ef22941ef1f52e59", 0x68, 0x8001, 0x0) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001900), r14) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000001ac0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a80)={&(0x7f0000001940)={0x120, r16, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3c}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f51fab5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c4b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) r17 = semget(0x2, 0x2, 0x100) semtimedop(r17, &(0x7f0000001b00)=[{0x3, 0x3}, {0x3, 0x7}, {0x3, 0x5, 0x1800}, {0x2, 0x3, 0x1000}, {0x2, 0xefad, 0x800}, {0x2}, {0x4, 0x3, 0x800}, {0x1, 0xfffc, 0x3800}, {0x4, 0x100}], 0x9, &(0x7f0000001b80)) 2.368665473s ago: executing program 2 (id=1543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) getgid() open(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0xfffffe54, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xfffff0e2}]}}}]}, 0x3c}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) socket(0x840000000002, 0x3, 0xff) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELCHAIN={0x45, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8}]}], {0x14}}, 0x5c}}, 0x0) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x7, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000000400000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r5}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x2010, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.263494051s ago: executing program 2 (id=1546): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 2.173888308s ago: executing program 3 (id=1547): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') unshare(0x20040400) fcntl$getownex(r4, 0x11, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x9bb0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.131487131s ago: executing program 4 (id=1548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close(r1) 2.124752762s ago: executing program 3 (id=1549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) r5 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r5, 0x107, 0xe, 0x0, 0x20600000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0400ffff07"], 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") socket$phonet_pipe(0x23, 0x5, 0x2) r7 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) ioperm(0x0, 0x10e, 0x8000000000004) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x20) r9 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r7, &(0x7f0000001400)="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", 0x1af) sendfile(r7, r9, 0x0, 0xe066) sendfile(r7, r9, 0x0, 0xffff) 1.937968515s ago: executing program 3 (id=1550): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00faffffff"], 0x1, 0x576, &(0x7f0000000640)="$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") pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80020, &(0x7f0000000040)={[{@huge_never}, {@size={'size', 0x3d, [0x54]}}]}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 1.890014719s ago: executing program 4 (id=1551): r0 = socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) unshare(0x62040200) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x8000000, 0x0, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x1a, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x111c}, [@call={0x85, 0x0, 0x0, 0x55}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000380)='syzkaller\x00', 0xffffff01, 0x93, &(0x7f00000005c0)=""/147, 0x41100, 0x20, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x16269, 0xffffffffffffffff, 0x2, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, r2], &(0x7f0000000800)=[{0x0, 0x1, 0x7, 0x7}, {0x1, 0x3, 0x7, 0x3}], 0x10, 0x1}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r4, 0x3) 1.557993204s ago: executing program 0 (id=1553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1388}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001340)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x5) fallocate(r1, 0x0, 0x0, 0x10fff9) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001300)=0x3) socketpair(0xa, 0x2, 0x89, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r4, 0x0, 0x24040091) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a30000000003c000000060a01040000000000007baa0100000008000b400000000014000480100001800800010066776400040002800900010073797a30"], 0xb0}}, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000002) sendmsg$inet(r3, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0x0, 0x1b8, 0x448, 0x0, 0x448, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x19a, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5, 0x2}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) 1.503102338s ago: executing program 4 (id=1554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32], 0xfb, 0x11ee, &(0x7f0000001280)="$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") truncate(&(0x7f0000000140)='./file2\x00', 0x80000002328) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd4aa6843e10951cd4b347113e0700499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46f700"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = syz_io_uring_setup(0x145c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="d41068000000000061138e0000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x63d, &(0x7f0000001280)="$eJzs3c1rHG8dAPDvzCb5NW00qYjYohjw0IJ0m9Ri1VNbD/ZQsGAPIh4a2qTGbl9oUmhroSl4UFAQ9SrSi/+AeJUcvIg3EbQ3z0IVqXpQycrMzjbbzU67TfZN5/OB3Xnmmdl9nu/OPnmemdnJBFBZi9lTGnEsIq4lEfMdy+aitXCxWO/V355czx5JNJtf/WsSSZHXXn+nmB7JnpLWa353MeIjtb3lbjx6fGul0Wx5GnF68/a90xuPHp9av71yc/Xm6p3lM58/e27pC8u/GUycR4rppctf+cQPvvPNz639vnEqifNxdfrbe+IYlMXWpxtZiJ35zSTiXJbo8bnAKGVfwamImI6Ij8V81PK5lvlY//5YKwcMVbPW6p+aM02gcpIYdw2A8WiPA9r79sPYD55kLy9kzw97xD9V7L0fyveNDr9KOvaMstyIhQGUvxUR/3ly/KfZI0qOQ0wNoJzS8p9FxMd7bf8kj38hjzSLP42043VZeqk4tpHV70sHqEPSke7v+/f0AKW96X3i79wOWfzni2mWf7Hk/d91iGexa74ofxBfLQAotX2h6MizgUjs9n/ZyLA9/onu8U/zl/m5oe6+az9K+r+iZx2+fPw31av/b/f3h/I+PO0ahyWx9Y8rvd9yujvjT9+79KOy8hc7xn/ZIys/m36rv+ofeGj48lnE8a74v5t/9En8ulgn6TH+zVa51mcZX/7DXy6VLSuL/0BBvYfm84gTPfd/dkelWarr/GQS7fOTZ5dPr603Vpdazz3L+NVvv/HzsvLHHX+2/Q+XxN9u/722f5Z3r+xNk503Zn9x5fntVuqDPavOvTP+9M8zydU8NZM/7zavmeRysUpr8nBlc/P+mbfH214nny634j/56d7tvyT+fOdjtv0nsw/3vnbrVdmyA27/nWafK5bJ4r+xz+3/wz7L+OfXH3yybNne+HePSczuNygAAAAAAACoqDQ/B5uk9dfpNK0XJ94+GofTxt2Nzc+s3X1w50bEyfyHidNp+0z3fGs+yeaXix8ttufPdM1/NiKORsRParP5fP363caNcQcPAAAAAAAAAAAAAAAAAAAAE+JIcf3/TnE/sL/X0rReH3etgJEZ5g3mgMmm/UN15e1/NPdbAyaM/h+qq2f790cBKkFTh+rS/qG6tH+oLu0fqkv7h+oqb/97ljwbdl0AAAAAgIE5+qntF1MRsfXF2fyRmSmWTY+1ZsCwaeNQXbVxVwAYm9cn+N/j8v8fLwypMsBI9TX+/1fxzwGHXx1gDJJemfngoPn2xr/d85UAAAAAAAAAAAAAwBCcOLb9InH9P1SSu/5Cde3v+v/a/l8KTIxe//rf7UCgGuzjQ8X1cRDgUNkC1/8DAAAAAAAAAAAAwMjM5Y8krRc/A56LNK3XIz4UEQsxnaytN1aXIuLDEfHH2vQH2fxy+8UuHgYAAAAAAAAAAAAAAAAAAICB2Hj0+NZKo7F6vzPx7z05/9+J9h1PJ6U+nYlIhl5EGl05sxExCbEPJzHVkZNEbGVbfhDvnBz8+xOT8PkUibxFuLkfAAAAAAAAAAAAAAAAAACMUMe1x70d/9mIawQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo7d7///hJcYdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+m/AQAA//89Fz8m") 1.458037901s ago: executing program 0 (id=1555): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket(0x1e, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x80000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x7, 0x8, 0xf9d7, 0x10, r0, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000006500000008000000951b5fd8be6778bd6f2a41f4e5498e0945ebcd8b818cf60f1c72057b7fad183480c822723b6b128a22440bd6a7ea76f197411ceb653b9f490ae5d357c0b0852f8025303eb1ac2088102ab397fa5e1c0e2c4fa1c6bb3f3507bfe5e8932601"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0xd2, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd602a1c99009c110000000000000000000000000000000000ff0200000000000000000001ffaaaaaa"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r4, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x6, 0xfffffffffffffff7, 0x0, 0x0) r10 = dup3(r2, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r10, &(0x7f0000000300)={0x200f}) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001114014b0000001600000000080001000000000008004b001300000008004f"], 0x28}}, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r13 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) 1.457560691s ago: executing program 3 (id=1556): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) io_pgetevents(0x0, 0x8, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r2, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000400)=""/192, 0xc0}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x6, 0x1, 0x80, r3, 0x300000, '\x00', r4, r3, 0x4, 0x2, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44d, &(0x7f0000000340)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f00000008c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x5, 'rose0\x00'}) write$binfmt_script(r7, &(0x7f0000003b40), 0x208e24b) syz_genetlink_get_family_id$nl80211(0x0, r0) 1.353814839s ago: executing program 2 (id=1557): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'veth0_to_bridge\x00', 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'dummy0\x00'}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff09}, 0x41) socket$xdp(0x2c, 0x3, 0x0) 1.281870134s ago: executing program 0 (id=1558): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x800000, &(0x7f0000000200), 0x3, 0x4ae, &(0x7f0000000a00)="$eJzs3d9rm+UeAPDvm7Y73daddueci53B2SnnTLqhS9rVbcWLbYLo1UCd97W2aSlNm9Kk21qGdPgHCCIqeuWVN4J/gCD7E0QY6L2IKEO3eeGFGknyZqsl/THXNrP5fODp+7zvm+b7fRLyJE+eh7wBtK3+iLgYER0RcTIietPjmbTESr1Ub3f3zvXxakmiUrn8QxJJeqxxX0m6PZj+W3dEvPxCxGtJUj+wSmlpeWasUMgvpPu58ux8rrS0fGp6dmwqP5WfGx4eOjtybuTMyOC2tfX8c9++8+ZHz5//7KmrX49+f+L1ar496bnV7dhO9cekq/ZYNHRGxMJOBGuBjrQ9Xa1OBACALal+xv9HRPwvIu693+psAAAAgJ1QudATvyQRFQAAAGDPytTWwCaZbLoWoCcymWy2vob3X3EhCsVS+cnJ4uLcRH2tbF90ZSanC/nBdK1wX3Ql1f2hWv3B/uk1+8MRcTgi3u7dX9vPjhcLE63+8gMAAADaRHWc35Op16ubn3rr438AAABgj+lrdQIAAADAjjP+BwAAgL1v3fF/0rm7iQAAAAA74cVLl6ql0rj+9cSVpcWZ4pVTE/nSTHZ2cTw7XlyYz04Vi1O13+yb3ez+CsXi/NMxt3gtV86XyrnS0vLobHFxrjxau673aN51ogEAAGD3Hf7vza+SiFh5Zn+tVO1Lzxmrw96WebibJzuVB7D7OlqdANAyFvhC+zLGBzYb2HfvUh4AAMDOGfi3+X9oVw85/w/sIeb/oX2Z/4f2ZYwP/On5/8+3PxcAAGBn9NRKksmmc4E9kclksxGHapcF6Eompwv5wYj4e0R82dv1t+r+UKuTBgAAAAAAAAAAAAAAAAAAAAAAAIC/mEoliQoAAACwp0VkvkvS638N9B7vWfv9wL7k597aNiKufnD53Wtj5fLCUPX4j/ePl99Lj59uxTcYAAAAwFqNcXpjHA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2+nunevjjbKbcW8/GxF9zeJ3Rndt2x1dEXHgXhKdq/4viYiObYi/ciMijjSLn1TTir40i7XxMxGxv8XxD25DfGhnN6v9z8Vmr79M9Ne2zV9/nWl5VLf71+v/Mvf7v451+r9Dm9z3vnR79NYnuXXj34g42tm8/2nETx6x/331leXl9c5VPowYaPr+k/whVq48O58rLS2fmp4dm8pP5eeGh4fOjpwbOTMymJucLuTTv01jvPWfT3/bqP0H1onft0n7j2+x/b/eunbnnxvEP/H/5s//kQ3iVx/7J9L3ger5gUZ9pV5f7djHXxzbqP0T67R/s+f/xBbbf/KlN77Z4k0BgF1QWlqeGSsU8gsqj1ul//FIQ6U9K63umQAAgO324EN/qzMBAAAAAAAAAAAAAAAAAACA9rUbPye2Ol5365oKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCh3wMAAP//LP/UjQ==") socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300)='./file0\x00') r0 = open(0x0, 0x14527e, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) getrandom(0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x100000008) symlink(0x0, 0x0) rename(0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.057061651s ago: executing program 0 (id=1559): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0x5522, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x8008551d, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = gettid() getpriority(0x2, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009e000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102381, 0xec29, 0x20000004, 0x0) 961.952688ms ago: executing program 3 (id=1560): close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) poll(&(0x7f0000000000)=[{r5, 0x48}], 0x1, 0xffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x8, 0x2}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) r6 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r8 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="036b94454d1accb27b47f372dc8d74ec4fe69da231168c5c37666ec768783025f1d84ed3fc40531827af201a1f75115fde95d91eb783436b352754312995958354a3f2bf0cdc1000000000000000b0a1"]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x20, 0x0, 0x50000}]}) syz_emit_ethernet(0x2a, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, 0x0, 0x25, 0x1, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x10) 920.406711ms ago: executing program 0 (id=1561): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000005d03000000001db685000000230000001801000020646c1af8ff00000000bfa100000000000002000000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r0}, 0x10) listen(0xffffffffffffffff, 0x101) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$inet(0x2, 0x6, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='hrtimer_start\x00', r2}, 0x10) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) msgsnd(0x0, 0x0, 0x401, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x0) 891.970663ms ago: executing program 4 (id=1562): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1008002, &(0x7f0000000100), 0x1, 0x5ea, &(0x7f0000000880)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGKMga0hDX7EjRsrLYgUaGiNFk0sCW5MjBtjTFy5EP8LJbJlpSsXblwZEqKGpYk1M3Nv6cfMlA5tb+39/ZKh5547d865TJ+ec8+ccyeA0hqs/lOJ2B8R0ymiP80v7uuMbOdg/Xn3//zwbPWRYmHh1d9TpCwvf37KfvZlB/dExI8/pNjXsbrcmblrF8enpiavZtvDs5emh2fmrh2+cGn8/OT5ycujz42eOH7s+ImRI22d10cN8k7feOe9/k/G3vjmq7/SyLe/jKU4GS9lT1x6HhtlMAZr/ydp9a6+ExtdWEE6st+TpW9x6iywQqxL/v51RcRj0R8d8eDN64+PXy60csCmWkgRC0BJJfEPJZX3A/Jr+5XXwZVCeiXAVrh3qj4AsDr+O+tjg9FTGxvYfT/F0mGdFBHtjcwttyci7tweu3Hu9tiN2KRxOKCx+esR8Xij+E+1+B+InhioxX9lWfxX+wVnsp/V/FfaLH/lULH4h61Tj/+elvEfTeL/zSXx/1ab5Q8+SL7duyz+e9s9JQAAAAAAACitW6ci4tlGn/9XFuf/RIP5P30RcXIDyh9csb368//K3Q0oBmjg3qmIFxrO/63ks38HOrLUf2rzAbrSuQtTk0ci4r8RcSi6dlW3R1qUcfjTfV+uysw+3h/M5v/lj2r5d7K5gFk97nbuWn7oxPjs+EacO5TdvesRTzSc/5sW2//UoP2v/j2YXvPV6z2EfU/fPNPsGWvHP7BZFr6OONiw/X9w14rU+v4cw7X+wHDeK1jtyQ8++65Z+e3Gv1tMwKOrtv+7W8f/QFp6v56Z9ZdxdK5zodm+dvv/3em12i1nurO898dnZ6+ORHSn0x3V3GX5o+uvM+xEeTzk8VKN/0NPtR7/W9L/35O/TvXyfX7Fa6c/lq8pzv3/775fm9VH/x+KU43/iXW1/+tPjN4c+L5Z+Q/X/h+rtfWHshzjf1D3RR6m3cvzG4RjZ6NdW11fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgJKhGxJ1JlaDFdqQwNRfRFxP9id2XqyszsM+euvHt5ov7lfwPRVcm/6be/vp3y7/8fWLI9umL7aETsjYjPO3pr20Nnr0xNFH3yAAAAAAAAAAAAAAAAAAAAsE30NVn/X/VbR9G1AzZdZ9EVAArTIP5/KqIewNbT/kN5iX8oL/EP5SX+obzEP5SX+IfyEv9QXuIfAAAAAAB2lL0Hbv2cImL++d7ao6o729dVaM2AzVYpugJAYdziB8rL1B8oL9f4QFpjf0/Tg9Y6spXps49wMAAAAAAAAAAAAACUzsH91v9DWVn/D+Vl/T+UV77+/0DB9QC2XpvX+C4bYIdptZK/4fr/NY8CAAAAAAAAAAAAADbSzNy1i+NTU5NXJV7fHtXYysTCi9n6j21Sn395Ip8Kv13qsyKRr/V7uKOK+osEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACs9E8AAAD//9UhInY=") r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/../file0\x00', r3, &(0x7f0000000300)='./bus\x00') r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000280)='ro\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000440)=r7) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x3408, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x93) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37438e486dd63"], 