last executing test programs: 2.768744895s ago: executing program 3 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x1}]}) 2.617693342s ago: executing program 1 (id=86): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r3, @ANYBLOB="bf4400000000000000000c"], 0x2ac}}, 0x0) 2.316404957s ago: executing program 2 (id=88): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1210090, &(0x7f0000000a80)=ANY=[], 0x1, 0x277, &(0x7f00000001c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x3c}}, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) 2.182163391s ago: executing program 3 (id=89): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 2.18202424s ago: executing program 1 (id=90): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0x800800, &(0x7f0000000080)={[{@fat=@flush}, {@utf8}, {@utf8no}, {@utf8}, {@fat=@dos1xfloppy}, {@fat=@errors_continue}, {@shortname_winnt}]}, 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.794500566s ago: executing program 0 (id=92): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) wait4(r0, 0x0, 0x80000000, 0x0) 1.518095995s ago: executing program 2 (id=93): bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0xa) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) 1.391131626s ago: executing program 0 (id=94): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@delalloc}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x7fff, 0x2}) 1.355996735s ago: executing program 3 (id=95): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x23004002, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@nodelalloc}, {@sysvgroups}, {@jqfmt_vfsold}, {@nombcache}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==") r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file1\x00', r0, &(0x7f0000003b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 1.042258072s ago: executing program 1 (id=96): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xc) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 1.042123132s ago: executing program 0 (id=97): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') setns(r0, 0x0) 1.01328997s ago: executing program 2 (id=98): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='io_uring_task_add\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r1, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r4, 0x1) 930.9439ms ago: executing program 0 (id=99): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="ceae", 0x2}], 0x1}}], 0x1, 0x2400c042) 798.136343ms ago: executing program 1 (id=100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x1c, r2, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@val={0x8}, @void}}}, 0x1c}}, 0x40084) 787.306495ms ago: executing program 3 (id=101): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r1, 0xfffffffffffffffc, {0x1, 0xf0}}, 0x18) 773.851779ms ago: executing program 0 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r8 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r8, 0x11, 0x100000000a, &(0x7f0000000040)=0x800000001, 0x4) sendto$inet6(r8, 0x0, 0x0, 0xcc844, &(0x7f0000000180)={0xa, 0x4e23, 0xa19, @mcast1}, 0x1c) sendto$inet6(r8, &(0x7f00000001c0)='~', 0x1, 0x40000, 0x0, 0x0) recvfrom$inet6(r7, 0x0, 0xfffffffffffffdb2, 0x8020, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ce60}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) 654.199918ms ago: executing program 2 (id=103): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) 614.754958ms ago: executing program 1 (id=104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0521001f52000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="030000000300"], 0x50) 505.613365ms ago: executing program 2 (id=105): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0), 0x0) 414.091098ms ago: executing program 3 (id=106): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000e80)='kmem_cache_free\x00', r0, 0x0, 0x2a34}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) getpgid(0x0) 379.093027ms ago: executing program 1 (id=107): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x36, 0x0, 0xf00) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r3, 0x0, 0x0, 0x9000) rename(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000080018daae50729836110000bb92c7e11f86835fc037ca64839cf74ec12a8c7da092d4215c21bb361a2fa65bb4df0934b2d33986cbec51a42b214a248099dc1d07ea59344dead0687b62ff32f88cbfd36805f2fea301da42b5f331c41a38f41c74056e193dc2a6060000000000000057369bdb8aab5aa1ca87e92f651145d57faf126707a22da679ca1d06c780d787ba66b379f2ef48d0d82ce516a18861838169b0f97a39d18d97b98b2203bf5fb5", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") 308.857744ms ago: executing program 2 (id=108): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@oldalloc}, {@block_validity}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {}, {@i_version}, {@nomblk_io_submit}, {@nodioread_nolock}]}, 0x6, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4008, &(0x7f0000000600)={[{@nobarrier}]}, 0xfe, 0x269, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000001000058000b4824ca945f64009400ff0325010ebc000000000600008000f0fffeffe809005300fff5dd00000010000100080c10000000ffffffffff", 0x57}], 