last executing test programs: 2m10.800462059s ago: executing program 4 (id=666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140f2000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m10.75662799s ago: executing program 4 (id=669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000800000000e00000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000070000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r2, &(0x7f0000000180)=[{}, {&(0x7f0000000c00)="0500000000029e", 0x7}], 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r3, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@private0, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$incfs(0xffffffffffffff9c, 0x0, 0x301, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xfc}}, 0x4000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r6, 0x0, 0x4}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x1000, &(0x7f0000000340)={[{@dioread_nolock}, {@abort}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@norecovery}]}, 0x1, 0x4e0, &(0x7f0000000a00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2m10.721854231s ago: executing program 4 (id=674): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), r1) 2m10.673984452s ago: executing program 4 (id=676): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000340), 0xfd, 0x572, &(0x7f0000002400)="$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") memfd_create(0x0, 0x5) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800714, &(0x7f0000000100)={[{@delalloc}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x54) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="c45c7077d4ecf15ef21087211bfe851210fe315422ecf3d93b8235f2a140a45c2f68284ab03ce90c576920b5937db8"], 0x1, 0x1e9, &(0x7f00000002c0)="$eJzs2k1rVFcYB/Bz05SkCXkppS3Jpoe2i3ZzabIsXSSUBEoHFM0IKkhuyESHGWfC3FnMiItZu/IjuBaX7gTJF8h3cOEuCNFVVl7R0bwRFyrJCPn9NvOHPwPn4cDhWdydf+7frm3k6UbWDkNJEoYWQi/sJWE6DIUPeuHP3/9+ee/y1Wv/L5ZKS5diXF5cmZuPMU7+8vT63Ue/brXHrzyefDIStqdv7OzOP9/+aXtm5/XKrWoeq3lsNNsxi2vNZjtbq1fiejWvpTFerFeyvBKrjbzSOtJv1Jubm92YNdYnxjZblTyPWaMba5VubDdju9WN2c2s2ohpmsaJscCXKD/cK4qwW3y7Goqi+O5BGN8KE8/CVEi+j8kPC8mPq8nPvWRmtyimBn1UToX7P98OPeqjIbzodcqdcv+33y//V1r6K74zffCvV51O+Zv9fq7fx6P9SBh738+f2I+GP37r92+7fy+UjvWzYf30xwcAOHfSuO/E/S5NP9b306H98Nj+Nhxmh89sDD5T3r1Ty+r1SksQBGE/DPpl4iwcXPqgTwIAAAAAAAAAAMCnOIvPCQc9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HV7EwAA///n0Xgk") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_pidfd_open(r1, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r8) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 2m9.929414536s ago: executing program 4 (id=690): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x404, &(0x7f0000000340), 0x3, 0x43a, &(0x7f00000008c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) acct(&(0x7f0000000280)='./file1\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) 2m9.607047892s ago: executing program 4 (id=700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x9, 0x0, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x20}, 0x48) r0 = inotify_init1(0x800) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 2m9.603719302s ago: executing program 32 (id=700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x9, 0x0, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x20}, 0x48) r0 = inotify_init1(0x800) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 3.729462248s ago: executing program 1 (id=3262): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000010a739170000040000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000950000ec9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) io_setup(0x7, &(0x7f0000000600)=0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000000)="ff", 0x1}]) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r7, 0x2}}, 0x18) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'dvmrp0\x00', 0x4000}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.987689142s ago: executing program 1 (id=3280): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b103c00000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x2b6, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df8500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) writev(r1, &(0x7f0000001a00)=[{&(0x7f0000000080)='b', 0x1}], 0x1) 2.299291575s ago: executing program 5 (id=3292): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02030003120000252cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00000000000000000000000000000000000000000000010b0000000000000002000100000000000000070c0000000005000500000000000a00000000000000fc01000000000000000000000000000107000000000000000100140007"], 0x90}, 0x1, 0x7}, 0x0) 2.281994235s ago: executing program 5 (id=3293): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r4, 0x0, 0x80000001}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) r8 = openat$cgroup_freezer_state(r6, &(0x7f0000000080), 0x2, 0x0) r9 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r9, 0x10e, 0x8, 0x0, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='THAWED\x00', 0x7) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x406, 0xd, 0x0, 0xffffffff, 0x0, "78b0be00", 0xf, 0x10002}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1000000000, 0xffffffffffffffff, 0x1) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r10 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r10, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x530c}], 0x1, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r11}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x300000c, &(0x7f00000002c0)={[], [{@dont_hash}, {@measure}]}, 0x1, 0x53b, &(0x7f0000001380)="$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") r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'macvlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 2.081298639s ago: executing program 1 (id=3295): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2.03472222s ago: executing program 1 (id=3297): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x8000) creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000b1764c360e9b9add83cc5ac879390b32bfb645cbce678d3216ea5e0b5387ec1ceaf54870b45f85a61149a31e8a1cbc5e2c2538d6d68f5c3b04bc05587ee5b1c80f7b049947226f0c178208b22c80711a6026428ff8419eabc8f5fa497f0be3b8a57f776086facd2c672bd2f1d680f713707ed9fd27ed8f0ef59a62c530e7d4d0f860047eb0d94c03623f44795642"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x200000e8, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000580)='./bus\x00', &(0x7f0000000400)='ufs\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, 0xffffffffffffffff, 0x0, 0xfffe}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1.993418451s ago: executing program 3 (id=3298): r0 = socket$inet6(0xa, 0x2, 0x9) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x10010, 0xffffffffffffffff, 