0xfdef) recvfrom(r0, &(0x7f0000000200)=""/38, 0x26, 0x2, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r11, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x2, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x80}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048841}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 215.449034ms ago: executing program 2 (id=1563): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setgroups(0x0, 0x0) 158.025028ms ago: executing program 2 (id=1564): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f80)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000130012800b00010067656e657665000014000280080001"], 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/key-users\x00', 0x0, 0x0) lseek(r4, 0x59, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r3) sendmsg$nl_route(r2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$ARCH_SHSTK_DISABLE(0x1e, r6, 0x1, 0x5002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000003900000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x25, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r9, 0x2284, &(0x7f0000000000)) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000002c0)={@loopback, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000380)={'syztnl1\x00', r10, 0x10, 0x7800, 0x8, 0x2, {{0x16, 0x4, 0x3, 0x3, 0x58, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@timestamp={0x44, 0x18, 0x24, 0x0, 0xa, [0x0, 0x401, 0x0, 0x50a1, 0xfeb]}, @lsrr={0x83, 0xf, 0x59, [@loopback, @local, @remote]}, @timestamp={0x44, 0x1c, 0x7f, 0x0, 0x4, [0x4, 0xf4, 0xc, 0xb7, 0x6b3, 0x8]}]}}}}}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newsa={0x140, 0x10, 0x113, 0x0, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x0, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1000}]}, 0x140}}, 0x0) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @remote}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) 24.408318ms ago: executing program 0 (id=1565): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32, 0xc0fe}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000005c0)='./file1\x00', 0x1008002, &(0x7f0000000100), 0x1, 0x5ea, &(0x7f0000000880)="$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") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x2, 0x0, &(0x7f0000000440)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/../file0\x00', r3, &(0x7f0000000300)='./bus\x00') r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x2}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x4}}, 0xffffffffffffff69) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000280)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1566): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = getpid() syz_pidfd_open(r2, 0x0) kernel console output (not intermixed with test programs): face batadv_slave_1 (retrying later): interface not active [ 78.285377][ T3351] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.298676][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.305793][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.328185][ T7023] hsr_slave_0: entered promiscuous mode [ 78.336468][ T7023] hsr_slave_1: entered promiscuous mode [ 78.342613][ T7023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.350196][ T7023] Cannot create hsr debugfs directory [ 78.369796][ T6975] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.380692][ T6975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.396336][ T3351] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.443863][ T3351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.498768][ T6975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.560756][ T7023] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.595536][ T3351] bridge_slave_1: left allmulticast mode [ 78.601201][ T3351] bridge_slave_1: left promiscuous mode [ 78.606866][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.617601][ T3351] bridge_slave_0: left allmulticast mode [ 78.623250][ T3351] bridge_slave_0: left promiscuous mode [ 78.628917][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.705834][ T3351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.716019][ T3351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.726022][ T3351] bond0 (unregistering): Released all slaves [ 78.743199][ T7023] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.755135][ T7101] chnl_net:caif_netlink_parms(): no params data found [ 78.764582][ T7118] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 78.772458][ T7118] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 78.834859][ T7023] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.859732][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.866906][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.874127][ T7101] bridge_slave_0: entered allmulticast mode [ 78.881771][ T7101] bridge_slave_0: entered promiscuous mode [ 78.897612][ T3351] hsr_slave_0: left promiscuous mode [ 78.905490][ T3351] hsr_slave_1: left promiscuous mode [ 78.912606][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.920071][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.931399][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.938880][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.949669][ T3351] veth1_macvtap: left promiscuous mode [ 78.955187][ T3351] veth0_macvtap: left promiscuous mode [ 78.960681][ T3351] veth1_vlan: left promiscuous mode [ 78.965963][ T3351] veth0_vlan: left promiscuous mode [ 79.039105][ T7148] loop4: detected capacity change from 0 to 512 [ 79.047148][ T7148] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1156: casefold flag without casefold feature [ 79.060484][ T7148] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1156: couldn't read orphan inode 15 (err -117) [ 79.073584][ T7148] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.075500][ T3351] team0 (unregistering): Port device team_slave_1 removed [ 79.096440][ T3351] team0 (unregistering): Port device team_slave_0 removed [ 79.103847][ T7148] loop4: detected capacity change from 512 to 64 [ 79.117024][ T7148] EXT4-fs (loop4): discard request in group:0 block:42 count:1 failed with -5 [ 79.126260][ T7148] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: IO failure [ 79.135652][ T7148] EXT4-fs (loop4): discard request in group:0 block:41 count:1 failed with -5 [ 79.144901][ T7148] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: IO failure [ 79.147869][ T6975] veth0_vlan: entered promiscuous mode [ 79.159827][ T7148] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 79.160418][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.172295][ T7148] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 79.178243][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.190630][ T7148] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 79.197242][ T7101] bridge_slave_1: entered allmulticast mode [ 79.209025][ T7148] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 79.214248][ T7101] bridge_slave_1: entered promiscuous mode [ 79.225991][ T7148] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 79.254429][ T7023] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.261729][ T6587] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 79.297296][ T6587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.298638][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.318782][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.353553][ T6975] veth1_vlan: entered promiscuous mode [ 79.371550][ T6975] veth0_macvtap: entered promiscuous mode [ 79.389414][ T7101] team0: Port device team_slave_0 added [ 79.397016][ T7101] team0: Port device team_slave_1 added [ 79.443938][ T7023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.452368][ T7023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.466355][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.473291][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.499354][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.511264][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.518223][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.544216][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.557380][ T6975] veth1_macvtap: entered promiscuous mode [ 79.564311][ T7023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.588379][ T7023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.600755][ T7101] hsr_slave_0: entered promiscuous mode [ 79.606868][ T7101] hsr_slave_1: entered promiscuous mode [ 79.624618][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.635050][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.644915][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.655509][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.665470][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.675910][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.686442][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.696436][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.706877][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.716749][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.727167][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.737121][ T6975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.747654][ T6975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.758321][ T6975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.767270][ T6975] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.776084][ T6975] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.784813][ T6975] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.793489][ T6975] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.903110][ T29] kauditd_printk_skb: 647 callbacks suppressed [ 79.903123][ T29] audit: type=1326 audit(1725515034.743:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397537cef9 code=0x7ffc0000 [ 79.936380][ T29] audit: type=1326 audit(1725515034.783:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f397537b890 code=0x7ffc0000 [ 79.950774][ T7023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.974441][ T29] audit: type=1326 audit(1725515034.823:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397537cef9 code=0x7ffc0000 [ 79.997982][ T29] audit: type=1326 audit(1725515034.823:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7192 comm="syz.1.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397537cef9 code=0x7ffc0000 [ 80.023874][ T7023] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.040939][ T29] audit: type=1326 audit(1725515034.873:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.1.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397537cef9 code=0x7ffc0000 [ 80.041107][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.064362][ T29] audit: type=1326 audit(1725515034.873:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.1.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397537cef9 code=0x7ffc0000 [ 80.071312][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.094641][ T29] audit: type=1326 audit(1725515034.883:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.1.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f397537b890 code=0x7ffc0000 [ 80.116035][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.132247][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.155739][ T29] audit: type=1326 audit(1725515034.983:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.1.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397537cef9 code=0x7ffc0000 [ 80.179286][ T29] audit: type=1326 audit(1725515034.983:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="syz.1.