0x1) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1acd060, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 92.477517ms ago: executing program 3 (id=109): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 0s ago: executing program 0 (id=110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}}, 0x400c800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. [ 75.982359][ T5759] cgroup: Unknown subsys name 'net' [ 76.152451][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.832689][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.764024][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.773099][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.784186][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.794216][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.801952][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.810476][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.819243][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.827289][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.835754][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.843176][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.851795][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.859678][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.867538][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.875314][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.884742][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.893167][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.900834][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.916244][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.925955][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.934539][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.950280][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.963471][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.980348][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.988725][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.424965][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 80.539726][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 80.668724][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.676809][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.686984][ T5769] bridge_slave_0: entered allmulticast mode [ 80.694954][ T5769] bridge_slave_0: entered promiscuous mode [ 80.707933][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.716003][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.725849][ T5769] bridge_slave_1: entered allmulticast mode [ 80.733805][ T5769] bridge_slave_1: entered promiscuous mode [ 80.741248][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 80.834864][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.844946][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 80.868901][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.876701][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.884197][ T5768] bridge_slave_0: entered allmulticast mode [ 80.891232][ T5768] bridge_slave_0: entered promiscuous mode [ 80.901062][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.939888][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.948074][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.955755][ T5768] bridge_slave_1: entered allmulticast mode [ 80.963187][ T5768] bridge_slave_1: entered promiscuous mode [ 80.995719][ T5769] team0: Port device team_slave_0 added [ 81.036964][ T5769] team0: Port device team_slave_1 added [ 81.069354][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.115870][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.155891][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.163064][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.170771][ T5771] bridge_slave_0: entered allmulticast mode [ 81.178227][ T5771] bridge_slave_0: entered promiscuous mode [ 81.211399][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.218675][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.244790][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.257083][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.265131][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.272349][ T5771] bridge_slave_1: entered allmulticast mode [ 81.279671][ T5771] bridge_slave_1: entered promiscuous mode [ 81.302564][ T5768] team0: Port device team_slave_0 added [ 81.311716][ T5768] team0: Port device team_slave_1 added [ 81.331111][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.338295][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.364721][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.401128][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.408595][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.417126][ T5770] bridge_slave_0: entered allmulticast mode [ 81.424765][ T5770] bridge_slave_0: entered promiscuous mode [ 81.442643][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.465910][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.473094][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.480765][ T5770] bridge_slave_1: entered allmulticast mode [ 81.488770][ T5770] bridge_slave_1: entered promiscuous mode [ 