last executing test programs: 6m5.660668154s ago: executing program 0 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x8926, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x802, 0xd, "5dee0000005940090000000f00"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x29) 6m5.468014791s ago: executing program 0 (id=605): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0fa208001f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m5.417009866s ago: executing program 0 (id=606): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001b00010000000000ffdbdf25fe880000000000000000000000000101ac1414bb000000000000000000000000000000000000000002"], 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6m5.205550774s ago: executing program 0 (id=610): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x12662a, 0x10004, 0x20da, 0x5, 0xa, 0x8, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x307, &(0x7f0000000a00)="$eJzs3U1rE1sYwPFnkqZ56e1tF5fL5XIvHHrhci/SoQ24c2GRFsWA0jaCFYSpnWrINClJKETEdiG4de2iC5ciiODOjYjbbvwEat11051dBI9MZibNyxhTJX3R/2/RPJ1znjmnc05aeto5s3PmwUp+OSEihojInhbPqEQk6scb8v/rzXd/z736xftcqZmp+cm0UhERuXbnydjLytCV57++iMvW6PWd3fSHrb/mRT7N35KIypVVQWtlqcViseI2oZZy5byp1GXHtsq2yhXKdqnil1uLjq2WneLqalVZhaXh1GrJLpeVVaiqvF1VlaKqlKrKumnlCso0TTWcEtQHKxDpKDO6JWYf72ktu1prHd8QrXVI7Y0giPmv8e/rLI6TtvHvWrdjckT72TMchj090PP448fjvf/fP+xt/PX6IXULh2Tu6sLFqUxmelaphMjK/bXsWtZ79crfDklOHLFlc/bUQk3cOeITw/04cyEzPaHqRuXflXU/f30t6/1wmFqu528HSU35EuRPevmqNT8mqf18W9IyIr9JaH46yJdIU/6g/PdPU74pI/LmhhTFkSV3Jjfl351U6tylTFv7yXo9AAAAAAAAAABOIlM17K/fG40/9SZNM17/j49GedI97NbzKjTW1ydkRGrh6/MToev7A/LnwBF+4QAAAAAA/ETK1dt5y3HsUn+C6KNklyZiIuIGIvfG3M50PeHvfo97a31QRDqLot2baAmSp732ns76HZN+XqggSByghyFBcLNG3qo9C4qSElY5cqAJMD4YeuUTJUP6On9aAumlsiS+bWLHU71OrfbAqAVH/gito42vn0dbTsw7Io0R7J519kBvhy8GifYLNb7tndfp/F5xPgg+Npb4AAAAAJwgTb84AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAI9K4/9/wn/Tfy+Zhwb79rUXiPyK+c0u29ufEs+8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGPocwAAAP//N1S2aA==") sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4004040) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x428, 0x2e8, 0x0, 0xffffffff, 0x0, 0x2e8, 0x390, 0x390, 0xffffffff, 0x390, 0x390, 0x5, 0x0, {[{{@ip={@rand_addr=0x64011100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16, 0x2, 0x2}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @rand_addr=0x64010101, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@empty, @empty, 0xff, 0xffffff00, 'nr0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x21, 0x2, 0x55}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1001, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x24, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x15}, @icmp_id=0x66, @icmp_id=0x68}}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'netpci0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1f, @local, @multicast2, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 6m5.122536762s ago: executing program 0 (id=613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000001010000000000000000010000020900010073797a3100000000080002400000000254000000030a010400000000060000000100ffff0900030073797a3100000000280004800800024000aeb7c17471305f7300000008000140000000051400030076657468315f746f5f62617464760009007e0c07bdcad85c9901006f46054d274d9ff7140000001100010000000000d8c652ce44bad4fe9e33a3ca5264aba9aa4399d6c0ae15fadbfbe88c887c6a4fb88cccdc16146e00"], 0xa4}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa4, 0x1, 0x8, 0x0, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x10}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3250}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0) r3 = dup2(r0, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6m5.051576368s ago: executing program 0 (id=615): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) timerfd_create(0x8, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m49.962906699s ago: executing program 32 (id=615): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) timerfd_create(0x8, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m16.422292388s ago: executing program 4 (id=996): name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) 5m16.271695601s ago: executing program 4 (id=998): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x4200, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0xc, 0x7, 0x2, 0x7, 0xd, "540cbcab7de1008b"}) ioctl$TCSETSW2(r1, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 5m16.258300293s ago: executing program 4 (id=1000): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00'}) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000000000000001) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4db, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xa4000061) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000a40)=""/139, 0x8b) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 5m15.278798089s ago: executing program 4 (id=1010): socket(0x23, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41541) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000040)={0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'veth1_to_team\x00', 0x100}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x378, 0x3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x5, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x1000009, 0x4, 0x7, 0x4009, 0x0, 0x3, 0xffffe, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xc, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x0, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4004) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)) 5m15.078924547s ago: executing program 4 (id=1011): socket$inet6_sctp(0xa, 0x5, 0x84) socket$key(0xf, 0x3, 0x2) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x44000, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") syz_open_dev$vcsu(&(0x7f0000001480), 0x800, 0x400002) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x2000000, 0x33}, 0x0, @in=@local, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) syz_emit_ethernet(0x57, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5m13.479115348s ago: executing program 4 (id=1028): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0002000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b2af8ff00000000b509000000000000c38af8ff10010000bf8600000000000007080000f8ffffffbfa400000000000007840000f0ffffffc70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000180), 0x6e, &(0x7f0000002080)=[{0x0}], 0x1}, 0x2000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100d, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x470c4a7a4788b09b, 0x4, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x3}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f0000000740)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1103, 0xff}) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5m13.478722068s ago: executing program 33 (id=1028): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0002000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b2af8ff00000000b509000000000000c38af8ff10010000bf8600000000000007080000f8ffffffbfa400000000000007840000f0ffffffc70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000000180), 0x6e, &(0x7f0000002080)=[{0x0}], 0x1}, 0x2000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10100d, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x470c4a7a4788b09b, 0x4, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x3}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x40505330, &(0x7f0000000740)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1103, 0xff}) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 8.970540116s ago: executing program 3 (id=4002): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x800ce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) epoll_create1(0x80000) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) signalfd4(r6, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) brk(0x800000) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0x9, 0x0, 0xd0, 0x4002, 0x5, "0c411be01fbcd2b7cb366b0200", 0x1004, 0xffffffff}) socket$key(0xf, 0x3, 0x2) 7.317623343s ago: executing program 3 (id=4015): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x0, @empty}, 0x2a0}) socket$kcm(0x10, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 7.243786919s ago: executing program 3 (id=4016): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) 7.201001143s ago: executing program 6 (id=4019): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 7.136306319s ago: executing program 3 (id=4021): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @local, 0x8}}, 0x24) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) r3 = io_uring_setup(0x16b6, &(0x7f0000000440)={0x0, 0x50a8, 0x8000, 0x1, 0x105}) io_uring_enter(r3, 0x7acc, 0xd243, 0x12, &(0x7f0000000380)={[0x6]}, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x80040}, 0x0, 0x0, 0x7ffffc, 0x0, 0x2, 0x2, 0x0, 0x0, 0xf, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x2040400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000005000000020000000700000052000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000012eadf4e853392150000000000000000000000000000000000a75d22"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0xd, r6, 0x0, 0x7}, 0x38) tgkill(r4, r4, 0x13) ptrace(0x10, r4) r7 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r9, r9) ioctl$HIDIOCGRAWPHYS(r6, 0x80404805, &(0x7f0000000280)) setresuid(r8, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r10, 0x80047210, &(0x7f0000000100)) write$selinux_attr(r10, &(0x7f00000002c0)='system_u:object_r:usr_t:s0\x00', 0x1b) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0xff, 0x4) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) syz_emit_ethernet(0x2a, &(0x7f0000000e80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080600010800060400030180c2"], 0x0) 7.036001438s ago: executing program 6 (id=4022): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x3, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xd, 0xffffffffffffffff, 0x1) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x12, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="5200ffffff7f0000000040000400000000000000252dd89dca6fe4b1fa7330202a2bfbe98d560bd489c2480979aab296f8886594942dfb7daee9b3a555e4a726ccacb1bf6f4879f8b3276adfcbd8f918e25a928708228433ef8d0af627f4d5cad6a929548e4794691214", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x4}, 0x120, 0x10000, 0x33f8, 0x1, 0xb, 0x20007, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r5, 0x2) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x1, 0xbfdffffc}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_open_dev$loop(&(0x7f0000000280), 0x2, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8587}}) io_uring_enter(r7, 0x47f6, 0x4000, 0x88, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x12, r0, 0x8000000) syz_io_uring_complete(r10) 6.903758999s ago: executing program 3 (id=4025): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006800010000000000000000000000000000000000060003000a00000008"], 0x44}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140006800800124000000000050015"], 0x64}}, 0x20008040) 6.511997314s ago: executing program 3 (id=4032): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 6.493309446s ago: executing program 34 (id=4032): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 6.071373363s ago: executing program 6 (id=4038): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000004000000020000000000001103000000ffffffff000000000100000d0100000000000000010000000200000000000008"], 0x0, 0x4c}, 0x28) sendmsg$nl_route(r0, 0x0, 0x0) 5.951918203s ago: executing program 6 (id=4039): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0xf, &(0x7f0000000640)="9353ef6f251564553676f3e3b7ce1cc97e157b74585dd301e73f0d708fa539a3355ccd308d3ed886f9e80b0a1a2cc34bb98da8093281828491525316b537e55c449b49d87b71050020c877e67afb0eeb3b4401d8a90957b8c5f4d70bcb7a1b351b0454b0c78fb8cb16f1264e3eb964d7a9294bf37109035e75733b5138b874f9ccd1211e5640e48862d915c281f5a718913354ddf31af6572875b76ff8bfbf319564cc35c84d2d0fe554ae2bb1c9103a80510fecebeee76e3437a68d84a591fc5bf15d6b4673ac327514d0cdc7c21282a76967c1230d94a3c5328a3bff060ab8b9931554178c0dd09175ffd5a0a748b9") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x9000) fallocate(r1, 0x0, 0x0, 0x8800000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000001140)=ANY=[], 0x361, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x101, 0x3, 0x80000000, 0x1ff, 0x7, 0xffffffffffffffff}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x3, 0x8, 0x9, 0x400, 0x4, r2}) capset(&(0x7f0000000280)={0x399f1316, r3}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000500000000000200000000000000f7460000145ddde2cde8541bd869925d7a2ec8d35191dbc12b93d5fbb9391b662e1a530d6d141dea7e2b1319b90e55c1b95313ddd1b2ddf0f4ce7cfb1356bbae9c091e42e937afdcb1f2be3e3682192e5d6f9487bcb46556ec740a70c2ff63fd07603900"/137], 0x50) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r4, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r5}, 0x20) r6 = creat(&(0x7f00000001c0)='./bus\x00', 0x77) r7 = open(&(0x7f0000000100)='./bus\x00', 0xe8580, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x9471) dup3(r7, r6, 0x0) finit_module(r7, 0x0, 0x6) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r4, &(0x7f0000000080), 0x20000000}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) syz_clone(0x1040700, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 5.787844918s ago: executing program 6 (id=4041): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5c4, &(0x7f0000001d40)={0x0, 0x1002, 0x800, 0x1, 0x1fb}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pause() 5.415692111s ago: executing program 2 (id=4042): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e23, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x3, 0x0, 0x0, 0x400b7ef, 0xd]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xffffffffffffff9f, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x20) read(r4, &(0x7f0000002040)=""/76, 0x4c) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x43) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r6, 0x400454e2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) 5.172375673s ago: executing program 1 (id=4044): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@barrier}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x1, 0x1) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 5.137771416s ago: executing program 5 (id=4045): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x1, 0x2e, 0xf, 0x3, 0x7, 0x10, 0x6, 0xa0, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mq_timedreceive(r1, &(0x7f00000001c0)=""/96, 0x60, 0x8001, &(0x7f0000000240)={0x0, 0x3938700}) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdf9) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000100)={0xfffffffc, 0x28, 0x9, 0x98c, 0x17, "abb2772080cf93822dc4b669c0a1d3b82ff530"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000180)='environ\x00') r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x33, "f571fd0490e170d9226d6687530a7bd4d039cd3bc0fc6e0d990fd4fbc8556855fdc4d1b13092a2964a6ab372f8735e1a90e7ec"}, &(0x7f0000000100)=0x3b) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup2(r7, r8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r9, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="0300"], 0xa) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r6, 0x81}, 0x8) 5.106779038s ago: executing program 1 (id=4046): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa02, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/141, 0x8d}], 0x1) 5.036444394s ago: executing program 6 (id=4047): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/143, 0x8f}], 0x1, 0x4f, 0x0) 5.035528334s ago: executing program 35 (id=4047): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/143, 0x8f}], 0x1, 0x4f, 0x0) 5.032356775s ago: executing program 2 (id=4049): r0 = socket(0x2, 0x80805, 0x0) setsockopt(r0, 0x84, 0x80, 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x14f) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) getsockopt(r1, 0x1, 0x8001, &(0x7f0000000080)=""/212, &(0x7f0000000180)=0xd4) llistxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)=""/51, 0x33) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x8040, 0x0) unshare(0x36020c00) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r4, 0x25, 0xb, @void}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)={[{@noblock_validity}, {@errors_continue}, {@sysvgroups}, {@data_journal}, {}, {@noinit_itable}, {@norecovery}]}, 0x2, 