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f397537cef9 code=0x7ffc0000 [ 80.227743][ T7023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.238139][ T7023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.286984][ T7225] loop1: detected capacity change from 0 to 128 [ 80.303502][ T29] audit: type=1400 audit(1725515035.143:7907): avc: denied { sys_chroot } for pid=7226 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 80.315193][ T7225] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.345690][ T7225] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.394083][ T7023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.415596][ T6975] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.447622][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.519626][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.566716][ T7101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.602414][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.620769][ T7101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.639648][ T7101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.657134][ T7266] loop3: detected capacity change from 0 to 128 [ 80.658626][ T7023] veth0_vlan: entered promiscuous mode [ 80.697368][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.709935][ T7101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.731074][ T7023] veth1_vlan: entered promiscuous mode [ 80.785578][ T64] bridge_slave_1: left allmulticast mode [ 80.791237][ T64] bridge_slave_1: left promiscuous mode [ 80.797030][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.823313][ T64] bridge_slave_0: left allmulticast mode [ 80.829008][ T64] bridge_slave_0: left promiscuous mode [ 80.834658][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.877389][ T7288] loop1: detected capacity change from 0 to 128 [ 80.976172][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.987307][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.997222][ T64] bond0 (unregistering): Released all slaves [ 81.007574][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1176'. [ 81.016696][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1176'. [ 81.030047][ T7300] bond_slave_0: entered promiscuous mode [ 81.036444][ T7300] bond_slave_0: left promiscuous mode [ 81.055436][ T7023] veth0_macvtap: entered promiscuous mode [ 81.069869][ T7023] veth1_macvtap: entered promiscuous mode [ 81.112077][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.122709][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.132639][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.143171][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.153385][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.164046][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.173861][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.184319][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.201917][ T7324] loop3: detected capacity change from 0 to 512 [ 81.214222][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.230171][ T7324] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1179: casefold flag without casefold feature [ 81.243129][ T7324] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1179: couldn't read orphan inode 15 (err -117) [ 81.244073][ T64] hsr_slave_0: left promiscuous mode [ 81.261197][ T64] hsr_slave_1: left promiscuous mode [ 81.267116][ T7324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.280982][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.288459][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.297147][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.304605][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.313715][ T64] veth1_macvtap: left promiscuous mode [ 81.319251][ T64] veth0_macvtap: left promiscuous mode [ 81.324752][ T64] veth1_vlan: left promiscuous mode [ 81.330003][ T64] veth0_vlan: left promiscuous mode [ 81.353914][ T7324] loop3: detected capacity change from 512 to 64 [ 81.365335][ T7340] bio_check_eod: 12 callbacks suppressed [ 81.365346][ T7340] syz.3.1179: attempt to access beyond end of device [ 81.365346][ T7340] loop3: rw=2051, sector=86, nr_sectors = 2 limit=64 [ 81.384452][ T7340] EXT4-fs (loop3): discard request in group:0 block:42 count:1 failed with -5 [ 81.393329][ T7340] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 81.401568][ T7340] syz.3.1179: attempt to access beyond end of device [ 81.401568][ T7340] loop3: rw=2051, sector=84, nr_sectors = 2 limit=64 [ 81.415238][ T7340] EXT4-fs (loop3): discard request in group:0 block:41 count:1 failed with -5 [ 81.425425][ T7340] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: IO failure [ 81.433860][ T7340] syz.3.1179: attempt to access beyond end of device [ 81.433860][ T7340] loop3: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 81.447192][ T7340] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 81.458507][ T7340] buffer_io_error: 26 callbacks suppressed [ 81.458518][ T7340] Buffer I/O error on device loop3, logical block 255 [ 81.471065][ T7340] syz.3.1179: attempt to access beyond end of device [ 81.471065][ T7340] loop3: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 81.471353][ T64] team0 (unregistering): Port device team_slave_1 removed [ 81.484465][ T7340] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 81.484495][ T7340] Buffer I/O error on device loop3, logical block 253 [ 81.484531][ T7340] Buffer I/O error on device loop3, logical block 254 [ 81.516559][ T64] team0 (unregistering): Port device team_slave_0 removed [ 81.516728][ T7340] syz.3.1179: attempt to access beyond end of device [ 81.516728][ T7340] loop3: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 81.536929][ T7340] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 81.548096][ T7340] Buffer I/O error on device loop3, logical block 37 [ 81.554816][ T7340] Buffer I/O error on device loop3, logical block 38 [ 81.561481][ T7340] Buffer I/O error on device loop3, logical block 39 [ 81.568191][ T7340] Buffer I/O error on device loop3, logical block 40 [ 81.575845][ T7340] syz.3.1179: attempt to access beyond end of device [ 81.575845][ T7340] loop3: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 81.589329][ T7340] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 81.591332][ T7101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.600595][ T7340] Buffer I/O error on device loop3, logical block 249 [ 81.612001][ T7101] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.613838][ T7340] Buffer I/O error on device loop3, logical block 250 [ 81.613851][ T7340] Buffer I/O error on device loop3, logical block 251 [ 81.630866][ T7101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.644291][ T7101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.655471][ T7340] syz.3.1179: attempt to access beyond end of device [ 81.655471][ T7340] loop3: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 81.668722][ T7340] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 81.674802][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.690341][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.700174][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.710618][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.720522][ T7023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.730985][ T7023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.741074][ T4656] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 81.744750][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.767604][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.774674][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.783486][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.790550][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.799130][ T4656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.811130][ T7255] chnl_net:caif_netlink_parms(): no params data found [ 81.828450][ T7023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.837167][ T7023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.845898][ T7023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.854655][ T7023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.941649][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.948828][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.969782][ T7356] loop2: detected capacity change from 0 to 2048 [ 81.977682][ T7255] bridge_slave_0: entered allmulticast mode [ 81.984421][ T7255] bridge_slave_0: entered promiscuous mode [ 82.004156][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.013685][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.021050][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.028421][ T7255] bridge_slave_1: entered allmulticast mode [ 82.032010][ T7356] loop2: p3 < > p4 < > [ 82.035120][ T7255] bridge_slave_1: entered promiscuous mode [ 82.038538][ T7356] loop2: partition table partially beyond EOD, truncated [ 82.051688][ T7356] loop2: p3 start 4284289 is beyond EOD, truncated [ 82.067327][ T7356] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 82.068557][ T2961] loop2: p3 < > p4 < > [ 82.080183][ T2961] loop2: partition table partially beyond EOD, truncated [ 82.087283][ T2961] loop2: p3 start 4284289 is beyond EOD, truncated [ 82.096060][ T7255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.128074][ T7255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.130351][ T4077] udevd[4077]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 82.187454][ T4077] udevd[4077]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 82.205586][ T7255] team0: Port device team_slave_0 added [ 82.234848][ T7255] team0: Port device team_slave_1 added [ 82.262423][ T7380] loop2: detected capacity change from 0 to 1024 [ 82.289029][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.296076][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.304037][ T7380] EXT4-fs: Ignoring removed orlov option [ 82.322016][ T7255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.327712][ T7380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.370477][ T7101] veth0_vlan: entered promiscuous mode [ 82.378464][ T7380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.386461][ T7101] veth1_vlan: entered promiscuous mode [ 82.412431][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.419472][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.445412][ T7255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.478742][ T64] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.490483][ T7023] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.528259][ T7403] loop1: detected capacity change from 0 to 512 [ 82.536127][ T7101] veth0_macvtap: entered promiscuous mode [ 82.553645][ T7403] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1187: casefold flag without casefold feature [ 82.567559][ T7403] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1187: couldn't read orphan inode 15 (err -117) [ 82.581052][ T7403] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.581681][ T64] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.612631][ T7101] veth1_macvtap: entered promiscuous mode [ 82.622027][ T7405] loop2: detected capacity change from 0 to 128 [ 82.643988][ T7403] loop1: detected capacity change from 512 to 64 [ 82.659951][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.670401][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.680247][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.690686][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.700515][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.711036][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.721029][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.731454][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.746702][ T7403] syz.1.1187: attempt to access beyond end of device [ 82.746702][ T7403] loop1: rw=2051, sector=86, nr_sectors = 2 limit=64 [ 82.753409][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.768483][ T7403] EXT4-fs (loop1): discard request in group:0 block:42 count:1 failed with -5 [ 82.778306][ T7403] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: IO failure [ 82.789098][ T7403] syz.1.1187: attempt to access beyond end of device [ 82.789098][ T7403] loop1: rw=2051, sector=84, nr_sectors = 2 limit=64 [ 82.790203][ T64] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.803002][ T7403] EXT4-fs (loop1): discard request in group:0 block:41 count:1 failed with -5 [ 82.821625][ T7403] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: IO failure [ 82.830013][ T7403] syz.1.1187: attempt to access beyond end of device [ 82.830013][ T7403] loop1: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 82.831363][ T7255] hsr_slave_0: entered promiscuous mode [ 82.843339][ T7403] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 82.860564][ T7255] hsr_slave_1: entered promiscuous mode [ 82.863742][ T7403] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 82.877333][ T7255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.877465][ T7403] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 82.885676][ T7255] Cannot create hsr debugfs directory [ 82.915547][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.926148][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.936078][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.946503][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.956389][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.958876][ T7428] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 82.966815][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.966830][ T7101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.974319][ T7403] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 82.983897][ T7101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.013812][ T7428] vhci_hcd: invalid port number 23 [ 83.020426][ T7403] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 83.030605][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.046776][ T64] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.061919][ T6975] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 83.098195][ T7101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.106941][ T7101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.115682][ T7101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.124472][ T7101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.133003][ T6975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.246565][ T7447] loop0: detected capacity change from 0 to 1024 [ 83.253650][ T64] bridge_slave_1: left allmulticast mode [ 83.254034][ T7447] EXT4-fs: Ignoring removed orlov option [ 83.259528][ T64] bridge_slave_1: left promiscuous mode [ 83.264989][ T7447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.270555][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.285894][ T64] bridge_slave_0: left allmulticast mode [ 83.291727][ T64] bridge_slave_0: left promiscuous mode [ 83.297466][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.298843][ T7447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.348917][ T7101] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.376125][ T64] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 83.379867][ T7452] loop0: detected capacity change from 0 to 2048 [ 83.424057][ T7452] loop0: p3 < > p4 < > [ 83.428225][ T7452] loop0: partition table partially beyond EOD, truncated [ 83.435433][ T7452] loop0: p3 start 4284289 is beyond EOD, truncated [ 83.442182][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.451444][ T7452] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 83.462119][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.474625][ T64] bond0 (unregistering): Released all slaves [ 83.484476][ T4077] udevd[4077]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 83.515491][ T7382] chnl_net:caif_netlink_parms(): no params data found [ 83.564251][ T7382] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.571310][ T7382] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.579367][ T7382] bridge_slave_0: entered allmulticast mode [ 83.585868][ T7382] bridge_slave_0: entered promiscuous mode [ 83.610783][ T7382] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.617914][ T7382] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.626881][ T7382] bridge_slave_1: entered allmulticast mode [ 83.633788][ T7382] bridge_slave_1: entered promiscuous mode [ 83.646101][ T7476] loop2: detected capacity change from 0 to 128 [ 83.662934][ T64] hsr_slave_0: left promiscuous mode [ 83.669405][ T64] hsr_slave_1: left promiscuous mode [ 83.675383][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.682824][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.691103][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.698552][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.707674][ T64] veth1_macvtap: left promiscuous mode [ 83.713160][ T64] veth0_macvtap: left promiscuous mode [ 83.718816][ T64] veth1_vlan: left promiscuous mode [ 83.722281][ T7480] loop2: detected capacity change from 0 to 512 [ 83.724157][ T64] veth0_vlan: left promiscuous mode [ 83.738963][ T7480] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.754094][ T7480] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 83.762340][ T7480] System zones: 1-12 [ 83.766912][ T7480] EXT4-fs (loop2): 1 truncate cleaned up [ 83.772968][ T7480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.803117][ T7023] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.820569][ T64] team0 (unregistering): Port device team_slave_1 removed [ 83.832999][ T64] team0 (unregistering): Port device team_slave_0 removed [ 83.872917][ T7478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1193'. [ 83.881948][ T7478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1193'. [ 83.893470][ T7478] bond_slave_0: entered promiscuous mode [ 83.899781][ T7478] bond_slave_0: left promiscuous mode [ 83.911820][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1196'. [ 83.920875][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1196'. [ 83.931631][ T7487] bond_slave_0: entered promiscuous mode [ 83.937577][ T7487] bond_slave_0: left promiscuous mode [ 83.950277][ T7382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.961103][ T7382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.980612][ T7490] loop0: detected capacity change from 0 to 1024 [ 83.990007][ T7490] EXT4-fs: Ignoring removed orlov option [ 83.993050][ T7382] team0: Port device team_slave_0 added [ 83.995698][ T7490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.009388][ T7382] team0: Port device team_slave_1 added [ 84.027421][ T7490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.067148][ T7494] bridge0: port 3(vlan2) entered blocking state [ 84.073448][ T7494] bridge0: port 3(vlan2) entered disabled state [ 84.080476][ T7494] vlan2: entered allmulticast mode [ 84.086103][ T7494] vlan2: left allmulticast mode [ 84.093796][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.097391][ T7101] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.100801][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.135991][ T7382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.147868][ T7382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.154828][ T7382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.156930][ T7495] loop2: detected capacity change from 0 to 512 [ 84.180716][ T7382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.201837][ T7495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 84.220087][ T7495] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.237840][ T7255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.268045][ T7023] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 84.280853][ T7382] hsr_slave_0: entered promiscuous mode [ 84.288535][ T7382] hsr_slave_1: entered promiscuous mode [ 84.302898][ T7382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.317995][ T7382] Cannot create hsr debugfs directory [ 84.323486][ T7255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.349583][ T7504] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 84.367096][ T7255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.375981][ T7255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.377084][ T7510] loop0: detected capacity change from 0 to 512 [ 84.404474][ T7510] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1203: casefold flag without casefold feature [ 84.428162][ T7510] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1203: couldn't read orphan inode 15 (err -117) [ 84.440892][ T7510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.491048][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.504784][ T7510] loop0: detected capacity change from 512 to 64 [ 84.516532][ T7255] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.517648][ T7510] EXT4-fs (loop0): discard request in group:0 block:42 count:1 failed with -5 [ 84.532334][ T7510] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: IO failure [ 84.545939][ T7510] EXT4-fs (loop0): discard request in group:0 block:41 count:1 failed with -5 [ 84.556024][ T7510] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: IO failure [ 84.565582][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.572624][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.572824][ T7510] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 84.582112][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.598097][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.606253][ T7510] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 84.617651][ T7510] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 84.628348][ T7255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.639122][ T7510] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 84.651759][ T7510] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 84.725974][ T7101] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 84.733440][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.778472][ T7101] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.789016][ T7382] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.815127][ T7382] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.833095][ T7382] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.844369][ T7382] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.912302][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 84.912317][ T29] audit: type=1326 audit(1725515039.753:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f2bd03ea7 code=0x7ffc0000 [ 84.942534][ T7382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.947931][ T29] audit: type=1326 audit(1725515039.753:8112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2bca8859 code=0x7ffc0000 [ 84.972463][ T29] audit: type=1326 audit(1725515039.753:8113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bd0cef9 code=0x7ffc0000 [ 84.986321][ T7255] veth0_vlan: entered promiscuous mode [ 84.995839][ T29] audit: type=1326 audit(1725515039.783:8114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f2bd03ea7 code=0x7ffc0000 [ 84.995862][ T29] audit: type=1326 audit(1725515039.783:8115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2bca8859 code=0x7ffc0000 [ 85.048180][ T29] audit: type=1326 audit(1725515039.783:8116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bd0cef9 code=0x7ffc0000 [ 85.071599][ T29] audit: type=1326 audit(1725515039.783:8117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f2bd03ea7 code=0x7ffc0000 [ 85.095175][ T29] audit: type=1326 audit(1725515039.783:8118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2bca8859 code=0x7ffc0000 [ 85.118564][ T29] audit: type=1326 audit(1725515039.783:8119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bd0cef9 code=0x7ffc0000 [ 85.143630][ T29] audit: type=1326 audit(1725515039.813:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f2bd03ea7 code=0x7ffc0000 [ 85.170085][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.186665][ T7255] veth1_vlan: entered promiscuous mode [ 85.204276][ T7382] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.217114][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.232058][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.239214][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.252501][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.259658][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.277919][ T7255] veth0_macvtap: entered promiscuous mode [ 85.290307][ T7255] veth1_macvtap: entered promiscuous mode [ 85.300915][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.311418][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.321311][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.331736][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.341554][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.352041][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.361921][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.372349][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.384835][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.409749][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.424895][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.435377][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.445241][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.455751][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.465655][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.476209][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.486099][ T7255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.496545][ T7255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.507130][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.527973][ T7382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.538501][ T7382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.562731][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.594116][ T7255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.602874][ T7255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.611595][ T7255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.620301][ T7255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.729660][ T11] bridge_slave_1: left allmulticast mode [ 85.735549][ T11] bridge_slave_1: left promiscuous mode [ 85.741291][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.755312][ T11] bridge_slave_0: left allmulticast mode [ 85.760978][ T11] bridge_slave_0: left promiscuous mode [ 85.766694][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.865744][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.876002][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.886116][ T11] bond0 (unregistering): Released all slaves [ 85.898345][ T7382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.916604][ T7571] chnl_net:caif_netlink_parms(): no params data found [ 86.007814][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.014954][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.033279][ T7571] bridge_slave_0: entered allmulticast mode [ 86.043224][ T7571] bridge_slave_0: entered promiscuous mode [ 86.060057][ T7680] netlink: 'syz.2.1213': attribute type 1 has an invalid length. [ 86.063164][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.067780][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 86.083847][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.091177][ T7571] bridge_slave_1: entered allmulticast mode [ 86.102732][ T7571] bridge_slave_1: entered promiscuous mode [ 86.111940][ T11] hsr_slave_0: left promiscuous mode [ 86.120925][ T11] hsr_slave_1: left promiscuous mode [ 86.134744][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.142211][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.166585][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.174098][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.186652][ T11] veth1_macvtap: left promiscuous mode [ 86.192158][ T11] veth0_macvtap: left promiscuous mode [ 86.197683][ T11] veth1_vlan: left promiscuous mode [ 86.202937][ T11] veth0_vlan: left promiscuous mode [ 86.312873][ T11] team0 (unregistering): Port device team_slave_1 removed [ 86.323554][ T11] team0 (unregistering): Port device team_slave_0 removed [ 86.391394][ T7382] veth0_vlan: entered promiscuous mode [ 86.400077][ T7382] veth1_vlan: entered promiscuous mode [ 86.415619][ T7571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.428494][ T7571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.441188][ T7706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1219'. [ 86.530124][ T7382] veth0_macvtap: entered promiscuous mode [ 86.562564][ T7571] team0: Port device team_slave_0 added [ 86.584820][ T7571] team0: Port device team_slave_1 added [ 86.612964][ T7382] veth1_macvtap: entered promiscuous mode [ 86.636301][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.643262][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.669377][ T7571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.705474][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.715932][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.725790][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.736205][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.746129][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.756554][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.766417][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.776842][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.788291][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.799035][ T7571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.806189][ T7571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.832128][ T7571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.861203][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.871662][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.881478][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.891977][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.899964][ T7733] syz.2.1224[7733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.901781][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.901815][ T7733] syz.2.1224[7733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.913061][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.913074][ T7382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.913086][ T7382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.966347][ T7382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.977285][ T7382] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.986114][ T7382] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.994996][ T7382] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.003905][ T7382] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.058269][ T7571] hsr_slave_0: entered promiscuous mode [ 87.067920][ T7571] hsr_slave_1: entered promiscuous mode [ 87.074316][ T7571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.081863][ T7571] Cannot create hsr debugfs directory [ 87.144082][ T7745] syz.2.1228[7745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.144137][ T7745] syz.2.1228[7745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.175336][ T7745] syz.2.1228[7745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.207438][ T7745] syz.2.1228[7745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.352040][ T7775] netlink: 'syz.2.1235': attribute type 4 has an invalid length. [ 87.371137][ T7775] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1235'. [ 87.382212][ T7775] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 87.541050][ T7571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.566801][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.586506][ T7807] syz.2.1240[7807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.586557][ T7807] syz.2.1240[7807] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.603811][ T7571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.607266][ T7804] syz.3.1241[7804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.626983][ T7571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.641666][ T7804] syz.3.1241[7804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.662326][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.708899][ T7571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.740243][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.797770][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.867724][ T7833] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 87.924046][ T7787] chnl_net:caif_netlink_parms(): no params data found [ 87.947918][ T11] bridge_slave_1: left allmulticast mode [ 87.953593][ T11] bridge_slave_1: left promiscuous mode [ 87.959243][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.990773][ T11] bridge_slave_0: left allmulticast mode [ 87.996459][ T11] bridge_slave_0: left promiscuous mode [ 88.002189][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.155896][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.166131][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.176150][ T11] bond0 (unregistering): Released all slaves [ 88.269744][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.276889][ T7787] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.278828][ T7879] loop4: detected capacity change from 0 to 512 [ 88.292185][ T7787] bridge_slave_0: entered allmulticast mode [ 88.300757][ T7879] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1251: casefold flag without casefold feature [ 88.314313][ T7787] bridge_slave_0: entered promiscuous mode [ 88.335242][ T7571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.338193][ T7879] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1251: couldn't read orphan inode 15 (err -117) [ 88.357611][ T7879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.363098][ T11] hsr_slave_0: left promiscuous mode [ 88.388634][ T11] hsr_slave_1: left promiscuous mode [ 88.400849][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.408412][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.420710][ T7255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.421471][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.437077][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.452418][ T11] veth1_macvtap: left promiscuous mode [ 88.458004][ T11] veth0_macvtap: left promiscuous mode [ 88.463559][ T11] veth1_vlan: left promiscuous mode [ 88.468836][ T11] veth0_vlan: left promiscuous mode [ 88.559178][ T7896] loop4: detected capacity change from 0 to 128 [ 88.567283][ T11] team0 (unregistering): Port device team_slave_1 removed [ 88.579447][ T11] team0 (unregistering): Port device team_slave_0 removed [ 88.607409][ T7898] loop4: detected capacity change from 0 to 128 [ 88.631318][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.638518][ T7787] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.646850][ T7787] bridge_slave_1: entered allmulticast mode [ 88.656093][ T7787] bridge_slave_1: entered promiscuous mode [ 88.688404][ T7787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.707570][ T7571] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.724628][ T7787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.744702][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.751785][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.771171][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.778253][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.812086][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1266'. [ 88.821082][ T7915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1266'. [ 88.867419][ T7915] bond_slave_0: entered promiscuous mode [ 88.882181][ T7915] bond_slave_0: left promiscuous mode [ 88.896311][ T7787] team0: Port device team_slave_0 added [ 88.903467][ T7787] team0: Port device team_slave_1 added [ 88.953385][ T7787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.960443][ T7787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.986433][ T7787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.025632][ T7787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.032592][ T7787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.058543][ T7787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.129313][ T7787] hsr_slave_0: entered promiscuous mode [ 89.138627][ T7949] loop4: detected capacity change from 0 to 128 [ 89.147426][ T7787] hsr_slave_1: entered promiscuous mode [ 89.218219][ T7960] loop4: detected capacity change from 0 to 512 [ 89.233204][ T7571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.236323][ T7960] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1274: casefold flag without casefold feature [ 89.254277][ T7960] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1274: couldn't read orphan inode 15 (err -117) [ 89.266764][ T7960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.370980][ T7971] loop3: detected capacity change from 0 to 128 [ 89.374680][ T7255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.500899][ T7571] veth0_vlan: entered promiscuous mode [ 89.525957][ T7571] veth1_vlan: entered promiscuous mode [ 89.563392][ T7571] veth0_macvtap: entered promiscuous mode [ 89.580541][ T7571] veth1_macvtap: entered promiscuous mode [ 89.593728][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.604242][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.614041][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.624459][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.634316][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.644746][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.654650][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.665559][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.689243][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.712389][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.722989][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.732841][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.743385][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.753326][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.763751][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.773541][ T7571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.783988][ T7571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.797053][ T7571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.812137][ T7571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.820941][ T7571] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.829907][ T7571] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.838613][ T7571] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.884949][ T7787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.902703][ T7787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.912135][ T8008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1210'. [ 89.921191][ T8008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1210'. [ 89.939684][ T8008] bond_slave_0: entered promiscuous mode [ 89.949750][ T8008] bond_slave_0: left promiscuous mode [ 89.963956][ T7787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.978883][ T7787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.999363][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 89.999374][ T29] audit: type=1400 audit(1725515044.843:8643): avc: denied { wake_alarm } for pid=8022 comm="syz.2.1282" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 90.051330][ T7787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.066211][ T7787] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.077104][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.084393][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.098260][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.105478][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.114865][ T8030] loop1: detected capacity change from 0 to 128 [ 90.142089][ T7787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.201897][ T29] audit: type=1326 audit(1725515045.043:8644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734b38cef9 code=0x7ffc0000 [ 90.211637][ T7787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.226104][ T29] audit: type=1326 audit(1725515045.043:8645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734b38cef9 code=0x7ffc0000 [ 90.290577][ T29] audit: type=1326 audit(1725515045.073:8646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f734b38cef9 code=0x7ffc0000 [ 90.314117][ T29] audit: type=1326 audit(1725515045.073:8647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734b38cef9 code=0x7ffc0000 [ 90.337501][ T29] audit: type=1326 audit(1725515045.073:8648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734b38cef9 code=0x7ffc0000 [ 90.340338][ T8060] loop3: detected capacity change from 0 to 512 [ 90.360880][ T29] audit: type=1326 audit(1725515045.103:8649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f734b38cef9 code=0x7ffc0000 [ 90.360913][ T29] audit: type=1326 audit(1725515045.103:8650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734b38cef9 code=0x7ffc0000 [ 90.407493][ T7787] veth0_vlan: entered promiscuous mode [ 90.414502][ T29] audit: type=1326 audit(1725515045.103:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734b38cef9 code=0x7ffc0000 [ 90.443126][ T29] audit: type=1326 audit(1725515045.103:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8042 comm="syz.1.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f734b38cef9 code=0x7ffc0000 [ 90.450326][ T7787] veth1_vlan: entered promiscuous mode [ 90.510759][ T7787] veth0_macvtap: entered promiscuous mode [ 90.538800][ T8060] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1286: casefold flag without casefold feature [ 90.551742][ T7787] veth1_macvtap: entered promiscuous mode [ 90.570501][ T8060] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1286: couldn't read orphan inode 15 (err -117) [ 90.595055][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.605563][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.615641][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.626379][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.628775][ T8060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.636234][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.659193][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.659208][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.659222][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.659236][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.659249][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.712152][ T7382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.714401][ T7787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.756448][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.767028][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.776959][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.787446][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.797299][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.806260][ T8083] loop3: detected capacity change from 0 to 2048 [ 90.807798][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.823911][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.834347][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.844156][ T7787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.854805][ T7787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.868266][ T7787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.879809][ T7787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.888530][ T7787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.897294][ T7787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.906026][ T7787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.906313][ T8085] loop4: detected capacity change from 0 to 128 [ 90.950649][ T8083] loop3: p3 < > p4 < > [ 90.954863][ T8083] loop3: partition table partially beyond EOD, truncated [ 90.962725][ T8083] loop3: p3 start 4284289 is beyond EOD, truncated [ 90.977482][ T8083] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 91.016177][ T8089] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 91.073808][ T8095] batadv0: entered promiscuous mode [ 91.822187][ T8132] syz_tun: entered promiscuous mode [ 91.827932][ T8132] macvtap1: entered promiscuous mode [ 91.833304][ T8132] macvtap1: entered allmulticast mode [ 91.838770][ T8132] syz_tun: entered allmulticast mode [ 91.850850][ T8132] syz_tun: left allmulticast mode [ 91.856060][ T8132] syz_tun: left promiscuous mode [ 91.952517][ T8141] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 91.973315][ T8141] batadv0: entered promiscuous mode [ 92.128560][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1326'. [ 92.137742][ T8163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1326'. [ 92.153990][ T8163] bond_slave_0: entered promiscuous mode [ 92.160366][ T8163] bond_slave_0: left promiscuous mode [ 92.219370][ T8175] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.306917][ T8185] block device autoloading is deprecated and will be removed. [ 92.337478][ T8192] loop4: detected capacity change from 0 to 128 [ 92.345148][ T8192] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 92.355675][ T8192] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1338'. [ 92.373230][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1333'. [ 92.573764][ T8217] bpf_get_probe_write_proto: 6 callbacks suppressed [ 92.573777][ T8217] syz.4.1348[8217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.580559][ T8217] syz.4.1348[8217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.656724][ T8225] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 92.674630][ T8225] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 92.682222][ T8225] vhci_hcd vhci_hcd.0: Device attached [ 92.710467][ T8229] loop4: detected capacity change from 0 to 512 [ 92.717945][ T8226] vhci_hcd: connection closed [ 92.718080][ T3284] vhci_hcd: stop threads [ 92.727103][ T3284] vhci_hcd: release socket [ 92.730649][ T8229] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1353: casefold flag without casefold feature [ 92.731505][ T3284] vhci_hcd: disconnect device [ 92.749451][ T8229] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1353: couldn't read orphan inode 15 (err -117) [ 92.761734][ T8229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.833776][ T8229] loop4: detected capacity change from 512 to 64 [ 92.841868][ T8232] bio_check_eod: 11 callbacks suppressed [ 92.841960][ T8232] syz.4.1353: attempt to access beyond end of device [ 92.841960][ T8232] loop4: rw=2051, sector=86, nr_sectors = 2 limit=64 [ 92.861223][ T8232] EXT4-fs (loop4): discard request in group:0 block:42 count:1 failed with -5 [ 92.870121][ T8232] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: IO failure [ 92.878245][ T8232] syz.4.1353: attempt to access beyond end of device [ 92.878245][ T8232] loop4: rw=2051, sector=84, nr_sectors = 2 limit=64 [ 92.891463][ T8232] EXT4-fs (loop4): discard request in group:0 block:41 count:1 failed with -5 [ 92.900444][ T8232] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: IO failure [ 92.908716][ T8232] syz.4.1353: attempt to access beyond end of device [ 92.908716][ T8232] loop4: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 92.922050][ T8232] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 92.933306][ T8232] buffer_io_error: 26 callbacks suppressed [ 92.933315][ T8232] Buffer I/O error on device loop4, logical block 255 [ 92.946073][ T8232] syz.4.1353: attempt to access beyond end of device [ 92.946073][ T8232] loop4: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 92.959468][ T8232] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 92.970742][ T8232] Buffer I/O error on device loop4, logical block 253 [ 92.977520][ T8232] Buffer I/O error on device loop4, logical block 254 [ 92.984549][ T8232] syz.4.1353: attempt to access beyond end of device [ 92.984549][ T8232] loop4: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 92.997812][ T8232] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 93.008948][ T8232] Buffer I/O error on device loop4, logical block 37 [ 93.015695][ T8232] Buffer I/O error on device loop4, logical block 38 [ 93.022355][ T8232] Buffer I/O error on device loop4, logical block 39 [ 93.029057][ T8232] Buffer I/O error on device loop4, logical block 40 [ 93.035866][ T8232] syz.4.1353: attempt to access beyond end of device [ 93.035866][ T8232] loop4: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 93.049181][ T8232] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 93.060475][ T8232] Buffer I/O error on device loop4, logical block 249 [ 93.067270][ T8232] Buffer I/O error on device loop4, logical block 250 [ 93.071114][ T8178] dccp_close: ABORT with 32 bytes unread [ 93.074007][ T8232] Buffer I/O error on device loop4, logical block 251 [ 93.075017][ T8232] syz.4.1353: attempt to access beyond end of device [ 93.075017][ T8232] loop4: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 93.099989][ T8232] EXT4-fs warning (device loop4): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 93.125681][ T7255] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 93.147452][ T7255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.285250][ T8250] loop1: detected capacity change from 0 to 2048 [ 93.307367][ T8252] syz.0.1364[8252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.307409][ T8252] syz.0.1364[8252] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.314054][ T8250] loop1: p3 < > p4 < > [ 93.320128][ T8252] netlink: 'syz.0.1364': attribute type 4 has an invalid length. [ 93.329980][ T8250] loop1: partition table partially beyond EOD, [ 93.334229][ T8252] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1364'. [ 93.341843][ T8250] truncated [ 93.341939][ T8250] loop1: p3 start 4284289 is beyond EOD, truncated [ 93.352245][ T2961] loop1: p3 < > p4 < > [ 93.366270][ T8252] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 93.366924][ T2961] loop1: partition table partially beyond EOD, truncated [ 93.394259][ T2961] loop1: p3 start 4284289 is beyond EOD, truncated [ 93.438662][ T8259] 9pnet_fd: Insufficient options for proto=fd [ 93.445619][ T8261] FAULT_INJECTION: forcing a failure. [ 93.445619][ T8261] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.458718][ T8261] CPU: 1 UID: 0 PID: 8261 Comm: syz.1.1367 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 93.458743][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 93.458863][ T8261] Call Trace: [ 93.458869][ T8261] [ 93.458874][ T8261] dump_stack_lvl+0xf2/0x150 [ 93.458897][ T8261] dump_stack+0x15/0x20 [ 93.458913][ T8261] should_fail_ex+0x229/0x230 [ 93.458942][ T8261] should_fail+0xb/0x10 [ 93.458962][ T8261] should_fail_usercopy+0x1a/0x20 [ 93.458996][ T8261] _copy_from_user+0x1e/0xd0 [ 93.459016][ T8261] do_fcntl+0x5b1/0xe20 [ 93.459038][ T8261] ? selinux_file_fcntl+0x1ca/0x1e0 [ 93.459088][ T8261] __se_sys_fcntl+0xc4/0x190 [ 93.459163][ T8261] __x64_sys_fcntl+0x43/0x50 [ 93.459183][ T8261] x64_sys_call+0x209e/0x2d60 [ 93.459269][ T8261] do_syscall_64+0xc9/0x1c0 [ 93.459309][ T8261] ? clear_bhb_loop+0x55/0xb0 [ 93.459326][ T8261] ? clear_bhb_loop+0x55/0xb0 [ 93.459342][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.459462][ T8261] RIP: 0033:0x7f734b38cef9 [ 93.459477][ T8261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.459506][ T8261] RSP: 002b:00007f734a007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 93.459522][ T8261] RAX: ffffffffffffffda RBX: 00007f734b545f80 RCX: 00007f734b38cef9 [ 93.459533][ T8261] RDX: 0000000020000000 RSI: 0000000000000024 RDI: 0000000000000004 [ 93.459546][ T8261] RBP: 00007f734a007090 R08: 0000000000000000 R09: 0000000000000000 [ 93.459559][ T8261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.459571][ T8261] R13: 0000000000000000 R14: 00007f734b545f80 R15: 00007ffd6dcbeaf8 [ 93.459610][ T8261] [ 93.556229][ T8271] syz.2.1372[8271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.556316][ T8271] syz.2.1372[8271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.638685][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.691759][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.742337][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.806680][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.839070][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 93.869291][ T8272] chnl_net:caif_netlink_parms(): no params data found [ 93.911608][ T63] bridge_slave_1: left allmulticast mode [ 93.917354][ T63] bridge_slave_1: left promiscuous mode [ 93.922987][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.932228][ T63] bridge_slave_0: left allmulticast mode [ 93.937973][ T63] bridge_slave_0: left promiscuous mode [ 93.943677][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.036710][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.047097][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.057530][ T63] bond0 (unregistering): Released all slaves [ 94.096703][ T8272] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.103826][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.124099][ T8272] bridge_slave_0: entered allmulticast mode [ 94.144259][ T8272] bridge_slave_0: entered promiscuous mode [ 94.155024][ T8272] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.162109][ T8272] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.169513][ T8272] bridge_slave_1: entered allmulticast mode [ 94.175926][ T8272] bridge_slave_1: entered promiscuous mode [ 94.192609][ T63] hsr_slave_0: left promiscuous mode [ 94.221024][ T63] hsr_slave_1: left promiscuous mode [ 94.232445][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.240036][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.251642][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.259228][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.268596][ T63] veth1_macvtap: left promiscuous mode [ 94.274164][ T63] veth0_macvtap: left promiscuous mode [ 94.279648][ T63] veth1_vlan: left promiscuous mode [ 94.284988][ T63] veth0_vlan: left promiscuous mode [ 94.392974][ T63] team0 (unregistering): Port device team_slave_1 removed [ 94.405106][ T63] team0 (unregistering): Port device team_slave_0 removed [ 94.459848][ T8356] syz.2.1397[8356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.460032][ T8356] syz.2.1397[8356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.483497][ T8272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.531341][ T8272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.589166][ T8272] team0: Port device team_slave_0 added [ 94.604090][ T8272] team0: Port device team_slave_1 added [ 94.638617][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.645630][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.671717][ T8272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.695934][ T8272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.702898][ T8272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.729136][ T8272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.762848][ T8389] loop3: detected capacity change from 0 to 512 [ 94.779153][ T8389] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1406: casefold flag without casefold feature [ 94.807700][ T8389] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1406: couldn't read orphan inode 15 (err -117) [ 94.829848][ T8389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.833461][ T8272] hsr_slave_0: entered promiscuous mode [ 94.850394][ T8272] hsr_slave_1: entered promiscuous mode [ 94.857735][ T8272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.865530][ T8272] Cannot create hsr debugfs directory [ 94.910039][ T7382] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.005431][ T8428] loop1: detected capacity change from 0 to 128 [ 95.015739][ T8428] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.029920][ T8426] loop3: detected capacity change from 0 to 128 [ 95.043567][ T8428] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 95.096451][ T8426] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.126684][ T8426] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.151382][ T3284] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.199463][ T29] kauditd_printk_skb: 698 callbacks suppressed [ 95.199476][ T29] audit: type=1326 audit(1725515050.043:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77a41cef9 code=0x7ffc0000 [ 95.229050][ T29] audit: type=1326 audit(1725515050.043:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77a41cef9 code=0x7ffc0000 [ 95.252823][ T29] audit: type=1326 audit(1725515050.053:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa77a41b890 code=0x7ffc0000 [ 95.276945][ T29] audit: type=1326 audit(1725515050.093:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77a41cef9 code=0x7ffc0000 [ 95.277296][ T7571] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.300480][ T29] audit: type=1326 audit(1725515050.093:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77a41cef9 code=0x7ffc0000 [ 95.300503][ T29] audit: type=1326 audit(1725515050.093:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77a41cef9 code=0x7ffc0000 [ 95.356573][ T29] audit: type=1326 audit(1725515050.093:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77a41cef9 code=0x7ffc0000 [ 95.380191][ T29] audit: type=1326 audit(1725515050.093:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa77a41cef9 code=0x7ffc0000 [ 95.403578][ T29] audit: type=1326 audit(1725515050.093:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77a41cef9 code=0x7ffc0000 [ 95.427231][ T29] audit: type=1326 audit(1725515050.093:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8447 comm="syz.3.