81.511879][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.530593][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.537930][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.568565][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.629756][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.637480][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.663485][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.695416][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.707858][ T5771] team0: Port device team_slave_0 added [ 81.717252][ T5771] team0: Port device team_slave_1 added [ 81.730308][ T5769] hsr_slave_0: entered promiscuous mode [ 81.737219][ T5769] hsr_slave_1: entered promiscuous mode [ 81.746914][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.846169][ T5770] team0: Port device team_slave_0 added [ 81.857252][ T5768] hsr_slave_0: entered promiscuous mode [ 81.864839][ T5768] hsr_slave_1: entered promiscuous mode [ 81.871073][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.879665][ T5768] Cannot create hsr debugfs directory [ 81.886776][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.893926][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.920624][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.940217][ T5770] team0: Port device team_slave_1 added [ 81.946904][ T5775] Bluetooth: hci0: command tx timeout [ 81.974929][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.981933][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.007937][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.023498][ T5775] Bluetooth: hci3: command tx timeout [ 82.023521][ T5084] Bluetooth: hci2: command tx timeout [ 82.034649][ T5084] Bluetooth: hci1: command tx timeout [ 82.052441][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.059656][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.086113][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.100359][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.107598][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.133851][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.199082][ T5771] hsr_slave_0: entered promiscuous mode [ 82.206454][ T5771] hsr_slave_1: entered promiscuous mode [ 82.212623][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.220316][ T5771] Cannot create hsr debugfs directory [ 82.377589][ T5770] hsr_slave_0: entered promiscuous mode [ 82.384502][ T5770] hsr_slave_1: entered promiscuous mode [ 82.391022][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.398901][ T5770] Cannot create hsr debugfs directory [ 82.688472][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.701581][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.713051][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.727141][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.803919][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.821359][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.845470][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.856936][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.941471][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.968728][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.979677][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.992468][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.065872][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.076925][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.088384][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.112352][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.137747][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.207157][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.267648][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.275087][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.289948][ T3475] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.297162][ T3475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.355600][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.419080][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.438132][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.476268][ T3475] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.483589][ T3475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.509486][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.516690][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.576362][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.602045][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.626179][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.633453][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.665379][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.672569][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.702876][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.741563][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.748829][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.794542][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.801783][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.931708][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.972258][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.026611][ T5775] Bluetooth: hci0: command tx timeout [ 84.104758][ T5775] Bluetooth: hci1: command tx timeout [ 84.104836][ T5084] Bluetooth: hci2: command tx timeout [ 84.110358][ T5775] Bluetooth: hci3: command tx timeout [ 84.200357][ T5769] veth0_vlan: entered promiscuous mode [ 84.245085][ T5769] veth1_vlan: entered promiscuous mode [ 84.346888][ T5769] veth0_macvtap: entered promiscuous mode [ 84.387276][ T5769] veth1_macvtap: entered promiscuous mode [ 84.420417][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.455968][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.476444][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.488411][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.499520][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.511099][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.522050][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.537404][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.556395][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.729609][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.745221][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.772716][ T5771] veth0_vlan: entered promiscuous mode [ 84.784297][ T5770] veth0_vlan: entered promiscuous mode [ 84.806488][ T5768] veth0_vlan: entered promiscuous mode [ 84.836228][ T5768] veth1_vlan: entered promiscuous mode [ 84.844878][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.852753][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.862097][ T5770] veth1_vlan: entered promiscuous mode [ 84.880781][ T5771] veth1_vlan: entered promiscuous mode [ 84.974580][ T5770] veth0_macvtap: entered promiscuous mode [ 84.994408][ T5770] veth1_macvtap: entered promiscuous mode [ 85.016984][ T5768] veth0_macvtap: entered promiscuous mode [ 85.029504][ T5768] veth1_macvtap: entered promiscuous mode [ 85.099823][ T5771] veth0_macvtap: entered promiscuous mode [ 85.124664][ T5771] veth1_macvtap: entered promiscuous mode [ 85.136352][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.150655][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.169737][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.215458][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.230951][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.238128][ T5856] syz.2.3[5856]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.255256][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.270980][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.282285][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.295849][ T5856] loop2: detected capacity change from 0 to 1024 [ 85.300898][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.310755][ T5856] EXT4-fs: Ignoring removed bh option [ 85.324174][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.340051][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.349378][ T5856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.361598][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.372670][ T5856] ext4: Unknown parameter 'smackfsroot' [ 85.381948][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.395237][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.407375][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.419599][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.437052][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.457123][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.468584][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.479829][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.490737][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.501770][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.514334][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.623133][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.637172][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.648546][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.658408][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.678108][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.687919][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.697328][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.706410][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.737203][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.748116][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.758337][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.769435][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.779816][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.791134][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.804087][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.848367][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.857550][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.869195][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.878360][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.073385][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.081263][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.103597][ T5775] Bluetooth: hci0: command tx timeout [ 86.184303][ T5775] Bluetooth: hci3: command tx timeout [ 86.185121][ T5084] Bluetooth: hci2: command tx timeout [ 86.189833][ T5775] Bluetooth: hci1: command tx timeout [ 86.249509][ T3475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.265926][ T3475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.324852][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.348463][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.468753][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.494976][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.523015][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 86.576554][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.600917][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.650522][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.691657][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.183309][ T5084] Bluetooth: hci0: command tx timeout [ 88.263750][ T5084] Bluetooth: hci1: command tx timeout [ 88.274199][ T5084] Bluetooth: hci2: command tx timeout [ 88.279672][ T5084] Bluetooth: hci3: command tx timeout [ 88.583804][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 88.589653][ T5775] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 89.033465][ T5901] loop1: detected capacity change from 0 to 4096 [ 89.084718][ T5901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.328355][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.681594][ T5912] loop0: detected capacity change from 0 to 512 [ 89.694286][ T5912] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.730682][ T5912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.744338][ T5912] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.773958][ T27] audit: type=1800 audit(1768017080.582:2): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 89.817544][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.160471][ T27] audit: type=1326 audit(1768017080.972:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 90.207773][ T27] audit: type=1326 audit(1768017080.972:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 90.266505][ T27] audit: type=1326 audit(1768017081.002:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 90.304512][ T27] audit: type=1326 audit(1768017081.002:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 90.327367][ T27] audit: type=1326 audit(1768017081.002:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 90.350239][ T27] audit: type=1326 audit(1768017081.002:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 90.380690][ T27] audit: type=1326 audit(1768017081.002:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 90.409991][ T27] audit: type=1326 audit(1768017081.002:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 90.444315][ T27] audit: type=1326 audit(1768017081.002:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 90.678211][ T5926] sd 0:0:1:0: device reset [ 91.108519][ T5928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 91.292959][ T5931] loop1: detected capacity change from 0 to 128 [ 91.324967][ T5931] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 91.397064][ T5931] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 91.458677][ T5931] EXT4-fs error (device loop1): __ext4_find_entry:1696: inode #2: comm syz.1.27: checksumming directory block 0 [ 91.524029][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.628751][ T5938] loop3: detected capacity change from 0 to 512 [ 91.675100][ T5938] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.731180][ T5938] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.760981][ T5938] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.777086][ T5938] EXT4-fs (loop3): 1 truncate cleaned up [ 91.786359][ T5938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.881198][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 91.897930][ T5950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 91.906850][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.914394][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.934145][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.950033][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.995329][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.114488][ T23] cfg80211: failed to load regulatory.db [ 92.317910][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.36'. [ 92.491981][ T5964] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.801594][ T5972] loop3: detected capacity change from 0 to 128 [ 92.830039][ T5972] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 92.895224][ T5962] Zero length message leads to an empty skb [ 92.917204][ T5972] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.937999][ T5975] loop2: detected capacity change from 0 to 1024 [ 92.949825][ T5972] ext2 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.964691][ T5975] EXT4-fs: Ignoring removed orlov option [ 93.017900][ T5975] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 93.066661][ T5975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.103884][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.46'. [ 93.120836][ T5768] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.236501][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.352562][ T5986] lo speed is