0x5cc, &(0x7f0000000b80)="$eJzs3W2IHHcdB/Df7t5d83A1D7Zqa2xOQ20g9PZyuYREfGGJD7UmtaL4IhTCkdvehezdnrkL9LaCLb4RBRF8I4JQsS+siAbyplJq+6LFNwpKfaCiMaCCCEUrBRHUlf8+pJtm0muTux2T+Xxg9mb+M7v//97y3ZnZ+c9MAIU1lh5KEaMRcS4itnQmL11grPOnue/sXBpK0Wp9+m+l9nIz+87O9RbtPW9zehiK2BAR2w+XYtfw5fUurTRPTdfrtdPd6ery/GJ1aaV598n56dnabG1h/8GpQ5MHpg5Ord17nfjZplv/fOf9F554/p///tZvDvwgtXe0O6//fayVsRjr/k+GY1tf+VAp4r61riwnlc5HHXf2lZWGcmwQb1qrtf376fN7e0Tsaud/S1Si8+G99PSD/9gSv7o37zYC66fVkz37lRZwwyq3t4FL5fGI6IyXy+PjnW34W2JTud5YWt7zUOPMwkxnW3lrDJcfOlmvTXT3FbbGcClN722PvzY9+brpfRHtbeAvVTa2p8dPNOozg/6yA9pGI86f+9yJkc2vy/9fKp38AzeulP9fvvDUs2n81UrerQEGKeX/e6/OfyLkHwpH/qG45B+KS/6huOQfikv+objkH4pL/qG45B+KS/6huHr5f+Do0Xjg6NFWs3v++0Jj9uSpucVDkxPj82dOjJ9onF4cn200Zttn7Myv/rr1RmNx72Scebi6XFtari6tNI/PN84sLB9vn9d/vJZxKQBgTby1dB27sOG+bTufe6kUEY9+YGN7SEau6tWA602rVYq8z0EG8mHXH4rLpdqguOzjA6VV5m+40oz62rcFGIxy3g0AcnPXbY7/QVH5/R+Ky+//UFy28QG//0Px+P0fimv0Cvf/urnv3l0TEfG2iPhpZfim3r2+gOvKJbv6oxHnz3/ns9WL9+E2cqOOjFQi/g+aYeT6GsnviwoYjNdCn3dLgLzM7Ds71xsGVeczs4OqCcjy8j2dTkAp983u0JkzdPHYwPA69RPadkd6/NHvH989V0lDdL+H1qEqIMOjj0XEu7LW/6X2sYGt3eW2dxaLWyLi1oh4R0S88xrr/sanIsbihVp/mfzD4LzZ/N8WEWl1fXtEvDsidkTEe66x7l+cS/n/9cb+MvmHYvj883m3AMjLx5/KuwVAXo7pYwCF9d1H8m4BkJenf5h3C4C8fPXFvFsAxfbcPRExkXX8r9w+3t8z3L0u4E3dawFsjIhNEbG5ew7hzd1zBLf0HTNczfFPRozFHT/uL3P8Dwan1/+veVn/v/LF/n+ViNh5DXU888HRr2SVT+9I+X/ikV7/vzSk+nt9AYH19fJjEbdn5r90sc9vKVJOI957lXWMfeHCk1nlL96fXnf45/IP+Wh9O+L9kZ3/njRWXZ5frC6tNO9u38d7traw/+DUockDUwenqu1LhFR7FwrJcOTvr+zJKv/dZMr/N/fLP+Qjrf83XSH//dv/77v0aatdLvASh7/+5WNZ5aN/TPnf8ewb57/815HSZ9rTvfsSPDy9vHx6b8RI6cjl5ZNvpWVQLL2M9DKU8r97V/b+//buc1LYD0fEh9P2QkT8JyL+GxEfiYiPRsTHIuLeN6jza3fNXsgq/8OTKf+Pn7L+h3yk/M+ssv5Pf/91DXXs2f2TL2aVf2hnyv/4b/905MGhNMg/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNpbWmmemq7Xa6fXcSTv9wgAAAAAAABF8b8AAAD//6IDMfs=") 4.97576589s ago: executing program 1 (id=4050): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x22020600) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca}, 0x38) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000040)={@void, @void, @eth={@remote, @remote, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0xffffffffffffff9a, 0x65, 0x0, 0x9, 0x6, 0x0, @multicast1, @rand_addr=0x64010102}}}}}}, 0x2a) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000900)={r6, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000040)={r6, 0x11, 0x6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x5e, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="09000000040000000800000008f7000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=@deltfilter={0x38, 0x2d, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xd}, {0x7, 0xc}, {0xd, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x38}}, 0x4000041) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r10}, 0x38) 4.875737489s ago: executing program 2 (id=4051): perf_event_open(0x0, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x0) unshare(0x8000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbb50a245d5cde00800450c00000000e09078"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40200000000000061114800000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.652346499s ago: executing program 5 (id=4052): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pwritev(r0, 0x0, 0x0, 0x6, 0xffffff85) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 4.489649023s ago: executing program 5 (id=4053): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgid(0xffffffffffffffff) ptrace$setsig(0x4203, r0, 0x4280, &(0x7f0000000100)={0x1a, 0x8, 0xffffffff}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendto$packet(r4, &(0x7f0000000580), 0x0, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.375532483s ago: executing program 1 (id=4054): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgid(0xffffffffffffffff) ptrace$setsig(0x4203, r0, 0x4280, &(0x7f0000000100)={0x1a, 0x8, 0xffffffff}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.329192223s ago: executing program 2 (id=4055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x800ce90, 0x10, 0x3, 0x40004333}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = epoll_create1(0x80000) r9 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0xc000000b}) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x2, @private2, 0x401, 0x4}, 0x0, 0x0, 0x1}) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) brk(0x800000) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r10, 0x402c542c, &(0x7f00000000c0)={0x9, 0x0, 0xd0, 0x4002, 0x5, "0c411be01fbcd2b7cb366b0200", 0x1004, 0xffffffff}) socket$key(0xf, 0x3, 0x2) 687.275799ms ago: executing program 2 (id=4056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xa, 0x3, "91abc12404cf"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x88}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 672.361291ms ago: executing program 2 (id=4057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000060000000000000804080000000000000400000d00000000020000000000000001000000050000000600000001000000000000000000000000005f009632cd7a63e138aa4ff017d94ff94af4af4fb1003872aacd81b1bd92e91661f5b4bdcf820996624ed6b232a2b73edfbe8ddd94650a834abcb422e1647088adcdb6f55540e45731e684ad40268f417dfa66f44bb5d1d8ab245db1860bf840ffa96755404844591bb05d15a4138a53"], 0x0, 0x54}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x5a, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0xfffffffe, 0x5}, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20) close(0x4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000100)=""/28, 0x1c, 0x0, &(0x7f0000000340)=""/68, 0x44}}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x6}, 0x1c) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000024c0)='net/udplite\x00') readv(r9, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="69d300007f000000000000000800000091114f00000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000005ff89000000005be4000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000faffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0xf4, &(0x7f00000002c0)=""/244, 0x41100, 0xa1, '\x00', r5, @fallback, r2, 0x8, &(0x7f0000000400)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r0, r0, r0, r0, r0, r10], 0x0, 0x10, 0x3fb}, 0x94) 437.102192ms ago: executing program 5 (id=4058): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xfd, r2, 0x0, 0x3, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000009c0)={0x9, 0x108, 0xfa00, {r2, 0x5, '\x00', "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"}}, 0x110) 422.586153ms ago: executing program 1 (id=4059): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@delalloc}, {@test_dummy_encryption}, {@data_ordered}, {@debug}, {@jqfmt_vfsold}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000180)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f00000009c0)=""/67, 0x43}], 0x5, &(0x7f0000000bc0)=""/213, 0xd5}, 0x13}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)=""/13, 0xd}, 0x46}], 0x2, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f0000000f40)=[{{&(0x7f0000000180)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/103, 0x67}, {&(0x7f00000003c0)=""/95, 0x5f}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f00000008c0)=""/211, 0xd3}, {&(0x7f00000009c0)=""/67, 0x43}], 0x5, &(0x7f0000000bc0)=""/213, 0xd5}, 0x13}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000ec0), 0x0, &(0x7f0000000f00)=""/13, 0xd}, 0x46}], 0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x7, 0xb, 0x7, 0x13fc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r6, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r7, 0x5403, 0x0) writev(r7, 0x0, 0x0) 317.718752ms ago: executing program 1 (id=4061): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pwritev(r0, 0x0, 0x0, 0x6, 0xffffff85) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) 0s ago: executing program 5 (id=4062): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r6}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x20, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547", @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) kernel console output (not intermixed with test programs): 422.231404][T22402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.364150][T22402] tipc: Started in network mode [ 422.369526][T22402] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 422.400068][T22402] tipc: Enabled bearer , priority 10 [ 422.438732][T22424] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3439'. [ 422.460628][T11640] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 422.465905][T11640] loop3: partition table partially beyond EOD, truncated [ 422.474208][T11640] loop3: p1 start 30976 is beyond EOD, [ 422.474175][T22422] netlink: 'syz.1.3438': attribute type 11 has an invalid length. [ 422.474223][T11640] truncated [ 422.491155][T22425] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=22425 comm=syz.2.3430 [ 422.504833][T11640] loop3: p2 size 16128 extends beyond EOD, truncated [ 422.510247][ T28] audit: type=1400 audit(1771949217.221:7649): avc: denied { write } for pid=22401 comm="syz.2.3430" name="/" dev="configfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 422.521549][T11640] loop3: p3 start 327168 is beyond EOD, truncated [ 422.553481][T11640] loop3: p5 start 30976 is beyond EOD, truncated [ 422.560045][T11640] loop3: p6 size 16128 extends beyond EOD, truncated [ 422.567720][T22427] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 422.574288][T22427] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 422.582639][T22427] vhci_hcd vhci_hcd.0: Device attached [ 422.590796][T22420] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 422.592361][T22427] netlink: 'syz.6.3441': attribute type 1 has an invalid length. [ 422.603834][T22420] loop3: partition table partially beyond EOD, truncated [ 422.612650][T22320] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 422.629538][T22420] loop3: p1 start 30976 is beyond EOD, truncated [ 422.636401][T22430] vhci_hcd: connection closed [ 422.636933][T22420] loop3: p2 size 16128 extends beyond EOD, [ 422.641993][ T8789] vhci_hcd vhci_hcd.6: stop threads [ 422.654948][T22420] truncated [ 422.661403][ T8789] vhci_hcd vhci_hcd.6: release socket [ 422.663701][T22420] loop3: p3 start 327168 is beyond EOD, truncated [ 422.675827][ T8789] vhci_hcd vhci_hcd.6: disconnect device [ 422.684306][T22420] loop3: p5 start 30976 is beyond EOD, truncated [ 422.701715][T22420] loop3: p6 size 16128 extends beyond EOD, truncated [ 422.813177][T11640] udevd[11640]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 422.816137][T11420] udevd[11420]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 422.835428][T13069] udevd[13069]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 422.856858][T22448] ISOFS: Unable to identify CD-ROM format. [ 422.868788][T13069] udevd[13069]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 422.956489][ T28] audit: type=1400 audit(1771949217.671:7650): avc: denied { bind } for pid=22455 comm="syz.3.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 422.977517][T21095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.124720][T22475] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 423.378730][T22492] EXT4-fs: Ignoring removed i_version option [ 423.393852][T22492] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 423.412566][T22438] tipc: Node number set to 10070698 [ 423.418189][T22492] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.481476][T22492] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 423.590889][ T28] audit: type=1326 audit(1771949218.301:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 423.620209][ T28] audit: type=1326 audit(1771949218.301:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 423.655647][ T28] audit: type=1326 audit(1771949218.301:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 423.692289][ T28] audit: type=1326 audit(1771949218.301:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 423.716842][T11640] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 423.723652][T11640] loop2: partition table partially beyond EOD, truncated [ 423.731119][T11640] loop2: p1 start 30976 is beyond EOD, truncated [ 423.737665][T11640] loop2: p2 size 16128 extends beyond EOD, truncated [ 423.745669][ T28] audit: type=1326 audit(1771949218.301:7655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 423.769338][T11640] loop2: p3 start 327168 is beyond EOD, truncated [ 423.777333][ T28] audit: type=1326 audit(1771949218.301:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 423.803182][T11640] loop2: p5 start 30976 is beyond EOD, truncated [ 423.809611][T11640] loop2: p6 size 16128 extends beyond EOD, truncated [ 423.816881][ T28] audit: type=1326 audit(1771949218.301:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 423.844031][T22502] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 423.860242][T22502] loop2: partition table partially beyond EOD, truncated [ 423.867383][T22502] loop2: p1 start 30976 is beyond EOD, truncated [ 423.889899][T22502] loop2: p2 size 16128 extends beyond EOD, truncated [ 423.929961][T22502] loop2: p3 start 327168 is beyond EOD, truncated [ 423.957517][T22502] loop2: p5 start 30976 is beyond EOD, truncated [ 423.987633][T22502] loop2: p6 size 16128 extends beyond EOD, truncated [ 424.291586][T22531] EXT4-fs: Ignoring removed bh option [ 424.340903][T22531] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 424.380669][T22531] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 424.410997][T22531] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.3478: lblock 2 mapped to illegal pblock 2 (length 1) [ 424.570862][T22531] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 424.570998][T22531] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.3478: lblock 0 mapped to illegal pblock 48 (length 1) [ 424.580124][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 424.580141][ C1] EXT4-fs (loop2): initial error at time 1771949219: ext4_map_blocks:776: inode 3: block 2 [ 424.580177][ C1] EXT4-fs (loop2): last error at time 1771949219: ext4_map_blocks:776: inode 3: block 2 [ 424.622044][T22531] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 424.623287][T22531] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.3478: Failed to acquire dquot type 0 [ 424.734524][T22531] loop2: lost filesystem error report for type 5 error -117 [ 424.749675][T22531] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 424.787420][T22531] loop2: lost filesystem error report for type 5 error -117 [ 424.787818][T22531] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.3478: mark_inode_dirty error [ 424.828496][T22531] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 424.902171][T22543] lo speed is unknown, defaulting to 1000 [ 425.050952][T22542] set_capacity_and_notify: 8 callbacks suppressed [ 425.050979][T22542] loop1: detected capacity change from 0 to 8192 [ 425.385549][T22531] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 425.541540][T22549] syz.5.3483: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 425.556132][T22549] CPU: 0 UID: 0 PID: 22549 Comm: syz.5.3483 Tainted: G W syzkaller #0 PREEMPT(full) [ 425.556170][T22549] Tainted: [W]=WARN [ 425.556178][T22549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.556215][T22549] Call Trace: [ 425.556223][T22549] [ 425.556230][T22549] __dump_stack+0x1d/0x30 [ 425.556255][T22549] dump_stack_lvl+0x95/0xd0 [ 425.556276][T22549] dump_stack+0x15/0x1b [ 425.556303][T22549] warn_alloc+0x145/0x1c0 [ 425.556354][T22549] ? __schedule+0x85a/0xd40 [ 425.556376][T22549] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 425.556402][T22549] ? preempt_schedule_irq+0x2d/0x50 [ 425.556427][T22549] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 425.556454][T22549] ? avc_has_perm_noaudit+0xab/0x130 [ 425.556513][T22549] ? should_fail_ex+0x30/0x280 [ 425.556538][T22549] ? xskq_create+0x36/0xe0 [ 425.556561][T22549] vmalloc_user_noprof+0x7d/0xb0 [ 425.556589][T22549] ? xskq_create+0x80/0xe0 [ 425.556622][T22549] xskq_create+0x80/0xe0 [ 425.556639][T22549] xsk_init_queue+0x70/0xb0 [ 425.556671][T22549] xsk_setsockopt+0x3f5/0x640 [ 425.556709][T22549] ? __pfx_xsk_setsockopt+0x10/0x10 [ 425.556818][T22549] __sys_setsockopt+0x184/0x200 [ 425.556847][T22549] __x64_sys_setsockopt+0x64/0x80 [ 425.556878][T22549] x64_sys_call+0x2327/0x3020 [ 425.556951][T22549] do_syscall_64+0x12c/0x370 [ 425.556987][T22549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.557012][T22549] RIP: 0033:0x7f172835c629 [ 425.557030][T22549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.557072][T22549] RSP: 002b:00007f1726d75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 425.557166][T22549] RAX: ffffffffffffffda RBX: 00007f17285d6180 RCX: 00007f172835c629 [ 425.557182][T22549] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 425.557194][T22549] RBP: 00007f17283f2b39 R08: 0000000000000004 R09: 0000000000000000 [ 425.557212][T22549] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.557224][T22549] R13: 00007f17285d6218 R14: 00007f17285d6180 R15: 00007ffeb49d9138 [ 425.557282][T22549] [ 425.557298][T22549] Mem-Info: [ 425.774198][T22549] active_anon:15484 inactive_anon:2 isolated_anon:0 [ 425.774198][T22549] active_file:25709 inactive_file:2689 isolated_file:0 [ 425.774198][T22549] unevictable:0 dirty:280 writeback:0 [ 425.774198][T22549] slab_reclaimable:3837 slab_unreclaimable:28376 [ 425.774198][T22549] mapped:36386 shmem:7272 pagetables:3543 [ 425.774198][T22549] sec_pagetables:0 bounce:0 [ 425.774198][T22549] kernel_misc_reclaimable:0 [ 425.774198][T22549] free:1851201 free_pcp:9942 free_cma:0 [ 425.810123][ T28] kauditd_printk_skb: 3245 callbacks suppressed [ 425.810139][ T28] audit: type=1326 audit(1771949219.921:10901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 425.819320][T22549] Node 0 active_anon:61924kB inactive_anon:8kB active_file:102836kB inactive_file:10760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145544kB dirty:1132kB writeback:0kB shmem:29088kB kernel_stack:4416kB pagetables:14164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 425.833410][T22531] EXT4-fs (loop2): 1 orphan inode deleted [ 425.848775][T22549] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.911746][T22549] lowmem_reserve[]: 0 2879 7857 7857 [ 425.917195][T22549] Node 0 DMA32 free:2944672kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948196kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 425.948621][T22549] lowmem_reserve[]: 0 0 4978 4978 [ 426.040149][T22549] Node 0 Normal free:4444772kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:61924kB inactive_anon:8kB active_file:102836kB inactive_file:10760kB unevictable:0kB writepending:1132kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:36228kB local_pcp:29640kB free_cma:0kB [ 426.073677][T22549] lowmem_reserve[]: 0 0 0 0 [ 426.078384][T22549] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 426.091252][T22549] Node 0 DMA32: 6*4kB (M) 3*8kB (M) 3*16kB (M) 6*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944672kB [ 426.107914][T22549] Node 0 Normal: 2291*4kB (UE) 1456*8kB (UME) 1037*16kB (UME) 1572*32kB (UME) 1018*64kB (UME) 688*128kB (UM) 429*256kB (UM) 302*512kB (UME) 169*1024kB (UM) 99*2048kB (UME) 870*4096kB (UM) = 4444700kB [ 426.128067][T22549] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 426.137531][T22549] 35691 total pagecache pages [ 426.142233][T22549] 2 pages in swap cache [ 426.146403][T22549] Free swap = 124460kB [ 426.150596][T22549] Total swap = 124996kB [ 426.154756][T22549] 2097051 pages RAM [ 426.158552][T22549] 0 pages HighMem/MovableOnly [ 426.163264][T22549] 81602 pages reserved [ 426.236614][T22542] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 426.242330][ T50] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 426.308114][T22542] loop1: partition table partially beyond EOD, truncated [ 426.318727][T22531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.351716][T22542] loop1: p1 start 30976 is beyond EOD, truncated [ 426.361986][ T50] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 426.362149][ T50] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 426.386038][T22542] loop1: p2 size 16128 extends beyond EOD, truncated [ 426.420186][ T50] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:3: Failed to release dquot type 0 [ 426.436865][T22542] loop1: p3 start 327168 is beyond EOD, truncated [ 426.467119][T22542] loop1: p5 start 30976 is beyond EOD, truncated [ 426.490382][T22542] loop1: p6 size 16128 extends beyond EOD, truncated [ 426.536883][T21095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.560800][T13069] udevd[13069]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 426.577620][T11640] udevd[11640]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 426.592858][T21095] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 426.621605][T11420] udevd[11420]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 426.642136][T22555] program syz.3.3487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 426.666356][T21095] loop2: lost filesystem error report for type 5 error -117 [ 426.666487][T21095] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 426.726554][T21095] loop2: lost filesystem error report for type 5 error -117 [ 426.726654][T21095] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 426.776221][T22564] 9p: Bad value for 'rfdno' [ 426.790667][T22564] audit: audit_backlog=65 > audit_backlog_limit=64 [ 426.798404][T21095] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 426.799502][T22561] __nla_validate_parse: 11 callbacks suppressed [ 426.799515][T22561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3489'. [ 426.824801][T22564] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 426.832787][T22564] audit: backlog limit exceeded [ 426.832984][ T28] audit: type=1326 audit(1771949220.171:10902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 426.865163][ T28] audit: type=1326 audit(1771949220.171:10903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 426.873646][T22566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3489'. [ 426.922182][ T28] audit: type=1326 audit(1771949220.171:10904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 427.013264][ T28] audit: type=1326 audit(1771949220.171:10905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 427.068118][ T28] audit: type=1326 audit(1771949220.171:10906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22503 comm="syz.6.3469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x50000 [ 427.330548][T22591] loop3: detected capacity change from 0 to 8192 [ 427.382824][T22591] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 427.393295][T22591] loop3: partition table partially beyond EOD, truncated [ 427.427225][T22591] loop3: p1 start 30976 is beyond EOD, truncated [ 427.436699][T22591] loop3: p2 size 16128 extends beyond EOD, truncated [ 427.444367][T22591] loop3: p3 start 327168 is beyond EOD, truncated [ 427.456963][T22591] loop3: p5 start 30976 is beyond EOD, truncated [ 427.482542][T22591] loop3: p6 size 16128 extends beyond EOD, truncated [ 427.517085][T22618] lo speed is unknown, defaulting to 1000 [ 427.535541][T11420] udevd[11420]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 427.546976][T11640] udevd[11640]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 427.561496][T13069] udevd[13069]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 427.588876][T22630] loop6: detected capacity change from 0 to 1024 [ 427.606754][T22630] EXT4-fs: Ignoring removed orlov option [ 427.665870][T22630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.734419][T22655] Non-string source [ 427.838089][T22658] lo speed is unknown, defaulting to 1000 [ 427.876704][T10603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.922446][T22669] loop1: detected capacity change from 0 to 512 [ 427.943747][T22669] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.3515: corrupted in-inode xattr: e_value out of bounds [ 427.969941][T22669] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 427.970138][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 427.985729][ C1] EXT4-fs (loop1): initial error at time 1771949222: ext4_iget_extra_inode:5025: inode 15 [ 427.990549][T22669] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3515: couldn't read orphan inode 15 (err -117) [ 427.995674][ C1] EXT4-fs (loop1): last error at time 1771949222: ext4_iget_extra_inode:5025: inode 15 [ 428.020196][T22669] loop1: lost filesystem error report for type 5 error -117 [ 428.029478][T22669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.066584][T22668] EXT4-fs warning (device loop1): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 428.082597][T22668] EXT4-fs warning (device loop1): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 428.119881][T20273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.184473][T22682] loop6: detected capacity change from 0 to 2048 [ 428.241932][T22682] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.298990][T22682] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.374466][T22692] loop6: detected capacity change from 0 to 8192 [ 428.434537][T22692] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 428.450438][T22692] loop6: partition table partially beyond EOD, truncated [ 428.470677][T22692] loop6: p1 start 30976 is beyond EOD, truncated [ 428.477154][T22692] loop6: p2 size 16128 extends beyond EOD, truncated [ 428.495424][T22692] loop6: p3 start 327168 is beyond EOD, truncated [ 428.511591][T22692] loop6: p5 start 30976 is beyond EOD, truncated [ 428.522632][T22692] loop6: p6 size 16128 extends beyond EOD, truncated [ 428.565938][T11420] udevd[11420]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 428.568668][T13069] udevd[13069]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 428.587940][T11640] udevd[11640]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 428.708063][T22705] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3526'. [ 428.732642][T22705] loop6: detected capacity change from 0 to 128 [ 428.757711][T22705] EXT4-fs: Ignoring removed i_version option [ 428.781899][T22705] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 428.923011][T22705] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.964442][T22714] netlink: 'syz.3.3529': attribute type 10 has an invalid length. [ 428.978358][T22714] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3529'. [ 428.988313][T22714] bond0: entered promiscuous mode [ 428.993520][T22714] bond_slave_0: entered promiscuous mode [ 429.005530][T22714] bond_slave_1: entered promiscuous mode [ 429.017945][T22714] bridge0: port 3(bond0) entered blocking state [ 429.025478][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3531'. [ 429.025750][T22714] bridge0: port 3(bond0) entered disabled state [ 429.042556][T22714] bond0: entered allmulticast mode [ 429.048379][T22705] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.052006][T22714] bond_slave_0: entered allmulticast mode [ 429.063273][T22714] bond_slave_1: entered allmulticast mode [ 429.070958][T22714] bridge0: port 3(bond0) entered blocking state [ 429.077359][T22714] bridge0: port 3(bond0) entered forwarding state [ 429.195307][T22718] bridge15: entered promiscuous mode [ 429.824256][T22747] loop3: detected capacity change from 0 to 512 [ 429.838398][T22747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 429.873943][T22747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.891134][T22747] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 429.957324][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.989131][T22761] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 429.989131][T22761] The task syz.2.3545 (22761) triggered the difference, watch for misbehavior. [ 430.046979][T22760] loop6: detected capacity change from 0 to 8192 [ 430.154484][T11640] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 430.160634][T11640] loop6: partition table partially beyond EOD, truncated [ 430.187342][T22771] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22771 comm=syz.5.3551 [ 430.210479][T11640] loop6: p1 start 30976 is beyond EOD, truncated [ 430.216868][T11640] loop6: p2 size 16128 extends beyond EOD, truncated [ 430.224603][T11640] loop6: p3 start 327168 is beyond EOD, truncated [ 430.236136][T11640] loop6: p5 start 30976 is beyond EOD, truncated [ 430.324701][T11640] loop6: p6 size 16128 extends beyond EOD, truncated [ 430.348920][T22760] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 430.357055][T22760] loop6: partition table partially beyond EOD, truncated [ 430.365075][T22760] loop6: p1 start 30976 is beyond EOD, truncated [ 430.371804][T22760] loop6: p2 size 16128 extends beyond EOD, truncated [ 430.379834][T22760] loop6: p3 start 327168 is beyond EOD, truncated [ 430.390642][T22760] loop6: p5 start 30976 is beyond EOD, truncated [ 430.452039][T22760] loop6: p6 size 16128 extends beyond EOD, truncated [ 430.644797][T13069] udevd[13069]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 430.686786][T22790] lo speed is unknown, defaulting to 1000 [ 430.707999][T22769] loop1: detected capacity change from 0 to 1024 [ 430.748921][T22796] netlink: 'syz.5.3559': attribute type 10 has an invalid length. [ 430.862159][T22769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 430.889095][T22769] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.934784][T22776] lo speed is unknown, defaulting to 1000 [ 430.979775][T20273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 431.375801][T22818] loop1: detected capacity change from 0 to 8192 [ 431.470669][T22820] loop1: p1 p2 p3 < > p4 < p5 p6 > [ 431.475948][T22820] loop1: partition table partially beyond EOD, truncated [ 431.507950][T22820] loop1: p1 start 30976 is beyond EOD, truncated [ 431.620951][T22820] loop1: p2 size 16128 extends beyond EOD, truncated [ 431.664795][T22820] loop1: p3 start 327168 is beyond EOD, truncated [ 431.683896][T22820] loop1: p5 start 30976 is beyond EOD, truncated [ 431.699253][T22820] loop1: p6 size 16128 extends beyond EOD, truncated [ 431.767621][T22818] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 431.867187][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 431.867201][ T28] audit: type=1400 audit(1771949226.581:10973): avc: denied { read } for pid=22825 comm="syz.6.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 431.965798][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3573'. [ 432.079746][T22847] loop1: detected capacity change from 0 to 128 [ 432.164900][ T28] audit: type=1326 audit(1771949226.881:10974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 432.229166][ T28] audit: type=1326 audit(1771949226.881:10975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 432.269039][T22857] loop1: detected capacity change from 0 to 128 [ 432.290224][ T28] audit: type=1326 audit(1771949226.881:10976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 432.355526][ T28] audit: type=1326 audit(1771949226.881:10977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 432.425971][ T28] audit: type=1326 audit(1771949226.881:10978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 432.490033][T22864] loop2: detected capacity change from 0 to 8192 [ 432.496607][ T28] audit: type=1326 audit(1771949226.881:10979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 432.522250][ T28] audit: type=1326 audit(1771949226.881:10980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 432.546362][ T28] audit: type=1326 audit(1771949226.881:10981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f172835dec7 code=0x7ffc0000 [ 432.570258][ T28] audit: type=1326 audit(1771949226.881:10982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22852 comm="syz.5.3579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f172831cece code=0x7ffc0000 [ 432.611526][T11640] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 432.616883][T11640] loop2: partition table partially beyond EOD, truncated [ 432.629624][T11640] loop2: p1 start 30976 is beyond EOD, truncated [ 432.645390][T11640] loop2: p2 size 16128 extends beyond EOD, truncated [ 432.663402][T11640] loop2: p3 start 327168 is beyond EOD, truncated [ 432.677954][T11640] loop2: p5 start 30976 is beyond EOD, truncated [ 432.690012][T11640] loop2: p6 size 16128 extends beyond EOD, truncated [ 432.710760][T22864] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 432.716074][T22864] loop2: partition table partially beyond EOD, truncated [ 432.724208][T22864] loop2: p1 start 30976 is beyond EOD, truncated [ 432.733875][T22864] loop2: p2 size 16128 extends beyond EOD, truncated [ 432.752725][T22864] loop2: p3 start 327168 is beyond EOD, truncated [ 432.764062][T22864] loop2: p5 start 30976 is beyond EOD, truncated [ 432.775929][T22864] loop2: p6 size 16128 extends beyond EOD, truncated [ 432.866980][T13069] udevd[13069]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 432.868270][T11420] udevd[11420]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 432.882902][T11640] udevd[11640]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 432.961305][T13069] udevd[13069]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 432.973334][T11640] udevd[11640]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 