0x0) syz_read_part_table(0x60d, &(0x7f00000006c0)="$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") socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x97) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3008046, &(0x7f00000007c0)={[{@journal_checksum}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@errors_continue}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") statx(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x1000, 0x100, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @private=0xa010102}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) statx(r1, &(0x7f0000000380)='./file1\x00', 0x100, 0x10, &(0x7f0000000540)) mount$9p_unix(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000300), 0x2100040, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=unix,mask=MAY_READ,uid=', @ANYRESDEC=r2, @ANYBLOB="2c7365636c61626565d200"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x0) pwritev2(r5, &(0x7f00000003c0)=[{&(0x7f0000000d40)="a9b6ffebc7c6ac4ea14172d1d387f12e7fd6580186b4c988ad484cb82d2e114dd457a4223e9f64192e3253763de7d32cd4e26ffbd9de86287383911d6799b32ceacfe3adcf5e9781f1ed6a846c5054caaf61d41155be057bc68037a5ae2177b3181ea32ca790d12c564d45d18823ec3f00c01cd19c43e6d2e46f20e07ce3db25f50d0d4aafc0364e9a8121321f4bb1ea5bc7d58dced765f6167ccccc1b9998fedad44e348a296777fdf3312737e7ecfb075abd30bbce5edd8b4977d4bcf3b5744a716c1021eec4e9bab6c4ec910f49ca8c0ef12525a7afb4f55d18954cc2da377680fa4e668fdb36c0feb0f05a938803a5", 0xf1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000640)="4142e8cc303b5b9ca90b4be0760bdb5601e5e8bd933622a5fa85cbe376875ed8ea52143914159ab87a688c835d4ab6bd396a4b263b42c30ac14bf34635d7a40819ce4e61080576401eb1ed235a5130f0f70f222926386aafd34d735f8f08", 0x5e}, {&(0x7f0000002b00)="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", 0x1000}], 0x4, 0x5401, 0x1, 0x5) 1.869480754s ago: executing program 1 (id=3299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000300)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x6, 0x623, &(0x7f0000001fc0)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0xb1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0xfffffff7, 0x1000, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@delchain={0x24, 0x65, 0xe0a, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xc, 0x8}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20004804) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a300000"], 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24fde7b5d0061dcfc87f65e857a4f2000046", @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf250f00000008000300", @ANYRES32=r5, @ANYBLOB="0500380001000000"], 0x24}, 0x1, 0x0, 0x0, 0x44801}, 0x40) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r6 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace(0x4206, r6) tkill(r6, 0x12) ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x0, 0x0) 1.831971374s ago: executing program 2 (id=3300): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) (fail_nth: 3) 1.670887938s ago: executing program 2 (id=3302): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r4}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.289923645s ago: executing program 5 (id=3305): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) creat(&(0x7f0000010280)='./file0\x00', 0x182) mount(&(0x7f0000000300), &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.289262184s ago: executing program 3 (id=3306): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x8000) creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000b1764c360e9b9add83cc5ac879390b32bfb645cbce678d3216ea5e0b5387ec1ceaf54870b45f85a61149a31e8a1cbc5e2c2538d6d68f5c3b04bc05587ee5b1c80f7b049947226f0c178208b22c80711a6026428ff8419eabc8f5fa497f0be3b8a57f776086facd2c672bd2f1d680f713707ed9fd27ed8f0ef59a62c530e7d4d0f860047eb0d94c03623f44795642"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x200000e8, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000580)='./bus\x00', &(0x7f0000000400)='ufs\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, 0xffffffffffffffff, 0x0, 0xfffe}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1.259859755s ago: executing program 5 (id=3308): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x4480, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x2c, 0x34, 0x2c, 0x37]}}}}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x20, 0x80, 0x5, 0x4, {{0x3b, 0x4, 0x2, 0x9, 0xec, 0x67, 0x0, 0x4d, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @remote, {[@timestamp_prespec={0x44, 0x14, 0x9b, 0x3, 0x6, [{@broadcast, 0x9}, {@multicast1, 0x9}]}, @lsrr={0x83, 0x23, 0x6b, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @broadcast, @local, @multicast2, @multicast2]}, @generic={0x82, 0xc, "a64f05155097201c93d5"}, @rr={0x7, 0x17, 0x58, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x13}, @remote]}, @timestamp_prespec={0x44, 0x24, 0x14, 0x3, 0xc, [{@broadcast, 0x82c9}, {@private=0xa010102, 0x7f}, {@loopback, 0x8001}, {@private=0xa010100, 0x100}]}, @timestamp={0x44, 0x8, 0xe5, 0x0, 0xe, [0x7]}, @timestamp_addr={0x44, 0x44, 0x50, 0x1, 0xc, [{@loopback, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x4}, {@remote, 0x6d7c}, {@broadcast, 0xf5}, {@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@loopback, 0x300}]}, @timestamp={0x44, 0xc, 0x8b, 0x0, 0xc, [0x8e2, 0x3]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c5}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x70, 0x2c, 0xf07, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000014}, 0x2008c014) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x4) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r11], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x2, '\x00', r11, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000003c0)={@multicast2, @initdev, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000680)={@initdev, 0x0}, &(0x7f00000006c0)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000880)={0x194, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8976f6e3d544993}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4800}, 0x14) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 1.245000676s ago: executing program 2 (id=3309): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@deltaction={0xb0, 0x31, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0xb0}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802000"], 0x118}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000002100df4d2abd700000000000020010000000000000000000140011006e657464657673090000000004000000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x6, 0x4002) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81000) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) 1.194191227s ago: executing program 5 (id=3310): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_read_part_table(0x104c, &(0x7f00000002c0)="$eJzsz7GpAkEUhtF/HrtPQZApQWOrGFNNjWzCEgRrMdAeRVkNNDEUFM7JhrnfhRu+yDXJ+N3n5PWxuuxGyX42z6H93aMyhK3muFxkWpPtMLYuObX/lNqne4T9c0eXzflztwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA77gFAAD///krCKU=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000f10000000500000001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x20, 0xc, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendto$inet(r5, &(0x7f0000000380)="11", 