unknown, defaulting to 1000 [ 93.360276][ T5986] lo speed is unknown, defaulting to 1000 [ 93.372472][ T5986] lo speed is unknown, defaulting to 1000 [ 93.389704][ T5986] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.412935][ T5986] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 93.471506][ T5986] lo speed is unknown, defaulting to 1000 [ 93.509376][ T5986] lo speed is unknown, defaulting to 1000 [ 93.535551][ T5986] lo speed is unknown, defaulting to 1000 [ 93.559222][ T5986] lo speed is unknown, defaulting to 1000 [ 93.895015][ T5998] loop1: detected capacity change from 0 to 1024 [ 93.902886][ T5998] EXT4-fs: Ignoring removed orlov option [ 93.951376][ T5998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.212009][ T6005] loop2: detected capacity change from 0 to 512 [ 94.234541][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.355520][ T6011] netlink: 68 bytes leftover after parsing attributes in process `syz.0.58'. [ 94.466848][ T6015] loop2: detected capacity change from 0 to 1024 [ 94.521662][ T6015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.656658][ T6015] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2802: inode #15: comm syz.2.59: corrupted in-inode xattr: bad magic number in in-inode xattr [ 94.884698][ T6027] loop3: detected capacity change from 0 to 512 [ 94.892163][ T6027] ext4: Unknown parameter 'euid>00000000000000000000' [ 95.456106][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.084688][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 96.084702][ T27] audit: type=1326 audit(1768017086.902:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc558f749 code=0x7ffc0000 [ 96.206746][ T6048] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 96.507883][ T27] audit: type=1326 audit(1768017086.932:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc558f749 code=0x7ffc0000 [ 96.808716][ T27] audit: type=1326 audit(1768017086.932:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fcfc558f749 code=0x7ffc0000 [ 96.943938][ T27] audit: type=1326 audit(1768017086.932:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc558f749 code=0x7ffc0000 [ 96.996411][ T27] audit: type=1326 audit(1768017086.932:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="syz.3.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc558f749 code=0x7ffc0000 [ 97.262742][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 97.315985][ T6067] syz.2.79 uses obsolete (PF_INET,SOCK_PACKET) [ 97.337486][ T6067] syzkaller1: entered promiscuous mode [ 97.359319][ T6067] syzkaller1: entered allmulticast mode [ 97.449458][ T6070] loop1: detected capacity change from 0 to 764 [ 97.509385][ T6070] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 97.578310][ T6070] Symlink component flag not implemented [ 97.603060][ T6070] Symlink component flag not implemented (7) [ 97.651883][ T6076] loop3: detected capacity change from 0 to 512 [ 97.737458][ T27] audit: type=1326 audit(1768017088.552:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 97.807305][ T6076] EXT4-fs (loop3): 1 orphan inode deleted [ 97.808306][ T27] audit: type=1326 audit(1768017088.552:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 97.841613][ T3494] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.858493][ T6076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.885782][ T3494] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u4:11: Failed to release dquot type 1 [ 97.927115][ T27] audit: type=1326 audit(1768017088.552:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 97.951702][ T6076] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.984116][ T6085] netlink: 664 bytes leftover after parsing attributes in process `syz.1.86'. [ 98.018817][ T27] audit: type=1326 audit(1768017088.552:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.0.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb1fb8f749 code=0x7ffc0000 [ 98.108035][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.146234][ T6091] loop2: detected capacity change from 0 to 128 [ 98.154182][ T6090] loop1: detected capacity change from 0 to 128 [ 98.909194][ T6105] lo speed is unknown, defaulting to 1000 [ 98.916897][ T6105] lo speed is unknown, defaulting to 1000 [ 98.927001][ T6105] lo speed is unknown, defaulting to 1000 [ 98.950943][ T6105] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.019925][ T6105] lo speed is unknown, defaulting to 1000 [ 99.030908][ T6105] lo speed is unknown, defaulting to 1000 [ 99.040765][ T6105] lo speed is unknown, defaulting to 1000 [ 99.061782][ T6105] lo speed is unknown, defaulting to 1000 [ 99.083723][ T6109] loop3: detected capacity change from 0 to 512 [ 99.120239][ T6105] lo speed is unknown, defaulting to 1000 [ 99.131199][ T6109] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 99.204782][ T6109] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 99.270278][ T6109] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.95: iget: bad i_size value: 12154757448730 [ 99.317512][ T6109] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.95: couldn't read orphan inode 13 (err -117) [ 99.359097][ T6109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.404746][ T6109] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 99.526970][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.751792][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.981646][ T6139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 100.187379][ T6148] loop2: detected capacity change from 0 to 512 [ 100.211440][ T6145] loop1: detected capacity change from 0 to 512 [ 100.222286][ T6148] EXT4-fs: Ignoring removed oldalloc option [ 100.230531][ T6148] EXT4-fs: Ignoring removed i_version option [ 100.248785][ T6148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.280685][ T6148] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.327476][ T6148] EXT4-fs (loop2): 1 truncate cleaned up [ 100.337164][ T6145] ------------[ cut here ]------------ [ 100.343108][ T6145] EA inode 11 i_nlink=2 [ 100.343579][ T6145] WARNING: CPU: 0 PID: 6145 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.358797][ T6145] Modules linked in: [ 100.362818][ T6145] CPU: 0 PID: 6145 Comm: syz.1.107 Not tainted syzkaller #0 [ 100.370361][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.380696][ T6145] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.387479][ T6145] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 100.407341][ T6145] RSP: 0018:ffffc9000b8df1c0 EFLAGS: 00010246 [ 100.413593][ T6145] RAX: f19bb4f564348900 RBX: 0000000000000002 RCX: 0000000000080000 [ 100.421629][ T6145] RDX: ffffc9000cd99000 RSI: 0000000000029d89 RDI: 0000000000029d8a [ 100.431704][ T6145] RBP: ffffc9000b8df2b8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 100.439800][ T6145] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 100.447927][ T6145] R13: ffff8880780ec0a8 R14: ffff8880780ebeb0 R15: ffff8880780ebf00 [ 100.456130][ T6145] FS: 00007fa52e76d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 100.466283][ T6145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.472954][ T6145] CR2: 00007fdb1fdb42f8 CR3: 000000002ecc8000 CR4: 00000000003506f0 [ 100.481146][ T6145] Call Trace: [ 100.484652][ T6145] [ 100.487660][ T6145] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 100.493535][ T6145] ? ext4_xattr_inode_iget+0x3df/0x600 [ 100.499084][ T6145] ext4_xattr_set_entry+0xcda/0x1e90 [ 100.504959][ T6145] ext4_xattr_ibody_set+0x254/0x6a0 [ 100.510248][ T6145] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 100.516421][ T6145] __ext4_expand_extra_isize+0x306/0x400 [ 100.522171][ T6145] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 100.527884][ T6145] ext4_evict_inode+0x7ed/0xea0 [ 100.532797][ T6145] ? _raw_spin_unlock+0x28/0x40 [ 100.537857][ T6145] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 100.543889][ T6145] ? do_raw_spin_unlock+0x121/0x230 [ 100.549161][ T6145] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 100.555289][ T6145] evict+0x486/0x870 [ 100.559252][ T6145] ? __lock_acquire+0x7c80/0x7c80 [ 100.565164][ T6145] ? proc_nr_inodes+0x230/0x230 [ 100.570080][ T6145] ? do_raw_spin_unlock+0x121/0x230 [ 100.575580][ T6145] ? _raw_spin_unlock+0x28/0x40 [ 100.580499][ T6145] ? iput+0x70a/0x920 [ 100.584704][ T6145] ext4_orphan_cleanup+0xbd4/0x1400 [ 100.590099][ T6145] ? ext4_orphan_del+0xba0/0xba0 [ 100.595181][ T6145] ? ext4_register_li_request+0x183/0x940 [ 100.600977][ T6145] ? errseq_check_and_advance+0x66/0x120 [ 100.606763][ T6145] ext4_fill_super+0x5de4/0x66c0 [ 100.611808][ T6145] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 100.618216][ T6145] ? __might_sleep+0xe0/0xe0 [ 100.622878][ T6145] ? read_lock_is_recursive+0x20/0x20 [ 100.628412][ T6145] ? snprintf+0xdb/0x120 [ 100.632746][ T6145] ? vscnprintf+0x80/0x80 [ 100.637214][ T6145] ? down_write+0x162/0x1f0 [ 100.641788][ T6145] ? down_read_killable+0x340/0x340 [ 100.647199][ T6145] ? setup_bdev_super+0x56b/0x660 [ 100.652289][ T6145] get_tree_bdev+0x3e4/0x510 [ 100.657016][ T6145] ? vfs_parse_fs_string+0x160/0x160 [ 100.663060][ T6145] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 100.670002][ T6145] ? setup_bdev_super+0x660/0x660 [ 100.675170][ T6145] ? apparmor_capable+0x137/0x1a0 [ 100.680263][ T6145] ? bpf_lsm_capable+0x9/0x10 [ 100.685267][ T6145] ? security_capable+0x89/0xb0 [ 100.690198][ T6145] vfs_get_tree+0x8c/0x280 [ 100.694801][ T6145] do_new_mount+0x24b/0xa40 [ 100.699385][ T6145] __se_sys_mount+0x2da/0x3c0 [ 100.704217][ T6145] ? __x64_sys_mount+0xc0/0xc0 [ 100.709086][ T6145] ? __x64_sys_mount+0x20/0xc0 [ 100.714100][ T6145] do_syscall_64+0x55/0xb0 [ 100.718584][ T6145] ? clear_bhb_loop+0x40/0x90 [ 100.723408][ T6145] ? clear_bhb_loop+0x40/0x90 [ 100.728150][ T6145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.734416][ T6145] RIP: 0033:0x7fa52d990eea [ 100.738907][ T6145] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.758754][ T6145] RSP: 002b:00007fa52e76ce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.767987][ T6145] RAX: ffffffffffffffda RBX: 00007fa52e76cef0 RCX: 00007fa52d990eea [ 100.776331][ T6145] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa52e76ceb0 [ 100.784430][ T6145] RBP: 0000200000000180 R08: 00007fa52e76cef0 R09: 0000000000800700 [ 100.789918][ T6148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.792434][ T6145] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 