432.982988][T11420] udevd[11420]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 433.177696][T22878] loop1: detected capacity change from 0 to 1024 [ 433.223170][T22878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 433.241412][T22878] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 433.299103][T22878] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 3: comm syz.1.3588: lblock 3 mapped to illegal pblock 3 (length 1) [ 433.350645][T22878] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 433.437372][T22878] EXT4-fs (loop1): This should not happen!! Data will be lost [ 433.437372][T22878] [ 433.468040][T22901] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.3588: lblock 3 mapped to illegal pblock 3 (length 1) [ 433.505674][T22901] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.3588: lblock 3 mapped to illegal pblock 3 (length 1) [ 433.544137][T22878] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.3588: lblock 3 mapped to illegal pblock 3 (length 1) [ 433.591243][T22877] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.3588: lblock 3 mapped to illegal pblock 3 (length 1) [ 433.619300][T22877] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.3588: lblock 3 mapped to illegal pblock 3 (length 1) [ 433.634859][T22877] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.3588: lblock 3 mapped to illegal pblock 3 (length 1) [ 433.649517][T22878] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.3588: lblock 3 mapped to illegal pblock 3 (length 1) [ 433.670476][T22901] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.3588: lblock 3 mapped to illegal pblock 3 (length 1) [ 433.685164][T22901] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: block 3: comm syz.1.3588: lblock 3 mapped to illegal pblock 3 (length 1) [ 433.790648][ T63] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 433.803084][ T63] EXT4-fs (loop1): This should not happen!! Data will be lost [ 433.803084][ T63] [ 433.813553][T20273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 433.843996][T22911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.931022][T22950] lo speed is unknown, defaulting to 1000 [ 435.567610][T22960] af_packet: tpacket_rcv: packet too big, clamped from 2902 to 4294967280. macoff=96 [ 435.658962][T22963] lo speed is unknown, defaulting to 1000 [ 435.687019][T22967] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3613'. [ 435.712748][T22965] loop3: detected capacity change from 0 to 2048 [ 435.726814][T22970] loop6: detected capacity change from 0 to 128 [ 435.819290][T22965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.822101][T22972] loop2: detected capacity change from 0 to 1024 [ 435.863651][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'. [ 435.885151][T22978] bridge2: entered promiscuous mode [ 435.908870][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.031568][T22984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 436.040902][T22984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3620'. [ 436.049916][T22984] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3620'. [ 436.109266][T22989] FAULT_INJECTION: forcing a failure. [ 436.109266][T22989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.126250][T22989] CPU: 0 UID: 0 PID: 22989 Comm: syz.3.3622 Tainted: G W syzkaller #0 PREEMPT(full) [ 436.126304][T22989] Tainted: [W]=WARN [ 436.126311][T22989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.126324][T22989] Call Trace: [ 436.126331][T22989] [ 436.126338][T22989] __dump_stack+0x1d/0x30 [ 436.126367][T22989] dump_stack_lvl+0x95/0xd0 [ 436.126467][T22989] dump_stack+0x15/0x1b [ 436.126489][T22989] should_fail_ex+0x263/0x280 [ 436.126511][T22989] should_fail+0xb/0x20 [ 436.126580][T22989] should_fail_usercopy+0x1a/0x20 [ 436.126604][T22989] _copy_to_user+0x20/0xa0 [ 436.126631][T22989] simple_read_from_buffer+0xb5/0x130 [ 436.126652][T22989] proc_fail_nth_read+0x10e/0x150 [ 436.126749][T22989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 436.126828][T22989] vfs_read+0x1ab/0x7f0 [ 436.126898][T22989] ? free_frozen_page_commit+0x79/0x3b0 [ 436.126918][T22989] ? __rcu_read_unlock+0x4e/0x70 [ 436.126944][T22989] ? __fget_files+0x184/0x1c0 [ 436.126968][T22989] ? mutex_lock+0x57/0x90 [ 436.127043][T22989] ksys_read+0xdc/0x1a0 [ 436.127074][T22989] __x64_sys_read+0x40/0x50 [ 436.127100][T22989] x64_sys_call+0x2886/0x3020 [ 436.127186][T22989] do_syscall_64+0x12c/0x370 [ 436.127264][T22989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.127287][T22989] RIP: 0033:0x7f1bd6dccece [ 436.127304][T22989] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.127323][T22989] RSP: 002b:00007f1bd585efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 436.127345][T22989] RAX: ffffffffffffffda RBX: 00007f1bd585f6c0 RCX: 00007f1bd6dccece [ 436.127360][T22989] RDX: 000000000000000f RSI: 00007f1bd585f0a0 RDI: 0000000000000003 [ 436.127374][T22989] RBP: 00007f1bd585f090 R08: 0000000000000000 R09: 0000000000000000 [ 436.127388][T22989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.127449][T22989] R13: 00007f1bd7086038 R14: 00007f1bd7085fa0 R15: 00007ffedf2f2868 [ 436.127468][T22989] [ 436.315907][T22987] loop2: detected capacity change from 0 to 1024 [ 436.347357][T22987] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 436.357207][T22996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3623'. [ 436.380179][T22996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3623'. [ 436.394667][T22987] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #3: block 1: comm syz.2.3621: lblock 1 mapped to illegal pblock 1 (length 1) [ 436.431913][T22987] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 436.432077][T22987] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.3621: Failed to acquire dquot type 0 [ 436.441216][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 436.441235][ C0] EXT4-fs (loop2): initial error at time 1771949231: ext4_map_blocks:818: inode 3: block 1 [ 436.441276][ C0] EXT4-fs (loop2): last error at time 1771949231: ext4_map_blocks:818: inode 3: block 1 [ 436.478875][T22987] loop2: lost filesystem error report for type 5 error -117 [ 436.479474][T22987] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.3621: Freeing blocks not in datazone - block = 0, count = 4096 [ 436.500285][T23006] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3625'. [ 436.500317][T22987] loop2: lost filesystem error report for type 5 error -117 [ 436.509705][T22987] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3621: Invalid inode bitmap blk 0 in block_group 0 [ 436.540240][T21778] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 436.540958][T22987] loop2: lost filesystem error report for type 5 error -117 [ 436.554736][T21778] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 436.554887][T21778] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:12: Failed to release dquot type 0 [ 436.554917][T21778] loop2: lost filesystem error report for type 5 error -117 [ 436.601643][T22987] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 436.617843][T22987] loop2: lost filesystem error report for type 5 error -117 [ 436.618240][T22987] EXT4-fs (loop2): 1 orphan inode deleted [ 436.632217][T22987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.667314][T22987] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.3621: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 436.686875][T22987] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.3621: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 436.747977][T22987] syzkaller0: entered promiscuous mode [ 436.751370][T23014] loop3: detected capacity change from 0 to 2048 [ 436.753855][T22987] syzkaller0: entered allmulticast mode [ 436.793896][T23014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.822142][T21095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.858677][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.870150][ T28] kauditd_printk_skb: 1222 callbacks suppressed [ 436.870163][ T28] audit: type=1326 audit(1771949231.581:12202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x7ffc0000 [ 436.912551][ T28] audit: type=1326 audit(1771949231.581:12203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x7ffc0000 [ 436.950482][T23032] loop3: detected capacity change from 0 to 1024 [ 436.964939][ T28] audit: type=1326 audit(1771949231.581:12204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x7ffc0000 [ 437.022303][T23032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 437.025816][ T28] audit: type=1326 audit(1771949231.621:12205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f53bf19c629 code=0x7ffc0000 [ 437.037191][T23039] loop1: detected capacity change from 0 to 164 [ 437.068747][T23036] loop6: detected capacity change from 0 to 1024 [ 437.077239][T23036] EXT4-fs: Ignoring removed orlov option [ 437.083850][T23032] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.089106][ T28] audit: type=1326 audit(1771949231.621:12206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x7ffc0000 [ 437.106827][T23039] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.137323][T23036] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.162092][ T28] audit: type=1326 audit(1771949231.621:12207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x7ffc0000 [ 437.194492][ T28] audit: type=1326 audit(1771949231.621:12208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x7ffc0000 [ 437.195383][T23039] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.219055][ T28] audit: type=1326 audit(1771949231.621:12209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f53bf19c629 code=0x7ffc0000 [ 437.253512][ T28] audit: type=1326 audit(1771949231.621:12210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53bf19c629 code=0x7ffc0000 [ 437.277407][ T28] audit: type=1326 audit(1771949231.621:12211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23021 comm="syz.6.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f53bf19c629 code=0x7ffc0000 [ 437.286519][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 437.312595][T23039] Symlink component flag not implemented [ 437.318440][T23039] Symlink component flag not implemented [ 437.342740][T23039] Symlink component flag not implemented (7) [ 437.378483][T23039] Symlink component flag not implemented (116) [ 437.411845][T23052] FAULT_INJECTION: forcing a failure. [ 437.411845][T23052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.425376][T23052] CPU: 0 UID: 0 PID: 23052 Comm: syz.3.3642 Tainted: G W syzkaller #0 PREEMPT(full) [ 437.425411][T23052] Tainted: [W]=WARN [ 437.425419][T23052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 437.425432][T23052] Call Trace: [ 437.425439][T23052] [ 437.425447][T23052] __dump_stack+0x1d/0x30 [ 437.425540][T23052] dump_stack_lvl+0x95/0xd0 [ 437.425565][T23052] dump_stack+0x15/0x1b [ 437.425589][T23052] should_fail_ex+0x263/0x280 [ 437.425612][T23052] should_fail+0xb/0x20 [ 437.425632][T23052] should_fail_usercopy+0x1a/0x20 [ 437.425764][T23052] _copy_to_user+0x20/0xa0 [ 437.425791][T23052] simple_read_from_buffer+0xb5/0x130 [ 437.425817][T23052] proc_fail_nth_read+0x10e/0x150 [ 437.425846][T23052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 437.425893][T23052] vfs_read+0x1ab/0x7f0 [ 437.425924][T23052] ? __rcu_read_unlock+0x4e/0x70 [ 437.425970][T23052] ? __fget_files+0x184/0x1c0 [ 437.425990][T23052] ? mutex_lock+0x57/0x90 [ 437.426098][T23052] ksys_read+0xdc/0x1a0 [ 437.426134][T23052] __x64_sys_read+0x40/0x50 [ 437.426221][T23052] x64_sys_call+0x2886/0x3020 [ 437.426314][T23052] do_syscall_64+0x12c/0x370 [ 437.426347][T23052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.426425][T23052] RIP: 0033:0x7f1bd6dccece [ 437.426441][T23052] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 437.426460][T23052] RSP: 002b:00007f1bd585efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 437.426511][T23052] RAX: ffffffffffffffda RBX: 00007f1bd585f6c0 RCX: 00007f1bd6dccece [ 437.426577][T23052] RDX: 000000000000000f RSI: 00007f1bd585f0a0 RDI: 0000000000000005 [ 437.426589][T23052] RBP: 00007f1bd585f090 R08: 0000000000000000 R09: 0000000000000000 [ 437.426601][T23052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.426614][T23052] R13: 00007f1bd7086038 R14: 00007f1bd7085fa0 R15: 00007ffedf2f2868 [ 437.426634][T23052] [ 437.429577][T23054] /dev/loop5: Can't lookup blockdev [ 437.746230][T23072] loop3: detected capacity change from 0 to 164 [ 437.874477][T23076] loop2: detected capacity change from 0 to 512 [ 437.894306][T10603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.976461][T23084] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 438.045659][T23084] netlink: 'syz.6.3652': attribute type 39 has an invalid length. [ 438.089419][T23076] EXT4-fs (loop2): orphan cleanup on readonly fs [ 438.096354][T23084] hsr_slave_1 (unregistering): left promiscuous mode [ 438.171000][T23076] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.3649: corrupted inode contents [ 438.236145][T23076] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 438.240114][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 438.255686][ C0] EXT4-fs (loop2): initial error at time 1771949232: ext4_do_update_inode:5569: inode 16 [ 438.265545][ C0] EXT4-fs (loop2): last error at time 1771949232: ext4_do_update_inode:5569: inode 16 [ 438.275496][T23076] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #16: comm syz.2.3649: mark_inode_dirty error [ 438.565047][T23076] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 438.566310][T23076] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.3649: corrupted inode contents [ 438.617128][T23076] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 438.625634][T23076] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.3649: mark_inode_dirty error [ 438.661214][T23076] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 438.662529][T23076] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.3649: corrupted inode contents [ 438.729679][T23096] bridge0: port 4(syz_tun) entered blocking state [ 438.760516][T23096] bridge0: port 4(syz_tun) entered disabled state [ 438.771129][T23096] syz_tun: entered allmulticast mode [ 438.777054][T23096] syz_tun: entered promiscuous mode [ 438.777231][T23076] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 438.794011][T23076] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 438.850655][T23076] loop2: lost filesystem error report for type 5 error -117 [ 438.851250][T23076] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #16: comm syz.2.3649: corrupted inode contents [ 438.880260][T23076] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 438.880937][T23076] EXT4-fs error (device loop2): ext4_truncate:4587: inode #16: comm syz.2.3649: mark_inode_dirty error [ 438.904329][T23076] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 438.905328][T23076] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 438.939790][T23076] loop2: lost filesystem error report for type 5 error -117 [ 438.964982][T23076] EXT4-fs (loop2): 1 truncate cleaned up [ 438.986609][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 439.010501][ T12] loop2: lost filesystem error report for type 5 error -117 [ 439.016775][T23076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.053759][T23108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3661'. [ 439.101941][T21095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.558191][T23156] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 439.595169][T23156] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 439.618149][T23156] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 439.638618][T23156] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 439.654323][T23156] System zones: 0-2, 18-18, 34-35 [ 439.669870][T23156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.693013][T23156] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3677: bg 0: block 353: padding at end of block bitmap is not set [ 439.775030][T20273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.077760][T23165] netlink: 'syz.1.3679': attribute type 21 has an invalid length. [ 440.086296][T23165] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3679'. [ 440.127509][T23165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.140777][T23165] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.215888][T23171] xt_hashlimit: size too large, truncated to 1048576 [ 440.426012][T23193] IPVS: fo: FWM 3 0x00000003 - no destination available [ 440.942810][T20273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.969839][T23212] set_capacity_and_notify: 3 callbacks suppressed [ 