0x1, 0x40040, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001400)=0xffffffffffffffff, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0xb66f) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/189, 0xbd, 0x0, 0x0}, &(0x7f0000000100)=0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1.193759897s ago: executing program 0 (id=3311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x5, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @mcast1, 0x4}}}, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0xffffff09, 0x200, 0x12004, 0xfff, 0xfd, "12ff31994c421100ff800a000000f0ff00", 0xffffffff, 0x6}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r5, 0xdf55ca255b4e1b09, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008440}, 0x8880) 1.123455338s ago: executing program 2 (id=3312): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 965.276431ms ago: executing program 3 (id=3313): r0 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010030bd7400fddbdf251f0000002000018008000100", @ANYRES32=r6, @ANYBLOB="14000200776731"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x880) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=r0, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r8 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x2480) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r10, 0x4c08, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r11, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r8}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r7, 0x0, 0x0, 0xffffffffffffffff}]) 954.408271ms ago: executing program 0 (id=3314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 894.546153ms ago: executing program 0 (id=3315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f00000004c0)=ANY=[@ANYBLOB='trqyans=unix']) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x15}, 0xc92, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="500100001000130428bd700000000000e0000001000000000000000000000000ac1e0101000000000000000000000000000000004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x804) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="301aadf06f8c99013d1c000000", @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x30}, 0x8000) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7fff}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5f18}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000000000000046400010073797a300000000044000000090a01040000000000000000010000000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900bcd55a7107cd99c54d65020073797a32000000000900010073797a30000000003800038061e9d8733fd1370b638f72a32d06b9b9296eff58afe8f71557eb284a16daa9874d90f882f94c16f2dc"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) 884.199033ms ago: executing program 2 (id=3316): r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, 0x0) 801.397244ms ago: executing program 2 (id=3317): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x800, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, 0x0) 719.785056ms ago: executing program 3 (id=3318): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'veth0_to_bond\x00', {0x2, 0x4e21, @broadcast}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 507.2251ms ago: executing program 3 (id=3319): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x2000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) 501.28369ms ago: executing program 3 (id=3320): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='ext4_sync_fs\x00', 0xffffffffffffffff, 0x0, 0xc}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='ext4_sync_fs\x00', r3}, 0x18) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 448.600671ms ago: executing program 1 (id=3321): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000008c8daa9e693a99dbb8224c787faff700"/35, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}]}, 0x140}}, 0x0) clock_getres(0x4, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x3]}, &(0x7f0000000040), 0x0, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 367.174513ms ago: executing program 0 (id=3322): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket(0x8000000010, 0x800, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r1, &(0x7f00000006c0)="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", 0xfc) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000580)={0x2, 0x1}) 366.861823ms ago: executing program 0 (id=3323): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x2}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x8000) creat(&(0x7f0000000080)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000b1764c360e9b9add83cc5ac879390b32bfb645cbce678d3216ea5e0b5387ec1ceaf54870b45f85a61149a31e8a1cbc5e2c2538d6d68f5c3b04bc05587ee5b1c80f7b049947226f0c178208b22c80711a6026428ff8419eabc8f5fa497f0be3b8a57f776086facd2c672bd2f1d680f713707ed9fd27ed8f0ef59a62c530e7d4d0f860047eb0d94c03623f44795642"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x200000e8, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000580)='./bus\x00', &(0x7f0000000400)='ufs\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, 0xffffffffffffffff, 0x0, 0xfffe}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 336.852043ms ago: executing program 5 (id=3324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@inlinecrypt}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0xa3) (fail_nth: 4) 0s ago: executing program 0 (id=3325): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x5, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @mcast1, 0x4}}}, 0x108) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0xffffff09, 0x200, 0x12004, 0xfff, 0xfd, "12ff31994c421100ff800a000000f0ff00", 0xffffffff, 0x6}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r5, 0xdf55ca255b4e1b09, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4008440}, 0x8880) kernel console output (not intermixed with test programs): or" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 164.752775][ T29] audit: type=1326 audit(1758908495.945:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 164.776403][ T29] audit: type=1326 audit(1758908495.945:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 164.800057][ T29] audit: type=1326 audit(1758908495.945:9073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 164.823601][ T29] audit: type=1326 audit(1758908495.945:9074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 164.847256][ T29] audit: type=1326 audit(1758908495.945:9075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 164.870787][ T29] audit: type=1326 audit(1758908495.945:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 164.894294][ T29] audit: type=1326 audit(1758908495.945:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.2.2791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 165.331198][T13628] loop9: detected capacity change from 0 to 7 [ 165.348290][T13628] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.356886][T13628] Buffer I/O error on dev loop9, logical