100.812616][ T6145] R13: 00007fa52e76ceb0 R14: 000000000000046f R15: 000000000000002c [ 100.820725][ T6145] [ 100.823904][ T6145] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 100.831222][ T6145] CPU: 0 PID: 6145 Comm: syz.1.107 Not tainted syzkaller #0 [ 100.838551][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.848639][ T6145] Call Trace: [ 100.851942][ T6145] [ 100.854898][ T6145] dump_stack_lvl+0x16c/0x230 [ 100.859619][ T6145] ? show_regs_print_info+0x20/0x20 [ 100.864854][ T6145] ? load_image+0x3b0/0x3b0 [ 100.869405][ T6145] panic+0x2c0/0x710 [ 100.873339][ T6145] ? bpf_jit_dump+0xd0/0xd0 [ 100.877942][ T6145] __warn+0x2e0/0x470 [ 100.881954][ T6145] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.887975][ T6145] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.894078][ T6145] report_bug+0x2be/0x4f0 [ 100.898437][ T6145] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.904459][ T6145] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.910590][ T6145] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 100.916685][ T6145] handle_bug+0xcf/0x120 [ 100.920955][ T6145] exc_invalid_op+0x1a/0x50 [ 100.925481][ T6145] asm_exc_invalid_op+0x1a/0x20 [ 100.930354][ T6145] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 100.936991][ T6145] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 100.956714][ T6145] RSP: 0018:ffffc9000b8df1c0 EFLAGS: 00010246 [ 100.962933][ T6145] RAX: f19bb4f564348900 RBX: 0000000000000002 RCX: 0000000000080000 [ 100.970938][ T6145] RDX: ffffc9000cd99000 RSI: 0000000000029d89 RDI: 0000000000029d8a [ 100.978941][ T6145] RBP: ffffc9000b8df2b8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 100.986940][ T6145] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 100.994966][ T6145] R13: ffff8880780ec0a8 R14: ffff8880780ebeb0 R15: ffff8880780ebf00 [ 101.002985][ T6145] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 101.008683][ T6145] ? ext4_xattr_inode_iget+0x3df/0x600 [ 101.014187][ T6145] ext4_xattr_set_entry+0xcda/0x1e90 [ 101.019525][ T6145] ext4_xattr_ibody_set+0x254/0x6a0 [ 101.024765][ T6145] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 101.030714][ T6145] __ext4_expand_extra_isize+0x306/0x400 [ 101.036385][ T6145] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 101.041881][ T6145] ext4_evict_inode+0x7ed/0xea0 [ 101.046756][ T6145] ? _raw_spin_unlock+0x28/0x40 [ 101.051649][ T6145] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 101.057582][ T6145] ? do_raw_spin_unlock+0x121/0x230 [ 101.062809][ T6145] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 101.068731][ T6145] evict+0x486/0x870 [ 101.072658][ T6145] ? __lock_acquire+0x7c80/0x7c80 [ 101.077723][ T6145] ? proc_nr_inodes+0x230/0x230 [ 101.082598][ T6145] ? do_raw_spin_unlock+0x121/0x230 [ 101.087831][ T6145] ? _raw_spin_unlock+0x28/0x40 [ 101.092718][ T6145] ? iput+0x70a/0x920 [ 101.096731][ T6145] ext4_orphan_cleanup+0xbd4/0x1400 [ 101.102148][ T6145] ? ext4_orphan_del+0xba0/0xba0 [ 101.107128][ T6145] ? ext4_register_li_request+0x183/0x940 [ 101.112879][ T6145] ? errseq_check_and_advance+0x66/0x120 [ 101.118551][ T6145] ext4_fill_super+0x5de4/0x66c0 [ 101.123552][ T6145] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 101.129836][ T6145] ? __might_sleep+0xe0/0xe0 [ 101.134467][ T6145] ? read_lock_is_recursive+0x20/0x20 [ 101.139989][ T6145] ? snprintf+0xdb/0x120 [ 101.144382][ T6145] ? vscnprintf+0x80/0x80 [ 101.148747][ T6145] ? down_write+0x162/0x1f0 [ 101.153269][ T6145] ? down_read_killable+0x340/0x340 [ 101.158510][ T6145] ? setup_bdev_super+0x56b/0x660 [ 101.163586][ T6145] get_tree_bdev+0x3e4/0x510 [ 101.168197][ T6145] ? vfs_parse_fs_string+0x160/0x160 [ 101.173514][ T6145] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 101.179792][ T6145] ? setup_bdev_super+0x660/0x660 [ 101.184860][ T6145] ? apparmor_capable+0x137/0x1a0 [ 101.189914][ T6145] ? bpf_lsm_capable+0x9/0x10 [ 101.194619][ T6145] ? security_capable+0x89/0xb0 [ 101.199499][ T6145] vfs_get_tree+0x8c/0x280 [ 101.203968][ T6145] do_new_mount+0x24b/0xa40 [ 101.208505][ T6145] __se_sys_mount+0x2da/0x3c0 [ 101.213219][ T6145] ? __x64_sys_mount+0xc0/0xc0 [ 101.218016][ T6145] ? __x64_sys_mount+0x20/0xc0 [ 101.222805][ T6145] do_syscall_64+0x55/0xb0 [ 101.227272][ T6145] ? clear_bhb_loop+0x40/0x90 [ 101.232069][ T6145] ? clear_bhb_loop+0x40/0x90 [ 101.236804][ T6145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.242819][ T6145] RIP: 0033:0x7fa52d990eea [ 101.247262][ T6145] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.266893][ T6145] RSP: 002b:00007fa52e76ce68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.275347][ T6145] RAX: ffffffffffffffda RBX: 00007fa52e76cef0 RCX: 00007fa52d990eea [ 101.283349][ T6145] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa52e76ceb0 [ 101.291442][ T6145] RBP: 0000200000000180 R08: 00007fa52e76cef0 R09: 0000000000800700 [ 101.299443][ T6145] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 101.307453][ T6145] R13: 00007fa52e76ceb0 R14: 000000000000046f R15: 000000000000002c [ 101.315468][ T6145] [ 101.319069][ T6145] Kernel Offset: disabled [ 101.323504][ T6145] Rebooting in 86400 seconds..