440.969853][T23212] loop2: detected capacity change from 0 to 1024 [ 441.004759][T23212] EXT4-fs: Ignoring removed nobh option [ 441.065031][T23216] loop1: detected capacity change from 0 to 512 [ 441.083546][T23216] EXT4-fs: Ignoring removed bh option [ 441.096700][T23216] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 441.118983][T23212] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 441.142126][T23216] EXT4-fs (loop1): 1 truncate cleaned up [ 441.157081][T23216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.455542][T20273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.215223][T23261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3717'. [ 442.226988][T23261] bond0: entered promiscuous mode [ 442.234045][T23261] bond_slave_0: entered promiscuous mode [ 442.240236][T23261] bond_slave_1: entered promiscuous mode [ 442.256189][T23261] bond0: left promiscuous mode [ 442.266386][T23261] bond_slave_0: left promiscuous mode [ 442.293065][T23261] bond_slave_1: left promiscuous mode [ 442.679009][T23277] loop1: detected capacity change from 0 to 128 [ 442.761873][T23280] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3722'. [ 442.916264][T23279] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3724'. [ 443.345093][T23290] lo speed is unknown, defaulting to 1000 [ 443.368484][T23299] loop3: detected capacity change from 0 to 512 [ 443.454698][T23299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.509888][T23299] ext4 filesystem being mounted at /207/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.671941][T23307] loop2: detected capacity change from 0 to 4096 [ 443.702705][T23307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.793580][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.878189][T23314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 443.896935][T21095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.973685][T23318] tipc: Started in network mode [ 443.978915][T23318] tipc: Node identity b66d37e85c24, cluster identity 4711 [ 443.986525][T23318] tipc: Enabled bearer , priority 0 [ 444.000810][T23318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3736'. [ 444.041158][T23318] veth0_macvtap: entered allmulticast mode [ 444.057955][T23318] tipc: Resetting bearer [ 444.072116][T23317] tipc: Disabling bearer [ 444.727386][T23338] syzkaller1: entered promiscuous mode [ 444.733648][T23338] syzkaller1: entered allmulticast mode [ 444.895500][T23356] loop2: detected capacity change from 0 to 128 [ 448.934321][T23414] loop3: detected capacity change from 0 to 512 [ 448.990497][T23414] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3768: bg 0: block 393: padding at end of block bitmap is not set [ 449.020287][T23414] loop3: lost filesystem error report for type 5 error -117 [ 449.020690][T23414] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 449.036723][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 449.036743][ C1] EXT4-fs (loop3): initial error at time 1771949243: ext4_validate_block_bitmap:441 [ 449.036770][ C1] EXT4-fs (loop3): last error at time 1771949243: ext4_validate_block_bitmap:441 [ 449.130428][T23414] loop3: lost filesystem error report for type 5 error -117 [ 449.134391][T23414] EXT4-fs (loop3): 2 truncates cleaned up [ 449.194984][T23414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 449.248533][T23414] netlink: 'syz.3.3768': attribute type 28 has an invalid length. [ 449.280295][T23414] netlink: 'syz.3.3768': attribute type 3 has an invalid length. [ 449.312073][T23414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3768'. [ 449.411758][T23445] loop6: detected capacity change from 0 to 1024 [ 449.426422][T23439] batadv_slave_1: entered allmulticast mode [ 449.436181][T23437] batadv_slave_1: left allmulticast mode [ 449.469237][T23445] EXT4-fs: Ignoring removed orlov option [ 449.477537][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.506048][T23445] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.657045][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 449.657062][ T28] audit: type=1326 audit(1771949244.371:12322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23448 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 449.719946][T10603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.739985][ T28] audit: type=1326 audit(1771949244.451:12323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23448 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 449.777370][ T28] audit: type=1326 audit(1771949244.461:12324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23448 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 449.803171][T23467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3776'. [ 449.824560][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3782'. [ 449.827001][ T28] audit: type=1326 audit(1771949244.461:12325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23448 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 449.881979][ T28] audit: type=1326 audit(1771949244.461:12326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23448 comm="syz.5.3776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f172835c629 code=0x7ffc0000 [ 449.951197][T23473] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3784'. [ 450.049519][T23475] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3785'. [ 450.189392][T23477] loop6: detected capacity change from 0 to 512 [ 450.229177][T23477] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.296747][T23477] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.345064][T23477] Quota error (device loop6): do_check_range: Getting block 196613 out of range 0-5 [ 450.413988][T23484] xt_hashlimit: size too large, truncated to 1048576 [ 450.420751][T23484] xt_hashlimit: max too large, truncated to 1048576 [ 450.516808][T23493] loop3: detected capacity change from 0 to 128 [ 450.544952][T10603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.566673][T23500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3796'. [ 450.578977][T23499] FAULT_INJECTION: forcing a failure. [ 450.578977][T23499] name failslab, interval 1, probability 0, space 0, times 0 [ 450.615979][T23499] CPU: 1 UID: 0 PID: 23499 Comm: syz.1.3794 Tainted: G W syzkaller #0 PREEMPT(full) [ 450.616012][T23499] Tainted: [W]=WARN [ 450.616099][T23499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.616110][T23499] Call Trace: [ 450.616116][T23499] [ 450.616122][T23499] __dump_stack+0x1d/0x30 [ 450.616148][T23499] dump_stack_lvl+0x95/0xd0 [ 450.616171][T23499] dump_stack+0x15/0x1b [ 450.616270][T23499] should_fail_ex+0x263/0x280 [ 450.616289][T23499] should_failslab+0x8c/0xb0 [ 450.616307][T23499] __kvmalloc_node_noprof+0x155/0x650 [ 450.616330][T23499] ? alloc_fdtable+0x8c/0x1d0 [ 450.616361][T23499] ? alloc_fdtable+0xc2/0x1d0 [ 450.616406][T23499] alloc_fdtable+0xc2/0x1d0 [ 450.616426][T23499] dup_fd+0x492/0x510 [ 450.616446][T23499] ? _raw_spin_unlock+0x9/0x30 [ 450.616465][T23499] ksys_unshare+0x343/0x6d0 [ 450.616545][T23499] ? ksys_write+0x194/0x1a0 [ 450.616576][T23499] __x64_sys_unshare+0x1f/0x30 [ 450.616671][T23499] x64_sys_call+0x1cef/0x3020 [ 450.616692][T23499] do_syscall_64+0x12c/0x370 [ 450.616723][T23499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.616820][T23499] RIP: 0033:0x7f723920c629 [ 450.616837][T23499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.616890][T23499] RSP: 002b:00007f7237c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 450.616912][T23499] RAX: ffffffffffffffda RBX: 00007f7239485fa0 RCX: 00007f723920c629 [ 450.616928][T23499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026020400 [ 450.616942][T23499] RBP: 00007f7237c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 450.616957][T23499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.617033][T23499] R13: 00007f7239486038 R14: 00007f7239485fa0 R15: 00007ffc4a6bb4b8 [ 450.617050][T23499] [ 450.841416][T23516] SET target dimension over the limit! [ 450.852373][T23518] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3799'. [ 450.911456][T23518] batman_adv: batadv0: Adding interface: ipvlan2 [ 450.925005][T23518] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.959837][T23518] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 450.981076][T23525] loop3: detected capacity change from 0 to 8192 [ 450.993706][T23532] ip6gre1: entered promiscuous mode [ 451.159128][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3805'. [ 451.272077][T23538] loop3: detected capacity change from 0 to 128 [ 451.510895][T23543] lo speed is unknown, defaulting to 1000 [ 452.054935][T23555] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3810'. [ 452.219722][T23558] loop6: detected capacity change from 0 to 128 [ 452.320000][T23538] netlink: 'syz.3.3806': attribute type 1 has an invalid length. [ 453.023384][T23582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3817'. [ 453.971472][T23590] lo speed is unknown, defaulting to 1000 [ 454.002553][T23592] loop1: detected capacity change from 0 to 512 [ 454.069865][T23592] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 454.662016][T23606] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3826'. [ 454.903438][T23614] 9p: Bad value for 'rfdno' [ 454.918330][T23603] loop2: detected capacity change from 0 to 4096 [ 455.319423][T23601] loop2: detected capacity change from 0 to 1024 [ 455.392190][T23601] EXT4-fs: inline encryption not supported [ 455.457492][T23601] EXT4-fs: Ignoring removed bh option [ 455.643463][T23601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.010663][T21095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.533325][T23647] loop3: detected capacity change from 0 to 2048 [ 456.731321][T23647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.838670][T23647] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.385219][ T28] audit: type=1326 audit(1771949252.101:12327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.2.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eeadc629 code=0x7ffc0000 [ 457.465746][ T28] audit: type=1326 audit(1771949252.101:12328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.2.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eeadc629 code=0x7ffc0000 [ 457.517902][ T28] audit: type=1326 audit(1771949252.101:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.2.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eeadc629 code=0x7ffc0000 [ 457.570332][ T28] audit: type=1326 audit(1771949252.101:12330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.2.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eeadc629 code=0x7ffc0000 [ 457.596125][T23675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3849'. [ 457.610271][ T28] audit: type=1326 audit(1771949252.101:12331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.2.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f54eeadc629 code=0x7ffc0000 [ 457.675453][ T28] audit: type=1326 audit(1771949252.101:12332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.2.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eeadc629 code=0x7ffc0000 [ 457.697740][T23675] bridge3: entered promiscuous mode [ 457.739000][ T28] audit: type=1326 audit(1771949252.101:12333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.2.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f54eeadc629 code=0x7ffc0000 [ 457.782606][T23680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3851'. [ 457.797084][ T28] audit: type=1326 audit(1771949252.131:12334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.2.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54eeadc629 code=0x7ffc0000 [ 457.821723][T23680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3851'. [ 457.854463][ T28] audit: type=1326 audit(1771949252.291:12335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23664 comm="syz.2.3845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f54eeadc629 code=0x7ffc0000 [ 458.274238][T23693] loop3: detected capacity change from 0 to 512 [ 458.293332][T23693] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3854: Invalid inode bitmap blk 4 in block_group 0 [ 458.325240][T23693] loop3: lost filesystem error report for type 5 error -117 [ 458.325884][T23693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.374000][T23697] loop2: detected capacity change from 0 to 1024 [ 458.412707][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.425997][T23697] EXT4-fs: Ignoring removed orlov option [ 458.460821][T23697] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.518634][T23704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3857'. [ 458.571667][T21095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.628517][T23713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3860'. [ 458.668943][T23710] loop3: detected capacity change from 0 to 764 [ 458.684585][T23710] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 458.805813][T23724] loop6: detected capacity change from 0 to 164 [ 458.939752][T23724] rock: directory entry would overflow storage [ 458.962182][T23724] rock: sig=0x4f50, size=4, remaining=3 [ 458.977164][T23724] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 459.061432][ T28] audit: type=1400 audit(1771949253.781:12336): avc: denied { getopt } for pid=23743 comm="syz.6.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 459.884107][T23762] program syz.6.3875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.957377][T23768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3878'. [ 460.001671][T23768] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3878'. [ 460.130170][T23773] loop1: detected capacity change from 0 to 4096 [ 460.152153][T23780] EXT4-fs (loop3): unable to read superblock [ 460.167223][T23777] loop3: detected capacity change from 0 to 1024 [ 460.182013][T23773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.213179][T23777] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 460.273422][T23773] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.3880: corrupted inode contents [ 460.293899][T23777] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #3: block 1: comm syz.3.3882: lblock 1 mapped to illegal pblock 1 (length 1) [ 460.312442][T23773] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.3880: mark_inode_dirty error [ 460.325556][T23787] netlink: 'syz.5.3885': attribute type 10 has an invalid length. [ 460.340646][T23777] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 460.341777][T23777] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.3882: Failed to acquire dquot type 0 [ 460.349000][T23789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3886'. [ 460.350938][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 460.350954][ C1] EXT4-fs (loop3): initial error at time 1771949255: ext4_map_blocks:818: inode 3: block 1 [ 460.380690][T23773] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.3880: corrupted inode contents [ 460.387493][ C1] EXT4-fs (loop3): last error at time 1771949255: ext4_map_blocks:818: inode 3: block 1 [ 460.413115][T23777] loop3: lost filesystem error report for type 5 error -117 [ 460.413321][T23777] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.3882: Freeing blocks not in datazone - block = 0, count = 4096 [ 460.434884][T23777] loop3: lost filesystem error report for type 5 error -117 [ 460.436888][T23789] bridge16: entered promiscuous mode [ 460.463087][T23773] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.3880: mark_inode_dirty error [ 460.480243][T23777] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3882: Invalid inode bitmap blk 0 in block_group 0 [ 460.500645][ T6484] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 460.510115][T23777] loop3: lost filesystem error report for type 5 error -117 [ 460.514984][T23773] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.3880: corrupted inode contents [ 460.540600][T23777] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 460.547492][ T6484] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 460.551622][ T6484] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:8: Failed to release dquot type 0 [ 460.555254][T23773] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.3880: mark_inode_dirty error [ 460.571083][ T6484] loop3: lost filesystem error report for type 5 error -117 [ 460.577279][T23777] loop3: lost filesystem error report for type 5 error -117 [ 460.602396][T23792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.610352][T23773] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.3880: corrupted inode contents [ 460.634647][T23777] EXT4-fs (loop3): 1 orphan inode deleted [ 