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa77a41cef9 code=0x7ffc0000 [ 95.496391][ T8460] syz.3.1422[8460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.496476][ T8460] syz.3.1422[8460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.530701][ T8460] netlink: 'syz.3.1422': attribute type 4 has an invalid length. [ 95.550174][ T8460] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1422'. [ 95.557265][ T8460] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 95.623154][ T8472] loop1: detected capacity change from 0 to 128 [ 95.655281][ T8476] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.700551][ T8272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.718578][ T8272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.734724][ T8272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.770146][ T8272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.883877][ T8272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.896959][ T8272] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.907659][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.914746][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.948038][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.955116][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.028343][ T8507] usb usb8: usbfs: process 8507 (syz.0.1432) did not claim interface 0 before use [ 96.059554][ T8524] loop1: detected capacity change from 0 to 512 [ 96.099073][ T8272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.109381][ T8524] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1436: casefold flag without casefold feature [ 96.132395][ T8524] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1436: couldn't read orphan inode 15 (err -117) [ 96.147536][ T8524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.235202][ T7571] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.305236][ T8566] netlink: 'syz.1.1442': attribute type 10 has an invalid length. [ 96.333029][ T8566] batman_adv: batadv0: Adding interface: team0 [ 96.339247][ T8566] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.364500][ T8566] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 96.394236][ T8272] veth0_vlan: entered promiscuous mode [ 96.426075][ T8272] veth1_vlan: entered promiscuous mode [ 96.457149][ T8272] veth0_macvtap: entered promiscuous mode [ 96.473148][ T8272] veth1_macvtap: entered promiscuous mode [ 96.494914][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.505377][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.515302][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.525729][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.535693][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.546296][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.556192][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.566737][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.576565][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.587023][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.607883][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.629213][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.639697][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.649524][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.659961][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.669793][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.680230][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.690122][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.700568][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.710418][ T8272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.720837][ T8272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.733778][ T8272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.746067][ T8272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.754809][ T8272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.763757][ T8272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.772439][ T8272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.916751][ T8609] loop1: detected capacity change from 0 to 128 [ 97.018637][ T8623] loop1: detected capacity change from 0 to 2048 [ 97.084545][ T8623] loop1: p3 < > p4 < > [ 97.088720][ T8623] loop1: partition table partially beyond EOD, truncated [ 97.099904][ T8633] loop4: detected capacity change from 0 to 512 [ 97.103865][ T8623] loop1: p3 start 4284289 is beyond EOD, truncated [ 97.121767][ T8623] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 97.130667][ T8633] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1452: casefold flag without casefold feature [ 97.144454][ T8633] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1452: couldn't read orphan inode 15 (err -117) [ 97.162627][ T8633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.190592][ T4077] udevd[4077]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 97.209448][ T8645] loop1: detected capacity change from 0 to 128 [ 97.221729][ T8272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.470651][ T8674] loop1: detected capacity change from 0 to 1024 [ 97.487266][ T8674] EXT4-fs: Ignoring removed orlov option [ 97.493048][ T8674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.513327][ T8674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.567068][ T7571] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.768257][ T8712] block device autoloading is deprecated and will be removed. [ 97.778722][ T8712] syz.1.1481: attempt to access beyond end of device [ 97.778722][ T8712] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 97.849045][ T8721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1484'. [ 97.870716][ T8717] loop1: detected capacity change from 0 to 1024 [ 97.887911][ T8717] EXT4-fs: Ignoring removed orlov option [ 97.893680][ T8717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.909904][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.917325][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.924738][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 97.932107][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.939517][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.946904][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.954333][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.961723][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.969123][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.976572][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.984057][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.991429][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.998918][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.006319][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.013775][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.021309][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.028714][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.036104][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.043507][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.050916][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.058353][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.065747][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.073182][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.080582][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.087974][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.095361][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.102815][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.110206][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.117663][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.125060][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.132459][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.134753][ T8717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.139928][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.159323][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.166722][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.174106][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.181475][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.188899][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.196356][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.203732][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.211142][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.218920][ T1040] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 98.230987][ T1040] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 98.242013][ T7571] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.345222][ T8753] loop4: detected capacity change from 0 to 128 [ 98.382207][ T8758] netlink: 'syz.1.1496': attribute type 1 has an invalid length. [ 98.398737][ T8758] loop1: detected capacity change from 0 to 128 [ 98.432370][ T8768] loop1: detected capacity change from 0 to 512 [ 98.440414][ T8768] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1500: casefold flag without casefold feature [ 98.453444][ T8768] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1500: couldn't read orphan inode 15 (err -117) [ 98.467417][ T8768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.523172][ T8773] loop4: detected capacity change from 0 to 2048 [ 98.529710][ T8768] loop1: detected capacity change from 512 to 64 [ 98.544626][ T8773] FAULT_INJECTION: forcing a failure. [ 98.544626][ T8773] name failslab, interval 1, probability 0, space 0, times 0 [ 98.557263][ T8773] CPU: 0 UID: 0 PID: 8773 Comm: syz.4.1502 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 98.567991][ T8773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 98.569735][ T8774] syz.1.1500: attempt to access beyond end of device [ 98.569735][ T8774] loop1: rw=2051, sector=86, nr_sectors = 2 limit=64 [ 98.578024][ T8773] Call Trace: [ 98.578034][ T8773] [ 98.578041][ T8773] dump_stack_lvl+0xf2/0x150 [ 98.578068][ T8773] dump_stack+0x15/0x20 [ 98.606141][ T8773] should_fail_ex+0x229/0x230 [ 98.610850][ T8773] ? getname_flags+0x81/0x3b0 [ 98.615599][ T8773] should_failslab+0x8f/0xb0 [ 98.620159][ T8774] EXT4-fs (loop1): discard request in group:0 block:42 count:1 failed with -5 [ 98.620189][ T8773] kmem_cache_alloc_noprof+0x4c/0x290 [ 98.634391][ T8773] getname_flags+0x81/0x3b0 [ 98.638966][ T8774] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: IO failure [ 98.638962][ T8773] user_path_at+0x26/0x110 [ 98.651335][ T8773] do_fchownat+0x92/0x1a0 [ 98.655584][ T8774] syz.1.1500: attempt to access beyond end of device [ 98.655584][ T8774] loop1: rw=2051, sector=84, nr_sectors = 2 limit=64 [ 98.655666][ T8773] ? __bpf_trace_sys_enter+0x9/0x10 [ 98.674089][ T8773] __x64_sys_lchown+0x4a/0x60 [ 98.676077][ T8774] EXT4-fs (loop1): discard request in group:0 block:41 count:1 failed with -5 [ 98.678798][ T8773] x64_sys_call+0x2a17/0x2d60 [ 98.678824][ T8773] do_syscall_64+0xc9/0x1c0 [ 98.678895][ T8773] ? clear_bhb_loop+0x55/0xb0 [ 98.678913][ T8773] ? clear_bhb_loop+0x55/0xb0 [ 98.695396][ T8774] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: IO failure [ 98.696835][ T8773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.711021][ T8774] syz.1.1500: attempt to access beyond end of device [ 98.711021][ T8774] loop1: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 98.714089][ T8773] RIP: 0033:0x7fb54f5fcef9 [ 98.714107][ T8773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.714124][ T8773] RSP: 002b:00007fb54e277038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 98.714166][ T8773] RAX: ffffffffffffffda RBX: 00007fb54f7b5f80 RCX: 00007fb54f5fcef9 [ 98.720071][ T8774] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 255) [ 98.733383][ T8773] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 98.733397][ T8773] RBP: 00007fb54e277090 R08: 0000000000000000 R09: 0000000000000000 [ 98.737797][ T8774] buffer_io_error: 2 callbacks suppressed [ 98.737808][ T8774] Buffer I/O error on device loop1, logical block 255 [ 98.757358][ T8773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.805305][ T8774] syz.1.1500: attempt to access beyond end of device [ 98.805305][ T8774] loop1: rw=2049, sector=506, nr_sectors = 4 limit=64 [ 98.806419][ T8773] R13: 0000000000000000 R14: 00007fb54f7b5f80 R15: 00007ffc78ffe0a8 [ 98.813178][ T8774] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 253) [ 98.821110][ T8773] [ 98.858327][ T8774] Buffer I/O error on device loop1, logical block 253 [ 98.865098][ T8774] Buffer I/O error on device loop1, logical block 254 [ 98.878434][ T8774] syz.1.1500: attempt to access beyond end of device [ 98.878434][ T8774] loop1: rw=2049, sector=74, nr_sectors = 8 limit=64 [ 98.891678][ T8774] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 37) [ 98.902903][ T8774] Buffer I/O error on device loop1, logical block 37 [ 98.909668][ T8774] Buffer I/O error on device loop1, logical block 38 [ 98.916368][ T8774] Buffer I/O error on device loop1, logical block 39 [ 98.923142][ T8774] Buffer I/O error on device loop1, logical block 40 [ 98.930948][ T8774] syz.1.1500: attempt to access beyond end of device [ 98.930948][ T8774] loop1: rw=2049, sector=498, nr_sectors = 8 limit=64 [ 98.944408][ T8774] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 249) [ 98.955799][ T8774] Buffer I/O error on device loop1, logical block 249 [ 98.962590][ T8774] Buffer I/O error on device loop1, logical block 250 [ 98.969339][ T8774] Buffer I/O error on device loop1, logical block 251 [ 98.976491][ T8774] syz.1.1500: attempt to access beyond end of device [ 98.976491][ T8774] loop1: rw=2049, sector=82, nr_sectors = 2 limit=64 [ 98.989726][ T8774] EXT4-fs warning (device loop1): ext4_end_bio:346: I/O error 10 writing to inode 19 starting block 41) [ 99.023790][ T7571] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 99.045789][ T8780] loop4: detected capacity change from 0 to 512 [ 99.065135][ T7571] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.074178][ T8782] loop3: detected capacity change from 0 to 2048 [ 99.081701][ T8780] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.114149][ T8780] EXT4-fs (loop4): 1 truncate cleaned up [ 99.121948][ T8780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.168422][ T8785] loop3: detected capacity change from 0 to 2048 [ 99.187663][ T8272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.235342][ T1040] IPVS: starting estimator thread 0... [ 99.241187][ T8787] Process accounting resumed [ 99.271734][ T8803] bpf_get_probe_write_proto: 8 callbacks suppressed [ 99.271760][ T8803] syz.0.1513[8803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.278880][ T8803] syz.0.1513[8803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.335687][ T8800] IPVS: using max 3120 ests per chain, 156000 per kthread [ 99.436319][ T8822] loop3: detected capacity change from 0 to 128 [ 99.576189][ T8847] syz.3.1527[8847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.576289][ T8847] syz.3.1527[8847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.607399][ T8848] syz.4.1525[8848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.633899][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1529'. [ 99.637611][ T8848] syz.4.1525[8848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.645208][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1529'. [ 99.676724][ T8852] bond_slave_0: entered promiscuous mode [ 99.687235][ T8852] bond_slave_0: left promiscuous mode [ 99.701324][ T8820] chnl_net:caif_netlink_parms(): no params data found [ 99.731320][ T8860] FAULT_INJECTION: forcing a failure. [ 99.731320][ T8860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.744521][ T8860] CPU: 1 UID: 0 PID: 8860 Comm: syz.4.1531 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 99.755415][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 99.765473][ T8860] Call Trace: [ 99.768752][ T8860] [ 99.771695][ T8860] dump_stack_lvl+0xf2/0x150 [ 99.776281][ T8860] dump_stack+0x15/0x20 [ 99.780448][ T8860] should_fail_ex+0x229/0x230 [ 99.785131][ T8860] should_fail+0xb/0x10 [ 99.789281][ T8860] should_fail_usercopy+0x1a/0x20 [ 99.794315][ T8860] _copy_from_user+0x1e/0xd0 [ 99.798904][ T8860] __sys_bpf+0x14e/0x7a0 [ 99.803175][ T8860] __x64_sys_bpf+0x43/0x50 [ 99.807580][ T8860] x64_sys_call+0x2625/0x2d60 [ 99.812285][ T8860] do_syscall_64+0xc9/0x1c0 [ 99.816811][ T8860] ? clear_bhb_loop+0x55/0xb0 [ 99.821498][ T8860] ? clear_bhb_loop+0x55/0xb0 [ 99.826154][ T8860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.832033][ T8860] RIP: 0033:0x7fb54f5fcef9 [ 99.836425][ T8860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.856065][ T8860] RSP: 002b:00007fb54e277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.864545][ T8860] RAX: ffffffffffffffda RBX: 00007fb54f7b5f80 RCX: 00007fb54f5fcef9 [ 99.872502][ T8860] RDX: 0000000000000070 RSI: 00000000200000c0 RDI: 0000000000000005 [ 99.880527][ T8860] RBP: 00007fb54e277090 R08: 0000000000000000 R09: 0000000000000000 [ 99.888494][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.896453][ T8860] R13: 0000000000000000 R14: 00007fb54f7b5f80 R15: 00007ffc78ffe0a8 [ 99.904415][ T8860] [ 99.916712][ T8871] loop0: detected capacity change from 0 to 1024 [ 99.923443][ T8871] EXT4-fs: Ignoring removed orlov option [ 99.926583][ T8820] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.929119][ T8871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.936132][ T8820] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.950657][ T8820] bridge_slave_0: entered allmulticast mode [ 99.958369][ T8871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.971064][ T8820] bridge_slave_0: entered promiscuous mode [ 99.978287][ T8820] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.985403][ T8820] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.993056][ T8820] bridge_slave_1: entered allmulticast mode [ 99.999823][ T8820] bridge_slave_1: entered promiscuous mode [ 100.016600][ T8876] loop4: detected capacity change from 0 to 1024 [ 100.023376][ T7787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.025568][ T8876] ext3: Unknown parameter 'nouser_xattr' [ 100.044325][ T8820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.055213][ T8820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.099645][ T8820] team0: Port device team_slave_0 added [ 100.146709][ T8820] team0: Port device team_slave_1 added [ 100.173889][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.180903][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.206910][ T8820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.220731][ T8880] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 100.228720][ T29] kauditd_printk_skb: 486 callbacks suppressed [ 100.228731][ T29] audit: type=1326 audit(1725515055.073:9847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f2bd03ea7 code=0x7ffc0000 [ 100.252589][ T8820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.258275][ T29] audit: type=1326 audit(1725515055.073:9848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2bca8859 code=0x7ffc0000 [ 100.265174][ T8820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.265199][ T8820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.325068][ T29] audit: type=1326 audit(1725515055.073:9849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bd0cef9 code=0x7ffc0000 [ 100.349865][ T29] audit: type=1326 audit(1725515055.123:9850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f2bd03ea7 code=0x7ffc0000 [ 100.373256][ T29] audit: type=1326 audit(1725515055.123:9851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2bca8859 code=0x7ffc0000 [ 100.396551][ T29] audit: type=1326 audit(1725515055.123:9852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bd0cef9 code=0x7ffc0000 [ 100.420050][ T29] audit: type=1326 audit(1725515055.133:9853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f2bd03ea7 code=0x7ffc0000 [ 100.443425][ T29] audit: type=1326 audit(1725515055.133:9854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f2bca8859 code=0x7ffc0000 [ 100.466762][ T29] audit: type=1326 audit(1725515055.133:9855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f2bd0cef9 code=0x7ffc0000 [ 100.490139][ T29] audit: type=1326 audit(1725515055.143:9856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f2bd03ea7 code=0x7ffc0000 [ 100.580891][ T8820] hsr_slave_0: entered promiscuous mode [ 100.589091][ T8820] hsr_slave_1: entered promiscuous mode [ 100.597943][ T8889] syz.2.1540[8889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.598137][ T8889] syz.2.1540[8889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.611616][ T8820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.639275][ T8891] loop0: detected capacity change from 0 to 512 [ 100.645964][ T8820] Cannot create hsr debugfs directory [ 100.651987][ T8891] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 100.669910][ T8891] EXT4-fs (loop0): 1 truncate cleaned up [ 100.683957][ T8891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.735436][ T7787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.741095][ T3351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.769035][ T8897] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709547746) [ 100.780083][ T8897] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 100.793906][ T8897] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1543'. [ 100.811157][ T3351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.929523][ T3351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.941527][ T8902] loop0: detected capacity change from 0 to 1024 [ 100.949086][ T8902] EXT4-fs: Ignoring removed orlov option [ 100.954796][ T8902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.978544][ T3351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.075150][ T8912] loop3: detected capacity change from 0 to 128 [ 101.140094][ T8902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.220453][ T3351] bridge_slave_1: left allmulticast mode [ 101.226161][ T3351] bridge_slave_1: left promiscuous mode [ 101.231819][ T3351] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.302214][ T7787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.339001][ T3351] bridge_slave_0: left allmulticast mode [ 101.343551][ T8923] loop3: detected capacity change from 0 to 2048 [ 101.344769][ T3351] bridge_slave_0: left promiscuous mode [ 101.344873][ T3351] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.377022][ T8919] syz.4.1551[8919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.377260][ T8919] syz.4.1551[8919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.486347][ T3351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.507554][ T3351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.517429][ T3351] bond0 (unregistering): Released all slaves [ 101.759514][ T8952] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 101.783323][ T8937] loop4: detected capacity change from 0 to 8192 [ 101.810958][ T3351] hsr_slave_0: left promiscuous mode [ 101.828907][ T3351] hsr_slave_1: left promiscuous mode [ 101.848699][ T3351] batman_adv: batadv0: Removing interface: team0 [ 101.850347][ T8958] loop0: detected capacity change from 0 to 512 [ 101.863349][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.870815][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.879945][ T8958] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.896054][ T3351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.903454][ T3351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.910880][ T8958] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.927121][ T3351] veth1_macvtap: left promiscuous mode [ 101.929264][ T8958] EXT4-fs error (device loop0): ext4_generic_delete_entry:2678: inode #2: block 3: comm syz.0.1558: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 101.932670][ T3351] veth0_macvtap: left promiscuous mode [ 101.954575][ T8958] EXT4-fs error (device loop0) in ext4_delete_entry:2749: Corrupt filesystem [ 101.958408][ T3351] veth1_vlan: left promiscuous mode [ 101.968790][ T8958] EXT4-fs warning (device loop0): ext4_rename_delete:3731: inode #2: comm syz.0.1558: Deleting old file: nlink 4, error=-117 [ 101.972347][ T3351] veth0_vlan: left promiscuous mode [ 101.986985][ T8951] IPVS: stopping master sync thread 8952 ... [ 102.046305][ T7787] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 102.130990][ T3351] team0 (unregistering): Port device team_slave_1 removed [ 102.141234][ T3351] team0 (unregistering): Port device team_slave_0 removed [ 102.190037][ T8962] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 102.228030][ T8962] syzkaller0: entered promiscuous mode [ 102.233516][ T8962] syzkaller0: entered allmulticast mode [ 102.267658][ T8980] loop4: detected capacity change from 0 to 1024 [ 102.292449][ T8820] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.294857][ T8980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.317436][ T8820] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.349271][ T8820] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.358241][ T8820] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.366294][ T8980] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 102.415131][ T8820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.427202][ T8820] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.437121][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.444277][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.459027][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.466134][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.486509][ T8820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.496930][ T8820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.575819][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.648084][ T8966] 9pnet_fd: Insufficient options for proto=fd [ 102.692625][ T8820] veth0_vlan: entered promiscuous mode [ 102.702783][ T8820] veth1_vlan: entered promiscuous mode [ 102.729626][ T8820] veth0_macvtap: entered promiscuous mode [ 102.741343][ T8820] veth1_macvtap: entered promiscuous mode [ 102.758958][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.769492][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.779423][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.790160][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.800085][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.810658][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.820614][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.831169][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.841010][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.851473][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.864153][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.894390][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.904876][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.914768][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.925299][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.935114][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.945535][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.955368][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.965811][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.975697][ T8820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.986149][ T8820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.999280][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.020200][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1564'. [ 103.029124][ T9005] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1564'. [ 103.041263][ T8820] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.050011][ T8820] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.058795][ T8820] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.067559][ T8820] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.101761][ T8272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.119310][ T9008] loop0: detected capacity change from 0 to 1024 [ 103.132826][ T9008] ================================================================== [ 103.140911][ T9008] BUG: KCSAN: data-race in munlock_folio / need_mlock_drain [ 103.148210][ T9008] [ 103.150523][ T9008] read-write to 0xffff888237d2b370 of 1 bytes by task 8966 on cpu 1: [ 103.158570][ T9008] munlock_folio+0x42/0x130 [ 103.163080][ T9008] folio_remove_rmap_ptes+0x214/0x220 [ 103.168457][ T9008] unmap_page_range+0x1028/0x2210 [ 103.173481][ T9008] unmap_single_vma+0x142/0x1d0 [ 103.178336][ T9008] unmap_vmas+0x18d/0x2b0 [ 103.182669][ T9008] exit_mmap+0x18f/0x710 [ 103.186910][ T9008] __mmput+0x28/0x1b0 [ 103.190890][ T9008] mmput+0x4c/0x60 [ 103.194607][ T9008] exit_mm+0xe4/0x190 [ 103.198587][ T9008] do_exit+0x55e/0x1720 [ 103.202741][ T9008] do_group_exit+0x102/0x150 [ 103.207334][ T9008] get_signal+0xf2f/0x1080 [ 103.211760][ T9008] arch_do_signal_or_restart+0x95/0x4b0 [ 103.217306][ T9008] syscall_exit_to_user_mode+0x59/0x130 [ 103.222860][ T9008] do_syscall_64+0xd6/0x1c0 [ 103.227371][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.233368][ T9008] [ 103.235685][ T9008] read to 0xffff888237d2b370 of 1 bytes by task 9008 on cpu 0: [ 103.243222][ T9008] need_mlock_drain+0x30/0x50 [ 103.247901][ T9008] __lru_add_drain_all+0x235/0x410 [ 103.253018][ T9008] lru_add_drain_all+0x10/0x20 [ 103.257782][ T9008] invalidate_bdev+0x47/0x70 [ 103.262370][ T9008] ext4_fill_super+0x6f3/0x39e0 [ 103.267217][ T9008] get_tree_bdev+0x256/0x2e0 [ 103.271800][ T9008] ext4_get_tree+0x1c/0x30 [ 103.276211][ T9008] vfs_get_tree+0x56/0x1e0 [ 103.280618][ T9008] do_new_mount+0x227/0x690 [ 103.285110][ T9008] path_mount+0x49b/0xb30 [ 103.289429][ T9008] __se_sys_mount+0x27c/0x2d0 [ 103.294095][ T9008] __x64_sys_mount+0x67/0x80 [ 103.298675][ T9008] x64_sys_call+0x203e/0x2d60 [ 103.303349][ T9008] do_syscall_64+0xc9/0x1c0 [ 103.307845][ T9008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.313737][ T9008] [ 103.316045][ T9008] value changed: 0x12 -> 0x1f [ 103.320701][ T9008] [ 103.323009][ T9008] Reported by Kernel Concurrency Sanitizer on: [ 103.329140][ T9008] CPU: 0 UID: 0 PID: 9008 Comm: syz.0.1565 Not tainted 6.11.0-rc6-syzkaller-00048-gc7fb1692dc01 #0 [ 103.339803][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 103.349845][ T9008] ================================================================== [ 103.388101][ T9012] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1567'. [ 103.411153][ T9008] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0