block 0, async page read [ 165.364905][T13628] loop9: unable to read partition table [ 165.370850][T13628] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 165.370850][T13628] ) failed (rc=-5) [ 165.388916][T13631] loop3: detected capacity change from 0 to 512 [ 165.397400][T13631] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2797: corrupted in-inode xattr: invalid ea_ino [ 165.412013][T13631] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2797: couldn't read orphan inode 15 (err -117) [ 165.425329][T13631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.486883][T13644] netlink: 'syz.5.2800': attribute type 27 has an invalid length. [ 165.498327][T13644] team0: left promiscuous mode [ 165.503138][T13644] dummy0: left promiscuous mode [ 165.509146][T13644] macsec1: left promiscuous mode [ 165.541588][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.573204][T13666] netlink: 'syz.1.2806': attribute type 27 has an invalid length. [ 165.573391][T13665] loop3: detected capacity change from 0 to 512 [ 165.608425][T13664] loop5: detected capacity change from 0 to 2048 [ 165.617225][T13665] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.642396][T13668] lo speed is unknown, defaulting to 1000 [ 165.651299][T13664] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.695992][T13665] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2804: invalid indirect mapped block 4294967295 (level 0) [ 165.713089][T13680] netlink: 'syz.1.2808': attribute type 27 has an invalid length. [ 165.714044][T13701] FAULT_INJECTION: forcing a failure. [ 165.714044][T13701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.734024][T13701] CPU: 1 UID: 0 PID: 13701 Comm: syz.2.2809 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.734107][T13701] Tainted: [W]=WARN [ 165.734116][T13701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.734132][T13701] Call Trace: [ 165.734139][T13701] [ 165.734146][T13701] __dump_stack+0x1d/0x30 [ 165.734168][T13701] dump_stack_lvl+0xe8/0x140 [ 165.734187][T13701] dump_stack+0x15/0x1b [ 165.734202][T13701] should_fail_ex+0x265/0x280 [ 165.734297][T13701] should_fail+0xb/0x20 [ 165.734319][T13701] should_fail_usercopy+0x1a/0x20 [ 165.734355][T13701] _copy_from_iter+0xd2/0xe80 [ 165.734394][T13701] ? _copy_from_iter+0x170/0xe80 [ 165.734436][T13701] copy_page_from_iter+0x178/0x2a0 [ 165.734485][T13701] skb_copy_datagram_from_iter+0x232/0x490 [ 165.734521][T13701] tun_get_user+0xafa/0x26e0 [ 165.734610][T13701] ? ref_tracker_alloc+0x1f2/0x2f0 [ 165.734643][T13701] ? selinux_file_permission+0x1e4/0x320 [ 165.734671][T13701] tun_chr_write_iter+0x15e/0x210 [ 165.734696][T13701] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 165.734747][T13701] vfs_write+0x52a/0x960 [ 165.734783][T13701] ksys_write+0xda/0x1a0 [ 165.734815][T13701] __x64_sys_write+0x40/0x50 [ 165.734843][T13701] x64_sys_call+0x27fe/0x2ff0 [ 165.734867][T13701] do_syscall_64+0xd2/0x200 [ 165.734903][T13701] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.734941][T13701] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 165.734991][T13701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.735015][T13701] RIP: 0033:0x7f134738eec9 [ 165.735032][T13701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.735051][T13701] RSP: 002b:00007f1345df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.735072][T13701] RAX: ffffffffffffffda RBX: 00007f13475e5fa0 RCX: 00007f134738eec9 [ 165.735086][T13701] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 0000000000000006 [ 165.735100][T13701] RBP: 00007f1345df7090 R08: 0000000000000000 R09: 0000000000000000 [ 165.735226][T13701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.735239][T13701] R13: 00007f13475e6038 R14: 00007f13475e5fa0 R15: 00007ffe317de568 [ 165.735261][T13701] [ 165.739404][T13665] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2804: invalid indirect mapped block 4294967295 (level 1) [ 165.806838][T13705] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.2805: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 166.011910][T13705] EXT4-fs (loop5): Remounting filesystem read-only [ 166.019342][T13665] EXT4-fs (loop3): 1 orphan inode deleted [ 166.025145][T13665] EXT4-fs (loop3): 1 truncate cleaned up [ 166.062563][T13665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.095678][T13705] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.108130][T13705] block device autoloading is deprecated and will be removed. [ 166.147446][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2812'. [ 166.168037][ T5483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.201915][T13723] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13723 comm=syz.2.2812 [ 166.226167][T13724] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2813'. [ 166.284887][T13727] netlink: 'syz.1.2814': attribute type 10 has an invalid length. [ 166.344318][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2815'. [ 166.379008][T13735] Unsupported ieee802154 address type: 0 [ 166.447588][T13733] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2815'. [ 166.528744][T13744] netlink: 'syz.2.2819': attribute type 27 has an invalid length. [ 166.537298][T13745] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 166.537298][T13745] program syz.5.2816 not setting count and/or reply_len properly [ 166.662480][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.682890][T13748] loop2: detected capacity change from 0 to 512 [ 166.709432][T13748] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.769638][T13748] EXT4-fs (loop2): 1 truncate cleaned up [ 166.776700][T13746] infiniband syz!: set down [ 166.781276][T13746] infiniband syz!: added team_slave_0 [ 166.808697][T13748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.851410][T13746] RDS/IB: syz!: added [ 166.863725][T13746] smc: adding ib device syz! with port count 1 [ 166.872293][T13746] smc: ib device syz! port 1 has pnetid [ 166.906664][T13764] netlink: 'syz.1.2823': attribute type 27 has an invalid length. [ 166.931385][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.067927][T13769] loop2: detected capacity change from 0 to 1024 [ 167.119068][T13769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.126172][T13777] ªªªªªª: renamed from vlan0 (while UP) [ 167.175011][T13769] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 167.177088][T13784] FAULT_INJECTION: forcing a failure. [ 167.177088][T13784] name failslab, interval 1, probability 0, space 0, times 0 [ 167.202218][T13784] CPU: 1 UID: 0 PID: 13784 Comm: syz.0.2827 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.202254][T13784] Tainted: [W]=WARN [ 167.202261][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.202274][T13784] Call Trace: [ 167.202281][T13784] [ 167.202290][T13784] __dump_stack+0x1d/0x30 [ 167.202372][T13784] dump_stack_lvl+0xe8/0x140 [ 167.202393][T13784] dump_stack+0x15/0x1b [ 167.202410][T13784] should_fail_ex+0x265/0x280 [ 167.202442][T13784] should_failslab+0x8c/0xb0 [ 167.202508][T13784] kmem_cache_alloc_node_noprof+0x57/0x320 [ 167.202539][T13784] ? __alloc_skb+0x101/0x320 [ 167.202561][T13784] __alloc_skb+0x101/0x320 [ 167.202579][T13784] ? audit_log_start+0x365/0x6c0 [ 167.202642][T13784] audit_log_start+0x380/0x6c0 [ 167.202746][T13784] audit_seccomp+0x48/0x100 [ 167.202782][T13784] ? __seccomp_filter+0x68c/0x10d0 [ 167.202837][T13784] __seccomp_filter+0x69d/0x10d0 [ 167.202862][T13784] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 167.202961][T13784] ? vfs_write+0x7e8/0x960 [ 167.202984][T13784] ? __rcu_read_unlock+0x4f/0x70 [ 167.203007][T13784] ? __fget_files+0x184/0x1c0 [ 167.203038][T13784] __secure_computing+0x82/0x150 [ 167.203104][T13784] syscall_trace_enter+0xcf/0x1e0 [ 167.203131][T13784] do_syscall_64+0xac/0x200 [ 167.203162][T13784] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.203224][T13784] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 167.203259][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.203285][T13784] RIP: 0033:0x7f37806beec9 [ 167.203304][T13784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.203348][T13784] RSP: 002b:00007f377f11f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.203372][T13784] RAX: ffffffffffffffda RBX: 00007f3780915fa0 RCX: 00007f37806beec9 [ 167.203387][T13784] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000007 [ 167.203402][T13784] RBP: 00007f377f11f090 R08: 0000000000000000 R09: 0000000000000000 [ 167.203417][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.203437][T13784] R13: 00007f3780916038 R14: 00007f3780915fa0 R15: 00007ffd71cbae18 [ 167.203460][T13784] [ 167.522792][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.595540][T13796] lo speed is unknown, defaulting to 1000 [ 167.726217][T13808] loop0: detected capacity change from 0 to 512 [ 167.759006][T13808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.771757][T13808] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.027951][T13817] netlink: 'syz.1.2835': attribute type 27 has an invalid length. [ 168.378598][T13827] loop2: detected capacity change from 0 to 1024 [ 168.397437][T13827] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.428179][T13827] EXT4-fs: dax option not supported [ 168.444385][T13829] lo speed is unknown, defaulting to 1000 [ 168.459213][T13825] loop3: detected capacity change from 0 to 8192 [ 168.842128][T13887] ref_ctr increment failed for inode: 0x78e offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888130228000 [ 168.889399][T13887] ref_ctr increment failed for inode: 0x78e offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff888130228000 [ 168.948281][T13886] uprobe: syz.5.2843:13886 failed to unregister, leaking uprobe [ 169.077299][T13886] uprobe: syz.5.2843:13886 failed to unregister, leaking uprobe [ 169.194588][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.278213][T13896] openvswitch: netlink: Message has 6 unknown bytes. [ 169.419558][T13845] loop2: detected capacity change from 0 to 512 [ 169.451416][T13845] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 169.487065][T13845] EXT4-fs (loop2): invalid journal inode [ 169.664750][T13926] netlink: 'syz.1.2856': attribute type 21 has an invalid length. [ 169.675265][T13926] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2856'. [ 169.684244][T13934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13934 comm=syz.5.2855 [ 169.757781][T13944] lo speed is unknown, defaulting to 1000 [ 169.914998][T13944] lo speed is unknown, defaulting to 1000 [ 169.944410][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 169.944424][ T29] audit: type=1400 audit(1758908501.259:9368): avc: denied { read append } for pid=13943 comm="syz.2.2859" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 169.974485][ T29] audit: type=1400 audit(1758908501.259:9369): avc: denied { ioctl open } for pid=13943 comm="syz.2.2859" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 169.984568][T13978] random: crng reseeded on system resumption [ 170.163374][ T29] audit: type=1400 audit(1758908501.469:9370): avc: denied { mounton } for pid=14015 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 170.286428][ T29] audit: type=1400 audit(1758908501.599:9371): avc: denied { create } for pid=14033 comm="syz.0.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 170.342540][T14034] vhci_hcd: invalid port number 96 [ 170.347814][T14034] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 170.355632][ T29] audit: type=1400 audit(1758908501.649:9372): avc: denied { map } for pid=14033 comm="syz.0.2867" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 170.391432][T14034] loop0: detected capacity change from 0 to 1024 [ 170.411064][T14015] lo speed is unknown, defaulting to 1000 [ 170.433578][T14034] EXT4-fs: Ignoring removed bh option [ 170.439273][T14034] EXT4-fs: inline encryption not supported [ 170.463992][T14034] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 170.507112][T14034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 170.565412][T14034] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2867: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.589152][T14056] 9pnet_fd: Insufficient options for proto=fd [ 170.661198][T14034] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 170.685594][ T29] audit: type=1326 audit(1758908501.999:9373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14080 comm="syz.5.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879b6aeec9 code=0x7ffc0000 [ 170.709262][T14034] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2867: lblock 0 mapped to illegal pblock 48 (length 1) [ 170.756589][T14034] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 170.765576][T14034] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2867: Failed to acquire dquot type 0 [ 170.795046][ T29] audit: type=1326 audit(1758908501.999:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14080 comm="syz.5.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879b6aeec9 code=0x7ffc0000 [ 170.818692][ T29] audit: type=1326 audit(1758908501.999:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14080 comm="syz.5.