460.655863][T23777] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.669982][T23792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.680608][T23773] EXT4-fs error (device loop1): ext4_truncate:4587: inode #15: comm syz.1.3880: mark_inode_dirty error [ 460.701508][T23796] syzkaller1: entered promiscuous mode [ 460.705250][T23777] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.3882: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 460.707002][T23796] syzkaller1: entered allmulticast mode [ 460.731038][T23773] EXT4-fs error (device loop1) in ext4_setattr:5983: Corrupt filesystem [ 460.739527][T23790] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.3880: corrupted inode contents [ 460.754719][T23777] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.3882: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 460.787549][T23792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.808347][T23792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.869878][T20273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.889524][T23777] syzkaller0: entered promiscuous mode [ 460.895112][T23777] syzkaller0: entered allmulticast mode [ 460.910809][T23792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.931419][T23792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.988831][T23792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.000747][T23792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.045836][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.107784][T23804] loop1: detected capacity change from 0 to 128 [ 461.113390][ T6484] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.128123][ T6484] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.148446][T23806] loop6: detected capacity change from 0 to 8192 [ 461.158193][ T6484] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.167032][ T6484] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.178984][ T6484] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.187278][ T6484] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.195707][ T6484] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.204593][ T6484] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.204636][T23407] loop6: p1 p2[DM] p4 [ 461.233100][T23407] loop6: p1 start 134217728 is beyond EOD, truncated [ 461.252020][T23407] loop6: p2 start 4292936063 is beyond EOD, truncated [ 461.267541][T23407] loop6: p4 size 50331648 extends beyond EOD, truncated [ 461.295716][T23806] loop6: p1 p2[DM] p4 [ 461.299933][T23806] loop6: p1 start 134217728 is beyond EOD, truncated [ 461.310341][T23806] loop6: p2 start 4292936063 is beyond EOD, truncated [ 461.317379][T23806] loop6: p4 size 50331648 extends beyond EOD, truncated [ 461.373825][T23815] loop3: detected capacity change from 0 to 2048 [ 461.441920][T23521] loop3: p1 p2 [ 461.483941][T23815] loop3: p1 p2 [ 461.502723][T23819] lo speed is unknown, defaulting to 1000 [ 461.527517][T23521] udevd[23521]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 461.602578][T23822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3894'. [ 461.634863][T23819] FAULT_INJECTION: forcing a failure. [ 461.634863][T23819] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 461.741098][T23819] CPU: 1 UID: 0 PID: 23819 Comm: syz.1.3895 Tainted: G W syzkaller #0 PREEMPT(full) [ 461.741133][T23819] Tainted: [W]=WARN [ 461.741139][T23819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.741149][T23819] Call Trace: [ 461.741156][T23819] [ 461.741164][T23819] __dump_stack+0x1d/0x30 [ 461.741270][T23819] dump_stack_lvl+0x95/0xd0 [ 461.741362][T23819] dump_stack+0x15/0x1b [ 461.741385][T23819] should_fail_ex+0x263/0x280 [ 461.741464][T23819] should_fail_alloc_page+0xf2/0x100 [ 461.741487][T23819] __alloc_frozen_pages_noprof+0x108/0x360 [ 461.741524][T23819] alloc_pages_mpol+0xb3/0x260 [ 461.741616][T23819] folio_alloc_mpol_noprof+0x39/0x80 [ 461.741667][T23819] shmem_get_folio_gfp+0x3da/0xd60 [ 461.741691][T23819] ? preempt_schedule_irq+0x2d/0x50 [ 461.741721][T23819] shmem_fault+0xf6/0x250 [ 461.741743][T23819] __do_fault+0xbc/0x200 [ 461.741782][T23819] handle_mm_fault+0xfa1/0x3020 [ 461.741813][T23819] ? _raw_spin_lock+0x52/0xa0 [ 461.741836][T23819] ? pte_offset_map_lock+0x1d9/0x240 [ 461.741942][T23819] __get_user_pages+0x1023/0x1ea0 [ 461.741981][T23819] faultin_page_range+0x107/0x4d0 [ 461.742015][T23819] madvise_do_behavior+0x19f/0xa10 [ 461.742093][T23819] do_madvise+0x10e/0x190 [ 461.742124][T23819] __x64_sys_madvise+0x63/0x80 [ 461.742144][T23819] x64_sys_call+0x1eff/0x3020 [ 461.742208][T23819] do_syscall_64+0x12c/0x370 [ 461.742236][T23819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.742319][T23819] RIP: 0033:0x7f723920c629 [ 461.742333][T23819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.742420][T23819] RSP: 002b:00007f7237c5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 461.742454][T23819] RAX: ffffffffffffffda RBX: 00007f7239485fa0 RCX: 00007f723920c629 [ 461.742469][T23819] RDX: 0000000000000017 RSI: 0000000000600000 RDI: 0000200000000000 [ 461.742484][T23819] RBP: 00007f7237c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 461.742502][T23819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.742513][T23819] R13: 00007f7239486038 R14: 00007f7239485fa0 R15: 00007ffc4a6bb4b8 [ 461.742531][T23819] [ 462.561819][T23403] udevd[23403]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 462.573586][T23407] udevd[23407]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 462.618955][T23837] lo speed is unknown, defaulting to 1000 [ 462.635889][T23407] udevd[23407]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 462.648635][T23403] udevd[23403]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 462.689896][T23838] loop1: detected capacity change from 0 to 1024 [ 462.792109][T23838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 462.814513][T23838] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.852275][T23831] netlink: 'syz.1.3897': attribute type 21 has an invalid length. [ 462.895821][T20273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 463.001891][T23848] EXT4-fs (loop1): unable to read superblock [ 463.014088][T23846] loop1: detected capacity change from 0 to 1024 [ 463.032836][T23846] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 463.057178][T23846] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #3: block 1: comm syz.1.3900: lblock 1 mapped to illegal pblock 1 (length 1) [ 463.090168][T23846] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 463.090277][T23846] __quota_error: 3 callbacks suppressed [ 463.090288][T23846] Quota error (device loop1): write_blk: dquota write failed [ 463.104962][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 463.104981][ C1] EXT4-fs (loop1): initial error at time 1771949257: ext4_map_blocks:818: inode 3: block 1 [ 463.105024][ C1] EXT4-fs (loop1): last error at time 1771949257: ext4_map_blocks:818: inode 3: block 1 [ 463.190807][T23846] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 463.220273][T23846] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3900: Failed to acquire dquot type 0 [ 463.260188][T23846] loop1: lost filesystem error report for type 5 error -117 [ 463.260451][T23846] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.3900: Freeing blocks not in datazone - block = 0, count = 4096 [ 463.286386][T23846] loop1: lost filesystem error report for type 5 error -117 [ 463.287204][T23846] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3900: Invalid inode bitmap blk 0 in block_group 0 [ 463.320958][ T8789] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 463.336894][ T8789] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 463.337078][ T8789] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 463.370593][ T8789] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:11: Failed to release dquot type 0 [ 463.383510][ T8789] loop1: lost filesystem error report for type 5 error -117 [ 463.389202][T23853] loop6: detected capacity change from 0 to 128 [ 463.408182][T22466] syz_tun (unregistering): left allmulticast mode [ 463.410241][T23846] loop1: lost filesystem error report for type 5 error -117 [ 463.415865][T22466] syz_tun (unregistering): left promiscuous mode [ 463.430236][T23846] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 463.430675][T22466] bridge0: port 4(syz_tun) entered disabled state [ 463.438737][T23846] loop1: lost filesystem error report for type 5 error -117 [ 463.438846][T23846] EXT4-fs (loop1): 1 orphan inode deleted [ 463.472151][T23846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.530279][T23846] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.3900: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 463.585471][T23846] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.3900: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 463.653795][T23846] syzkaller0: entered promiscuous mode [ 463.659718][T23846] syzkaller0: entered allmulticast mode [ 463.680795][T23854] lo speed is unknown, defaulting to 1000 [ 463.804625][T20273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.812498][T23854] chnl_net:caif_netlink_parms(): no params data found [ 463.883154][T23879] loop1: detected capacity change from 0 to 2048 [ 463.939030][T23854] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.946761][T23879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.964552][T23854] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.971980][T23854] bridge_slave_0: entered allmulticast mode [ 463.978563][T23854] bridge_slave_0: entered promiscuous mode [ 463.991919][T23854] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.992027][T23879] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.999067][T23854] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.015107][T23854] bridge_slave_1: entered allmulticast mode [ 464.022290][T23854] bridge_slave_1: entered promiscuous mode [ 464.076475][T23854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.087609][T23854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.111492][T23854] team0: Port device team_slave_0 added [ 464.118237][T23854] team0: Port device team_slave_1 added [ 464.145585][T23854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.153412][T23854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.180483][T23854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.192121][T23854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.199119][T23854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.225182][T23854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.286390][T23854] hsr_slave_0: entered promiscuous mode [ 464.315210][T23902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3910'. [ 464.345425][T23854] hsr_slave_1: entered promiscuous mode [ 464.398611][T23854] debugfs: 'hsr0' already exists in 'hsr' [ 464.416405][T23909] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3914'. [ 464.439732][T23854] Cannot create hsr debugfs directory [ 464.499464][T23909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3914'. [ 464.532041][T23909] loop3: detected capacity change from 0 to 512 [ 464.539177][T23909] ext4: Unknown parameter 'noacl' [ 464.582561][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 464.615164][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 464.754854][T23917] EXT4-fs (loop3): unable to read superblock [ 464.881607][T23916] syzkaller0: entered promiscuous mode [ 465.050045][T23916] syzkaller0: entered allmulticast mode [ 465.147088][T23914] loop6: detected capacity change from 0 to 32768 [ 465.179958][T23854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 465.189194][T23854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 465.216532][T23854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 465.254315][T23854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 465.315074][ T28] audit: type=1326 audit(1771949260.031:12337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6e0c629 code=0x7ffc0000 [ 465.372936][ T28] audit: type=1326 audit(1771949260.051:12338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6e0c629 code=0x7ffc0000 [ 465.417282][T23854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.451034][T23854] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.460334][ T28] audit: type=1326 audit(1771949260.051:12339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6e0c629 code=0x7ffc0000 [ 465.504490][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.511650][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.529582][ T28] audit: type=1326 audit(1771949260.061:12340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f1bd6e0c629 code=0x7ffc0000 [ 465.561632][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.568708][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.617917][ T28] audit: type=1326 audit(1771949260.061:12341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6e0c629 code=0x7ffc0000 [ 465.690387][ T28] audit: type=1326 audit(1771949260.061:12342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6e0c629 code=0x7ffc0000 [ 465.748108][ T28] audit: type=1326 audit(1771949260.061:12343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23919 comm="syz.3.3916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6e0c629 code=0x7ffc0000 [ 465.803592][T23854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.882188][T23941] loop3: detected capacity change from 0 to 512 [ 465.928247][T23941] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3918: bg 0: block 393: padding at end of block bitmap is not set [ 465.950509][T23941] loop3: lost filesystem error report for type 5 error -117 [ 465.958230][T23941] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 465.965740][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 465.965759][ C1] EXT4-fs (loop3): initial error at time 1771949260: ext4_validate_block_bitmap:441 [ 465.965779][ C1] EXT4-fs (loop3): last error at time 1771949260: ext4_validate_block_bitmap:441 [ 466.000723][T23941] loop3: lost filesystem error report for type 5 error -117 [ 466.001136][T23941] EXT4-fs (loop3): 2 truncates cleaned up [ 466.016248][T23941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.034192][T23941] netlink: 'syz.3.3918': attribute type 28 has an invalid length. [ 466.042973][T23941] netlink: 'syz.3.3918': attribute type 3 has an invalid length. [ 466.048816][T23854] veth0_vlan: entered promiscuous mode [ 466.052977][T23941] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3918'. [ 466.059343][T23854] veth1_vlan: entered promiscuous mode [ 466.086104][T23854] veth0_macvtap: entered promiscuous mode [ 466.093718][T23854] veth1_macvtap: entered promiscuous mode [ 466.111311][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.113672][T23854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.134415][T23854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.153536][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.174736][T21778] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.201252][T21778] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.210066][T21778] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.434402][T23966] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3922'. [ 466.552082][ T5172] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 466.620391][T23964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.633736][T23964] bond0: (slave bond1): Enslaving as an active interface with an up link [ 466.649700][T23964] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3901'. [ 466.667257][T23964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.679702][T23964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.696656][T23964] bond0 (unregistering): (slave bond1): Releasing backup interface [ 466.711002][T23964] bond0 (unregistering): Released all slaves [ 467.391404][T23971] loop3: detected capacity change from 0 to 1024 [ 467.421255][T23971] EXT4-fs: Ignoring removed orlov option [ 467.452676][T23971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.518037][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.602831][T23984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3928'. [ 467.635063][T23984] bridge14: entered promiscuous mode [ 468.053698][T23987] xt_hashlimit: size too large, truncated to 1048576 [ 468.110167][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 468.110242][ T28] audit: type=1400 audit(1771949262.821:12424): avc: denied { getattr } for pid=23991 comm="syz.6.3931" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 468.111891][T23992] loop6: detected capacity change from 0 to 512 [ 468.206877][T23992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.220432][T23992] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.242494][T23992] lo speed is unknown, defaulting to 1000 [ 468.272147][ T28] audit: type=1326 audit(1771949262.991:12425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 468.311301][ T28] audit: type=1326 audit(1771949262.991:12426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23986 comm="syz.1.3929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 468.356209][T24003] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3931'. [ 468.411517][ T28] audit: type=1326 audit(1771949263.131:12427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24007 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 468.420250][T24008] 9p: Bad value for 'wfdno' [ 468.459251][T10603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.470730][ T28] audit: type=1326 audit(1771949263.131:12428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24007 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 468.504543][ T28] audit: type=1326 audit(1771949263.131:12429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24007 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 468.558271][ T28] audit: type=1326 audit(1771949263.131:12430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24007 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 468.582624][ T28] audit: type=1326 audit(1771949263.131:12431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24007 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 468.606515][ T28] audit: type=1326 audit(1771949263.131:12432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24007 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 468.643202][ T28] audit: type=1326 audit(1771949263.131:12433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24007 comm="syz.1.3934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 468.725869][T24022] EXT4-fs (loop2): unable to read superblock [ 468.788193][T24015] loop2: detected capacity change from 0 to 1024 [ 468.805432][T24015] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 468.826134][T24013] loop3: detected capacity change from 0 to 512 [ 468.882035][T24023] sctp: [Deprecated]: syz.5.3940 (pid 24023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.882035][T24023] Use struct sctp_sack_info instead [ 468.899748][T24015] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #3: block 1: comm syz.2.3938: lblock 1 mapped to illegal pblock 1 (length 1) [ 468.902121][T24018] loop1: detected capacity change from 0 to 512 [ 468.921655][T24015] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 468.921800][T24015] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.3938: Failed to acquire dquot type 0 [ 468.921828][T24015] loop2: lost filesystem error report for type 5 error -117 [ 468.922001][T24015] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.3938: Freeing blocks not in datazone - block = 0, count = 4096 [ 468.922091][T24015] loop2: lost filesystem error report for type 5 error -117 [ 468.922254][T24015] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3938: Invalid inode bitmap blk 0 in block_group 0 [ 468.922344][T24015] loop2: lost filesystem error report for type 5 error -117 [ 468.922402][T24015] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 468.922421][T24015] loop2: lost filesystem error report for type 5 error -117 [ 468.922482][T24015] EXT4-fs (loop2): 1 orphan inode deleted [ 468.922943][T24015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.923911][T24015] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.3938: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 468.924161][T24015] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.3938: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 468.933063][T24023] SELinux: policydb string length 4 does not match expected length 8 [ 468.933085][T24023] SELinux: failed to load policy [ 468.934773][T24023] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3940'. [ 469.100135][ T7470] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 469.120610][T24025] loop6: detected capacity change from 0 to 512 [ 469.128522][ T7470] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 0 [ 469.179541][T24013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.197445][T24025] EXT4-fs: Ignoring removed nobh option [ 469.261019][T21095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.283921][T24018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.320139][T24033] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3942'. [ 469.340887][T24018] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.356243][T24033] ipvlan2: entered promiscuous mode [ 469.373593][T24018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.419289][T24025] EXT4-fs (loop6): orphan cleanup on readonly fs [ 469.438391][T24010] lo speed is unknown, defaulting to 1000 [ 469.457718][T24025] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.3936: EA inode hash validation failed [ 469.479426][T24025] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3936: corrupted inode contents [ 469.494527][T24025] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 469.500118][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 469.515853][ C1] EXT4-fs (loop6): initial error at time 1771949264: ext4_do_update_inode:5569: inode 15 [ 469.525791][ C1] EXT4-fs (loop6): last error at time 1771949264: ext4_do_update_inode:5569: inode 15 [ 469.538220][T24025] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.3936: mark_inode_dirty error [ 469.589686][T24025] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 469.610816][T24039] lo speed is unknown, defaulting to 1000 [ 469.668708][T24025] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.3936: corrupted inode contents [ 469.699590][T24025] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 469.710802][T24025] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.3936: mark_inode_dirty error [ 469.737621][T24025] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 469.738408][T24025] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.3936: mark inode dirty (error -117) [ 469.762777][T24025] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 469.763714][T24025] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 469.804650][T24025] EXT4-fs (loop6): 1 orphan inode deleted [ 469.824839][T24025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 469.920364][T10603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.010973][T24062] atomic_op ffff88811b0f5528 conn xmit_atomic 0000000000000000 [ 470.106210][T24078] EXT4-fs (loop6): unable to read superblock [ 470.139191][T24072] loop6: detected capacity change from 0 to 1024 [ 470.197076][T24072] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 470.239551][T24072] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #3: block 1: comm syz.6.3952: lblock 1 mapped to illegal pblock 1 (length 1) [ 470.289767][T24072] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 470.290004][T24072] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.3952: Failed to acquire dquot type 0 [ 470.290123][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 470.290139][ C0] EXT4-fs (loop6): initial error at time 1771949265: ext4_map_blocks:818: inode 3: block 1 [ 470.290174][ C0] EXT4-fs (loop6): last error at time 1771949265: ext4_map_blocks:818: inode 3: block 1 [ 470.336986][T24072] loop6: lost filesystem error report for type 5 error -117 [ 470.342501][T24072] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.3952: Freeing blocks not in datazone - block = 0, count = 4096 [ 470.390737][T24072] loop6: lost filesystem error report for type 5 error -117 [ 470.393636][T24072] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3952: Invalid inode bitmap blk 0 in block_group 0 [ 470.414351][ T12] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 470.446583][ T12] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 470.446739][T24072] loop6: lost filesystem error report for type 5 error -117 [ 470.456120][ T12] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 470.476462][ T12] loop6: lost filesystem error report for type 5 error -117 [ 470.483724][T24072] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 470.510018][T24072] loop6: lost filesystem error report for type 5 error -117 [ 470.532620][T24072] EXT4-fs (loop6): 1 orphan inode deleted [ 470.579907][T24072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.582294][T24072] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #2: block 16: comm syz.6.3952: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 470.582521][T24072] EXT4-fs error (device loop6): ext4_search_dir:1474: inode #2: block 16: comm syz.6.3952: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 470.710878][T10603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.041893][T24182] loop6: detected capacity change from 0 to 1024 [ 471.050783][T24182] EXT4-fs: Ignoring removed orlov option [ 471.088593][T24182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.143751][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.196090][T10603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.225414][T24195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.225427][T24195] IPv6: NLM_F_CREATE should be set when creating new route [ 471.225439][T24195] IPv6: NLM_F_CREATE should be set when creating new route [ 471.225447][T24195] IPv6: NLM_F_CREATE should be set when creating new route [ 471.225606][T24195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 471.248927][T24196] EXT4-fs (loop3): unable to read superblock [ 471.254788][T24191] loop3: detected capacity change from 0 to 1024 [ 471.256628][T24191] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 471.259330][T24191] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #3: block 1: comm syz.3.3965: lblock 1 mapped to illegal pblock 1 (length 1) [ 471.323197][T24198] tap0: tun_chr_ioctl cmd 1074025676 [ 471.323215][T24198] tap0: owner set to 0 [ 471.325091][T24191] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 471.334305][T24191] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.3965: Failed to acquire dquot type 0 [ 471.334332][T24191] loop3: lost filesystem error report for type 5 error -117 [ 471.334553][T24191] EXT4-fs error (device loop3): ext4_free_blocks:6724: comm syz.3.3965: Freeing blocks not in datazone - block = 0, count = 4096 [ 471.334894][T24191] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3965: Invalid inode bitmap blk 0 in block_group 0 [ 471.334971][T24191] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 471.335069][T24191] EXT4-fs (loop3): 1 orphan inode deleted [ 471.335636][T24191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.352484][T24155] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 471.353030][T24155] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 0 [ 471.378141][T24191] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.3965: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 471.378364][T24191] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.3965: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 471.576538][T19885] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.624394][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3968'. [ 471.802357][T24212] loop3: detected capacity change from 0 to 128 [ 471.961942][T24220] hub 8-0:1.0: USB hub found [ 471.966668][T24220] hub 8-0:1.0: 8 ports detected [ 471.980297][T24222] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3974'. [ 472.045944][T24226] loop3: detected capacity change from 0 to 128 [ 472.104607][T24234] EXT4-fs (loop1): unable to read superblock [ 472.116732][T24230] loop1: detected capacity change from 0 to 1024 [ 472.130731][T24230] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 472.151424][T24230] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #3: block 1: comm syz.1.3977: lblock 1 mapped to illegal pblock 1 (length 1) [ 472.165714][T24230] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 472.165864][T24230] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3977: Failed to acquire dquot type 0 [ 472.174948][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 472.174969][ C1] EXT4-fs (loop1): initial error at time 1771949266: ext4_map_blocks:818: inode 3: block 1 [ 472.175007][ C1] EXT4-fs (loop1): last error at time 1771949266: ext4_map_blocks:818: inode 3: block 1 [ 472.214395][T24230] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.3977: Freeing blocks not in datazone - block = 0, count = 4096 [ 472.257408][T24243] loop6: detected capacity change from 0 to 2048 [ 472.289301][T24230] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3977: Invalid inode bitmap blk 0 in block_group 0 [ 472.302426][ T3444] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 472.330376][ T3444] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 472.335796][T24243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.367551][T24248] loop2: detected capacity change from 0 to 128 [ 472.374480][T24230] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 472.393577][T24230] EXT4-fs (loop1): 1 orphan inode deleted [ 472.399965][T24230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.413832][T10603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.428506][T24230] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.3977: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 472.464715][T24230] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.3977: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 472.548673][T24254] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=24254 comm=syz.3.3986 [ 472.563457][T24254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3986'. [ 472.626617][T20273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.822359][T24281] loop2: detected capacity change from 0 to 512 [ 472.829417][T24281] EXT4-fs: inline encryption not supported [ 472.838490][T24279] syzkaller1: entered promiscuous mode [ 472.844272][T24279] syzkaller1: entered allmulticast mode [ 472.872594][T24281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.917829][T24281] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.634290][T24298] loop3: detected capacity change from 0 to 128 [ 473.941561][T21095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.122686][T24313] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3998'. [ 474.194136][T24303] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 474.219017][T24303] macvtap1: entered allmulticast mode [ 474.235431][T24303] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 474.252672][T24316] bpf: Bad value for 'gid' [ 474.258057][T24316] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4001'. [ 474.292107][T24307] lo speed is unknown, defaulting to 1000 [ 474.342200][T24321] loop1: detected capacity change from 0 to 2048 [ 474.378549][T24321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.445910][T24321] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 474.480767][T24321] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 474.513656][T24321] EXT4-fs (loop1): This should not happen!! Data will be lost [ 474.513656][T24321] [ 474.525308][T24321] EXT4-fs (loop1): Total free blocks count 0 [ 474.537745][T24321] EXT4-fs (loop1): Free/Dirty block details [ 474.556668][T24321] EXT4-fs (loop1): free_blocks=2415919104 [ 474.583210][T24321] EXT4-fs (loop1): dirty_blocks=64 [ 474.595962][T24321] EXT4-fs (loop1): Block reservation details [ 474.644708][T24321] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 474.702159][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 474.763942][T24340] lo speed is unknown, defaulting to 1000 [ 475.330568][T24349] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4010'. [ 475.375052][T24349] netlink: 'syz.1.4010': attribute type 36 has an invalid length. [ 475.390020][T24349] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 475.400703][T24349] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 475.913996][T24359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4014'. [ 475.968689][T24365] netlink: 'syz.3.4016': attribute type 1 has an invalid length. [ 475.980459][T24359] lo speed is unknown, defaulting to 1000 [ 475.990903][T24365] netlink: 'syz.3.4016': attribute type 3 has an invalid length. [ 476.001453][T24365] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4016'. [ 476.085313][T24375] set_capacity_and_notify: 2 callbacks suppressed [ 476.085323][T24375] loop3: detected capacity change from 0 to 4096 [ 476.097405][T24370] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 476.113582][T24373] lo speed is unknown, defaulting to 1000 [ 476.134648][T24359] netlink: 'syz.2.4014': attribute type 1 has an invalid length. [ 476.142664][T24359] netlink: 'syz.2.4014': attribute type 3 has an invalid length. [ 476.170297][T24359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4014'. [ 476.180201][T24375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.285121][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 476.285136][ T28] audit: type=1400 audit(1771949271.001:12447): avc: denied { rmdir } for pid=19885 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 476.286443][T19885] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 476.333509][T24383] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4023'. [ 476.357566][T19885] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 476.632194][T24386] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.935223][T24408] lo speed is unknown, defaulting to 1000 [ 477.011082][T24420] netlink: 'syz.2.4035': attribute type 13 has an invalid length. [ 477.015591][T24423] geneve2: entered promiscuous mode [ 477.203379][T24431] loop6: detected capacity change from 0 to 1024 [ 477.228738][T24431] EXT4-fs: Ignoring removed orlov option [ 477.249404][T24431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.265159][ T28] audit: type=1326 audit(1771949271.981:12448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24435 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 477.268803][T24420] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.295991][T24420] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.317952][ T28] audit: type=1326 audit(1771949271.981:12449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24435 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 477.350887][ T28] audit: type=1326 audit(1771949271.981:12450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24435 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 477.374613][ T28] audit: type=1326 audit(1771949271.981:12451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24435 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 477.398652][ T28] audit: type=1326 audit(1771949271.981:12452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24435 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 477.422483][ T28] audit: type=1326 audit(1771949271.981:12453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24435 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 477.446194][ T28] audit: type=1326 audit(1771949271.981:12454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24435 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 477.470397][ T28] audit: type=1326 audit(1771949271.981:12455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24435 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 477.494140][ T28] audit: type=1326 audit(1771949271.981:12456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24435 comm="syz.1.4040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 477.559821][T24420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.586978][T24420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.640404][T24420] tipc: Resetting bearer [ 477.703786][ T3419] lo speed is unknown, defaulting to 1000 [ 477.710820][ T3419] syz2: Port: 1 Link DOWN [ 477.724794][T24155] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.736705][T24155] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.762185][T24155] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.772328][T24155] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.781163][T24155] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.789511][T24155] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.805804][T24155] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.814330][T24155] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.887026][T19003] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.984736][T24447] loop1: detected capacity change from 0 to 1024 [ 477.996152][T24447] EXT4-fs: Ignoring removed orlov option [ 478.022211][T24447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.051225][T24408] chnl_net:caif_netlink_parms(): no params data found [ 478.081792][T20273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.117826][T24155] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.195485][T24459] loop2: detected capacity change from 0 to 512 [ 478.197953][T24408] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.209351][T24408] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.212507][T24459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 478.218579][T24408] bridge_slave_0: entered allmulticast mode [ 478.233716][T24465] loop1: detected capacity change from 0 to 128 [ 478.240703][T24408] bridge_slave_0: entered promiscuous mode [ 478.255290][T24459] EXT4-fs warning (device loop2): read_mmp_block:111: Error -74 while reading MMP block 17 [ 478.281781][T24155] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.308610][T24408] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.316413][T24408] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.323619][T24408] bridge_slave_1: entered allmulticast mode [ 478.330425][T24408] bridge_slave_1: entered promiscuous mode [ 478.342453][T24465] team0: entered promiscuous mode [ 478.352548][T24465] team_slave_0: entered promiscuous mode [ 478.358321][T24465] team_slave_1: entered promiscuous mode [ 478.366610][T24465] dummy0: entered promiscuous mode [ 478.383061][T24451] netlink: 'syz.5.4045': attribute type 12 has an invalid length. [ 478.392320][T24155] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.441814][T24408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.461900][T24408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.479600][T24155] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.512938][T24408] team0: Port device team_slave_0 added [ 478.524995][T24408] team0: Port device team_slave_1 added [ 478.543813][T24408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.554909][T24408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.582860][T24408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.608365][T24460] team0: left promiscuous mode [ 478.613194][T24460] team_slave_0: left promiscuous mode [ 478.618692][T24460] team_slave_1: left promiscuous mode [ 478.624395][T24460] dummy0: left promiscuous mode [ 478.629868][T24408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.636882][T24408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.662824][T24408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.711194][T24463] lo speed is unknown, defaulting to 1000 [ 478.719268][T24408] hsr_slave_0: entered promiscuous mode [ 478.725923][T24408] hsr_slave_1: entered promiscuous mode [ 478.732327][T24408] debugfs: 'hsr0' already exists in 'hsr' [ 478.738136][T24408] Cannot create hsr debugfs directory [ 478.952996][T24491] __nla_validate_parse: 3 callbacks suppressed [ 478.953013][T24491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4053'. [ 479.774980][ T3419] SELinux: failure in sel_netif_sid_slow(), invalid network interface (77) [ 479.785804][ T3419] SELinux: failure in sel_netif_sid_slow(), invalid network interface (88) [ 479.800151][ T3419] SELinux: failure in sel_netif_sid_slow(), invalid network interface (73) [ 480.640910][T24495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4054'. [ 481.130760][T24155] bond4 (unregistering): (slave gretap1): Releasing active interface [ 481.846946][T24155] bond1 (unregistering): (slave bridge1): Releasing active interface [ 481.902469][T24155] bond2 (unregistering): (slave bridge2): Releasing active interface [ 482.092514][T24155] bond4 (unregistering): (slave bridge6): Releasing active interface [ 482.641766][T24155] bond0 (unregistering): Released all slaves [ 482.649033][T24155] bond1 (unregistering): Released all slaves [ 482.657300][T24155] bond2 (unregistering): Released all slaves [ 482.665402][T24155] bond3 (unregistering): Released all slaves [ 482.673918][T24155] bond4 (unregistering): Released all slaves [ 482.785338][T24518] loop1: detected capacity change from 0 to 512 [ 482.802691][T24518] EXT4-fs: test_dummy_encryption option not supported [ 482.812067][T24518] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 482.827137][T24155] tipc: Left network mode [ 482.900642][T24408] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 482.927659][ T28] kauditd_printk_skb: 226 callbacks suppressed [ 482.927750][ T28] audit: type=1326 audit(1771949277.641:12683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 482.976018][T24408] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 482.983059][ T28] audit: type=1326 audit(1771949277.661:12684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 483.009936][T24408] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 483.016824][ T28] audit: type=1326 audit(1771949277.701:12685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 483.021143][T24463] chnl_net:caif_netlink_parms(): no params data found [ 483.050866][ T28] audit: type=1326 audit(1771949277.701:12686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 483.075616][ T28] audit: type=1326 audit(1771949277.701:12687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 483.099698][ T28] audit: type=1326 audit(1771949277.701:12688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 483.123915][T24155] hsr_slave_0: left promiscuous mode [ 483.123930][ T28] audit: type=1326 audit(1771949277.701:12689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 483.124021][ T28] audit: type=1326 audit(1771949277.701:12690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723920c629 code=0x7ffc0000 [ 483.124059][T24155] ================================================================== [ 483.124080][T24155] BUG: KCSAN: data-race in data_push_tail / string [ 483.124100][T24155] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 483.124106][T24155] write to 0xffffffff893af8f0 of 1 bytes by task 28 on cpu 1: [ 483.124122][T24155] string+0x187/0x220 [ 483.124124][ T28] audit: type=1326 audit(1771949277.701:12691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f723920dec7 code=0x7ffc0000 [ 483.124145][T24155] vsnprintf+0x532/0x860 [ 483.124152][ T28] audit: type=1326 audit(1771949277.701:12692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f72391ccece code=0x7ffc0000 [ 483.124168][T24155] vscnprintf+0x41/0x90 [ 483.124191][T24155] printk_sprint+0x30/0x2e0 [ 483.124209][T24155] vprintk_store+0x57b/0x910 [ 483.124230][T24155] vprintk_emit+0x1a4/0x600 [ 483.124246][T24155] vprintk_default+0x26/0x30 [ 483.124264][T24155] vprintk+0x1d/0x30 [ 483.124287][T24155] _printk+0x79/0xa0 [ 483.124305][T24155] kauditd_hold_skb+0x1b1/0x1c0 [ 483.124333][T24155] kauditd_send_queue+0x273/0x2c0 [ 483.124356][T24155] kauditd_thread+0x444/0x670 [ 483.124374][T24155] kthread+0x22a/0x280 [ 483.124391][T24155] ret_from_fork+0x150/0x360 [ 483.124416][T24155] ret_from_fork_asm+0x1a/0x30 [ 483.124439][T24155] [ 483.124445][T24155] read to 0xffffffff893af8f0 of 8 bytes by task 24155 on cpu 0: [ 483.124462][T24155] data_push_tail+0x100/0x470 [ 483.124480][T24155] data_alloc+0x11b/0x390 [ 483.124503][T24155] prb_reserve+0x8d7/0xae0 [ 483.124519][T24155] vprintk_store+0x54a/0x910 [ 483.124530][T24155] vprintk_emit+0x1a4/0x600 [ 483.124540][T24155] vprintk_default+0x26/0x30 [ 483.124551][T24155] vprintk+0x1d/0x30 [ 483.124564][T24155] _printk+0x79/0xa0 [ 483.124575][T24155] __netdev_printk+0x310/0x370 [ 483.124590][T24155] netdev_info+0xa6/0xd0 [ 483.124607][T24155] __dev_set_promiscuity+0x1fb/0x3f0 [ 483.124618][T24155] netif_set_promiscuity+0x39/0x90 [ 483.124630][T24155] dev_set_promiscuity+0xc1/0x170 [ 483.124641][T24155] hsr_del_port+0x13b/0x1a0 [ 483.124651][T24155] hsr_del_ports+0x31/0xc0 [ 483.124666][T24155] hsr_dellink+0x5b/0xa0 [ 483.124683][T24155] default_device_exit_batch+0x45c/0x640 [ 483.124700][T24155] ops_undo_list+0x2ca/0x420 [ 483.124712][T24155] cleanup_net+0x37c/0x5b0 [ 483.124722][T24155] process_scheduled_works+0x4de/0x9e0 [ 483.124738][T24155] worker_thread+0x581/0x770 [ 483.124752][T24155] kthread+0x22a/0x280 [ 483.124763][T24155] ret_from_fork+0x150/0x360 [ 483.124778][T24155] ret_from_fork_asm+0x1a/0x30 [ 483.124793][T24155] [ 483.124796][T24155] value changed: 0x00000000fffff354 -> 0x3934393137373128 [ 483.124804][T24155] [ 483.124807][T24155] Reported by Kernel Concurrency Sanitizer on: [ 483.124817][T24155] CPU: 0 UID: 0 PID: 24155 Comm: kworker/u8:13 Tainted: G W syzkaller #0 PREEMPT(full) [ 483.124835][T24155] Tainted: [W]=WARN [ 483.124840][T24155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 483.124848][T24155] Workqueue: netns cleanup_net [ 483.124862][T24155] ================================================================== [ 483.552311][T24155] lo (unregistering): left allmulticast mode [ 483.559674][T24408] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 483.914490][T24155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.982803][T24155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.062822][T24155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.113005][T24155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.587598][T24155] bridge_slave_1: left allmulticast mode [ 484.593387][T24155] bridge_slave_1: left promiscuous mode [ 484.599165][T24155] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.607776][T24155] bridge_slave_0: left allmulticast mode [ 484.614500][T24155] bridge_slave_0: left promiscuous mode [ 484.621559][T24155] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.631097][T24155] bridge_slave_1: left allmulticast mode [ 484.636760][T24155] bridge_slave_1: left promiscuous mode [ 484.643372][T24155] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.655960][T24155] bridge_slave_0: left allmulticast mode [ 484.661890][T24155] bridge_slave_0: left promiscuous mode [ 484.667601][T24155] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.678432][T24155] bridge_slave_1: left allmulticast mode [ 484.684112][T24155] bridge_slave_1: left promiscuous mode [ 484.689732][T24155] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.697509][T24155] bridge_slave_0: left allmulticast mode [ 484.703355][T24155] bridge_slave_0: left promiscuous mode [ 484.709126][T24155] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.781854][T24155] bond0 (unregistering): Released all slaves [ 484.901556][T24155] bond1 (unregistering): Released all slaves [ 484.982372][T24155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.992001][T24155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.001703][T24155] bond0 (unregistering): Released all slaves [ 485.182143][T24155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.191493][T24155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.200548][T24155] bond0 (unregistering): Released all slaves [ 485.207832][T24155] bond1 (unregistering): Released all slaves [ 485.271240][T24155] tipc: Disabling bearer [ 485.276624][T24155] tipc: Left network mode [ 485.288093][T24155] hsr_slave_0: left promiscuous mode [ 485.293875][T24155] hsr_slave_1: left promiscuous mode [ 485.300132][T24155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.307524][T24155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.315667][T24155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.323519][T24155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.333315][T24155] hsr_slave_0: left promiscuous mode [ 485.339258][T24155] hsr_slave_1: left promiscuous mode [ 485.346037][T24155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.353676][T24155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.363035][T24155] hsr_slave_0: left promiscuous mode [ 485.368769][T24155] hsr_slave_1: left promiscuous mode [ 485.375100][T24155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.383124][T24155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.394567][T24155] veth1_macvtap: left promiscuous mode [ 485.400037][T24155] veth0_macvtap: left promiscuous mode [ 485.405715][T24155] veth1_vlan: left promiscuous mode [ 485.411059][T24155] veth0_vlan: left promiscuous mode [ 485.479771][T24155] team0 (unregistering): Port device team_slave_1 removed [ 485.489978][T24155] team0 (unregistering): Port device team_slave_0 removed [ 485.541869][T24155] team0 (unregistering): Port device team_slave_1 removed [ 485.551615][T24155] team0 (unregistering): Port device team_slave_0 removed [ 485.602885][T24155] team0 (unregistering): Port device team_slave_1 removed [ 485.612659][T24155] team0 (unregistering): Port device team_slave_0 removed