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f879b6aeec9 code=0x7ffc0000 [ 170.863101][T14159] loop5: detected capacity change from 0 to 8192 [ 170.871750][T14034] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 170.883199][ T12] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.892643][ T12] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.901968][T14034] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2867: mark_inode_dirty error [ 170.913870][ T12] $Hÿ (unregistering): Released all slaves [ 170.923752][ T12] bond1 (unregistering): Released all slaves [ 170.942989][ T12] bond2 (unregistering): Released all slaves [ 170.974665][T14015] chnl_net:caif_netlink_parms(): no params data found [ 170.981745][T14034] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 171.000320][T14034] EXT4-fs (loop0): 1 orphan inode deleted [ 171.019333][T14034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.039324][ T3868] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:57: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.064385][ T12] tipc: Disabling bearer [ 171.069414][ T12] tipc: Disabling bearer [ 171.074706][ T12] tipc: Disabling bearer [ 171.079689][ T12] tipc: Left network mode [ 171.117533][T14015] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.124971][T14015] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.135076][ T3868] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:57: Failed to release dquot type 0 [ 171.142812][T14015] bridge_slave_0: entered allmulticast mode [ 171.152779][T14215] loop2: detected capacity change from 0 to 512 [ 171.164138][T14015] bridge_slave_0: entered promiscuous mode [ 171.171565][T14034] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.185174][T14215] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.186850][T14015] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.202354][T14015] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.217232][T14034] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.2867: Invalid inode table block 1 in block_group 0 [ 171.236425][T14215] EXT4-fs (loop2): 1 truncate cleaned up [ 171.251954][T14215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.253401][T14015] bridge_slave_1: entered allmulticast mode [ 171.274613][T14034] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 171.284781][T14015] bridge_slave_1: entered promiscuous mode [ 171.313611][ T12] hsr_slave_0: left promiscuous mode [ 171.323149][ T12] hsr_slave_1: left promiscuous mode [ 171.325562][T14034] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz.0.2867: mark_inode_dirty error [ 171.345393][T10508] Process accounting resumed [ 171.368430][T14215] EXT4-fs error (device loop2): __ext4_remount:6740: comm syz.2.2871: Abort forced by user [ 171.394564][ T12] team0 (unregistering): Port device team_slave_1 removed [ 171.402088][T14215] EXT4-fs (loop2): Remounting filesystem read-only [ 171.408753][T14215] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 171.426667][ T12] team0 (unregistering): Port device team_slave_0 removed [ 171.471333][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.548045][T14232] FAULT_INJECTION: forcing a failure. [ 171.548045][T14232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.561263][T14232] CPU: 1 UID: 0 PID: 14232 Comm: syz.2.2875 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.561363][T14232] Tainted: [W]=WARN [ 171.561371][T14232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.561386][T14232] Call Trace: [ 171.561394][T14232] [ 171.561404][T14232] __dump_stack+0x1d/0x30 [ 171.561430][T14232] dump_stack_lvl+0xe8/0x140 [ 171.561455][T14232] dump_stack+0x15/0x1b [ 171.561476][T14232] should_fail_ex+0x265/0x280 [ 171.561506][T14232] should_fail+0xb/0x20 [ 171.561526][T14232] should_fail_usercopy+0x1a/0x20 [ 171.561557][T14232] _copy_to_user+0x20/0xa0 [ 171.561631][T14232] simple_read_from_buffer+0xb5/0x130 [ 171.561660][T14232] proc_fail_nth_read+0x10e/0x150 [ 171.561688][T14232] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.561713][T14232] vfs_read+0x1a8/0x770 [ 171.561850][T14232] ? __rcu_read_unlock+0x4f/0x70 [ 171.561884][T14232] ? __fget_files+0x184/0x1c0 [ 171.561920][T14232] ksys_read+0xda/0x1a0 [ 171.562009][T14232] __x64_sys_read+0x40/0x50 [ 171.562031][T14232] x64_sys_call+0x27bc/0x2ff0 [ 171.562172][T14232] do_syscall_64+0xd2/0x200 [ 171.562206][T14232] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.562230][T14232] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.562338][T14232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.562366][T14232] RIP: 0033:0x7f134738d8dc [ 171.562386][T14232] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 171.562407][T14232] RSP: 002b:00007f1345df7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.562431][T14232] RAX: ffffffffffffffda RBX: 00007f13475e5fa0 RCX: 00007f134738d8dc [ 171.562447][T14232] RDX: 000000000000000f RSI: 00007f1345df70a0 RDI: 0000000000000007 [ 171.562528][T14232] RBP: 00007f1345df7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.562539][T14232] R10: 000000000404c484 R11: 0000000000000246 R12: 0000000000000001 [ 171.562551][T14232] R13: 00007f13475e6038 R14: 00007f13475e5fa0 R15: 00007ffe317de568 [ 171.562573][T14232] [ 171.783911][T14015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.794729][T14015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.905626][T14015] team0: Port device team_slave_0 added [ 171.915161][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2877'. [ 171.925330][T14015] team0: Port device team_slave_1 added [ 172.005589][T14015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.012592][T14015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.038659][T14015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.064909][T14015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.072124][T14015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.098345][T14015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.167381][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2881'. [ 172.172741][T14329] loop2: detected capacity change from 0 to 1024 [ 172.176438][T14323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2881'. [ 172.191814][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2881'. [ 172.213140][T14323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2881'. [ 172.222203][T14323] netlink: 'syz.0.2881': attribute type 6 has an invalid length. [ 172.240563][T14015] hsr_slave_0: entered promiscuous mode [ 172.255990][T14015] hsr_slave_1: entered promiscuous mode [ 172.267056][T14323] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2881'. [ 172.272514][T14015] debugfs: 'hsr0' already exists in 'hsr' [ 172.281854][T14015] Cannot create hsr debugfs directory [ 172.284397][T14367] loop2: detected capacity change from 0 to 512 [ 172.294379][ T12] IPVS: stop unused estimator thread 0... [ 172.312747][T14367] ext4: Unknown parameter 'mask' [ 172.324164][T14323] hsr_slave_0: left promiscuous mode [ 172.336522][T14323] hsr_slave_1: left promiscuous mode [ 172.369009][T14367] can0: slcan on ttyS3. [ 172.455173][T14435] loop0: detected capacity change from 0 to 1024 [ 172.504374][T14435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.568711][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.580493][T14452] loop2: detected capacity change from 0 to 256 [ 172.848756][T14015] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.859265][T14015] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.883784][T14015] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.904935][T14015] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.920227][T14496] loop3: detected capacity change from 0 to 1024 [ 172.924561][T14470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.936901][T14470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.947797][T14496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.969559][T14496] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2894: Allocating blocks 497-513 which overlap fs metadata [ 172.993853][T14496] EXT4-fs (loop3): pa ffff888106e9b5b0: logic 256, phys. 369, len 9 [ 173.001950][T14496] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 173.013284][T14496] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 173.037038][T14015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.050755][T14015] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.064744][ T3830] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.071955][ T3830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.088453][ T3830] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.095776][ T3830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.123709][T14015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.134356][T14015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.147759][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.186504][T14514] loop2: detected capacity change from 0 to 512 [ 173.203915][T14514] EXT4-fs: Ignoring removed nobh option [ 173.236820][T14514] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2897: corrupted inode contents [ 173.266145][T14514] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.2897: mark_inode_dirty error [ 173.286424][T14015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.295350][T14514] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.2897: corrupted inode contents [ 173.323612][T14514] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.2897: mark_inode_dirty error [ 173.341435][T14514] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2897: Failed to acquire dquot type 0 [ 173.354656][T14538] netlink: 'syz.5.2901': attribute type 27 has an invalid length. [ 173.365229][T14514] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2897: corrupted inode contents [ 173.385786][T14514] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.2897: mark_inode_dirty error [ 173.397400][T14514] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2897: corrupted inode contents [ 173.413064][T14514] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.2897: mark_inode_dirty error [ 173.434963][T14514] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2897: corrupted inode contents [ 173.438465][T14544] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2902'. [ 173.450149][T14015] veth0_vlan: entered promiscuous mode [ 173.459468][T14514] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 173.464978][T14015] veth1_vlan: entered promiscuous mode [ 173.475713][T14514] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.2897: corrupted inode contents [ 173.495236][T14015] veth0_macvtap: entered promiscuous mode [ 173.501115][T14514] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.2897: mark_inode_dirty error [ 173.515370][T14015] veth1_macvtap: entered promiscuous mode [ 173.524789][T14514] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 173.534512][T14015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.547291][T14015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.556785][T14514] EXT4-fs (loop2): 1 truncate cleaned up [ 173.563408][T14514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.577231][ T3839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.584960][T14514] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.599337][ T3839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.608737][ T3839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.629381][ T3839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.653649][T14553] loop5: detected capacity change from 0 to 1024 [ 173.660836][T14553] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 173.673527][T14553] EXT4-fs error (device loop5): ext4_quota_enable:7124: comm syz.5.2904: Bad quota inum: 524288, type: 1 [ 173.673915][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.695929][T14553] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=524288). Please run e2fsck to fix. [ 173.721814][T14560] random: crng reseeded on system resumption [ 173.722560][T14553] EXT4-fs (loop5): mount failed [ 173.804119][T14553] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2904'. [ 173.900367][T14583] lo speed is unknown, defaulting to 1000 [ 173.917367][T14592] netlink: 'syz.5.2911': attribute type 27 has an invalid length. [ 173.968060][T14598] loop5: detected capacity change from 0 to 1024 [ 173.987391][T14598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.011861][T14598] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2913: Allocating blocks 385-513 which overlap fs metadata [ 174.091447][T14627] EXT4-fs (loop5): pa ffff888106e75a80: logic 16, phys. 129, len 24 [ 174.099574][T14627] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 174.195773][ T6717] bond0: (slave syz_tun): Releasing backup interface [ 174.228686][T14638] IPVS: stopping master sync thread 14640 ... [ 174.235160][T14640] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 174.262579][ T5483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.341174][T14632] lo speed is unknown, defaulting to 1000 [ 174.347863][T14657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2920'. [ 174.400442][T14662] netlink: 'syz.1.2923': attribute type 27 has an invalid length. [ 174.424857][T14662] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.432116][T14662] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.464893][T14662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.474928][T14662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.512434][ T3830] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.525412][ T3830] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.549954][ T3830] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.567851][ T3830] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.571372][T14685] loop1: detected capacity change from 0 to 512 [ 174.593374][T14685] EXT4-fs (loop1): orphan cleanup on readonly fs [ 174.606129][T14685] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2924: bad orphan inode 13 [ 174.618867][T14685] ext4_test_bit(bit=12, block=18) = 1 [ 174.619419][T14632] chnl_net:caif_netlink_parms(): no params data found [ 174.624304][T14685] is_bad_inode(inode)=0 [ 174.624315][T14685] NEXT_ORPHAN(inode)=2130706432 [ 174.624324][T14685] max_ino=32 [ 174.624331][T14685] i_nlink=1 [ 174.633217][T14685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.674315][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.718199][T14798] loop1: detected capacity change from 0 to 128 [ 174.725432][T14798] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.738249][T14632] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.745454][T14632] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.752799][T14632] bridge_slave_0: entered allmulticast mode [ 174.754108][T14798] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.759472][T14632] bridge_slave_0: entered promiscuous mode [ 174.777329][T14632] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.784467][T14632] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.791715][T14632] bridge_slave_1: entered allmulticast mode [ 174.798394][T14632] bridge_slave_1: entered promiscuous mode [ 174.806695][T14798] pimreg: entered allmulticast mode [ 174.820926][T14798] pimreg: left allmulticast mode [ 174.836786][T14632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.850127][T14632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.871133][T14864] __nla_validate_parse: 2 callbacks suppressed [ 174.871207][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2927'. [ 174.888589][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2927'. [ 174.921046][T14884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2929'. [ 174.955168][ T12] bond1 (unregistering): (slave macvlan0): Removing an active aggregator [ 174.976363][ T12] bond1 (unregistering): (slave macvlan0): Releasing backup interface [ 174.992946][T14891] loop2: detected capacity change from 0 to 1024 [ 175.004223][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.018350][T14891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.035335][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.044282][T14895] loop1: detected capacity change from 0 to 8192 [ 175.057057][ T12] bond0 (unregistering): Released all slaves [ 175.065969][T14891] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2930: Allocating blocks 497-513 which overlap fs metadata [ 175.068973][ T12] bond1 (unregistering): Released all slaves [ 175.088608][ T12] bond2 (unregistering): Released all slaves [ 175.096794][T14904] netlink: 'syz.0.2933': attribute type 27 has an invalid length. [ 175.106564][T14891] EXT4-fs (loop2): pa ffff888106e75a80: logic 256, phys. 369, len 9 [ 175.114715][T14891] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 175.125971][T14891] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 175.143693][T14632] team0: Port device team_slave_0 added [ 175.145403][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2931'. [ 175.150609][T14632] team0: Port device team_slave_1 added [ 175.158344][T14915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2931'. [ 175.206051][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.229295][T14935] loop2: detected capacity change from 0 to 512 [ 175.236171][T14935] ext2: Unknown parameter 'smackfsroot' [ 175.254057][T14904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.274905][T14904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.320255][T14904] wireguard0: left promiscuous mode [ 175.325752][T14904] wireguard0: left allmulticast mode [ 175.351855][T14632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.358916][T14632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.384923][T14632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.398246][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 175.398263][ T29] audit: type=1400 audit(1758908506.720:9483): avc: denied { bind } for pid=14942 comm="syz.2.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.424806][T14943] usb usb8: usbfs: process 14943 (syz.2.2935) did not claim interface 0 before use [ 175.434399][ T12] tipc: Disabling bearer [ 175.439403][ T12] tipc: Left network mode [ 175.444027][ T29] audit: type=1400 audit(1758908506.750:9484): avc: denied { mount } for pid=14959 comm="syz.5.2936" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 175.466517][ T29] audit: type=1400 audit(1758908506.750:9485): avc: denied { mounton } for pid=14959 comm="syz.5.2936" path="/383/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 175.494862][T14962] loop5: detected capacity change from 0 to 1024 [ 175.505215][T14962] EXT4-fs: inline encryption not supported [ 175.511474][T14962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.519243][T14962] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.533444][T14962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.556646][ T3833] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.571639][T14632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.578781][T14632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.604766][T14632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.618545][ T3833] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.633484][ T3833] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.652909][T14979] loop0: detected capacity change from 0 to 512 [ 175.660223][ T12] hsr_slave_0: left promiscuous mode [ 175.678624][ T12] hsr_slave_1: left promiscuous mode [ 175.687528][ T29] audit: type=1400 audit(1758908507.000:9486): avc: denied { unmount } for pid=5483 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 175.707618][T14979] EXT4-fs warning (device loop0): ext4_multi_mount_protect:318: fsck is running on the filesystem [ 175.712243][T14988] loop1: detected capacity change from 0 to 128 [ 175.718279][T14979] EXT4-fs warning (device loop0): ext4_multi_mount_protect:318: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 175.726270][ T29] audit: type=1400 audit(1758908507.020:9487): avc: denied { unmount } for pid=5483 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 175.745047][T14988] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 175.772696][ T5483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.791631][T14999] sd 0:0:1:0: device reset [ 175.803180][ T29] audit: type=1400 audit(1758908507.090:9488): avc: denied { setopt } for pid=14987 comm="syz.1.2941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 175.833179][ T29] audit: type=1400 audit(1758908507.110:9489): avc: denied { connect } for pid=14986 comm="syz.2.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 175.854462][ T29] audit: type=1400 audit(1758908507.120:9490): avc: denied { create } for pid=14986 comm="syz.2.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 175.878669][ T12] team0 (unregistering): Port device team_slave_1 removed [ 175.889130][ T12] team0 (unregistering): Port device team_slave_0 removed [ 175.904415][T15007] netlink: 'syz.2.2946': attribute type 27 has an invalid length. [ 175.914584][ T29] audit: type=1400 audit(1758908507.230:9491): avc: denied { append } for pid=14998 comm="syz.5.2943" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 175.939833][ T3833] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.960249][T14999] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2943'. [ 175.969443][T14999] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2943'. [ 175.979888][T15004] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2943'. [ 175.988932][T15004] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2943'. [ 176.021925][T14632] hsr_slave_0: entered promiscuous mode [ 176.030033][T14632] hsr_slave_1: entered promiscuous mode [ 176.037067][ T29] audit: type=1400 audit(1758908507.350:9492): avc: denied { ioctl } for pid=15036 comm="syz.1.2947" path="socket:[35111]" dev="sockfs" ino=35111 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.037781][T14632] debugfs: 'hsr0' already exists in 'hsr' [ 176.067864][T14632] Cannot create hsr debugfs directory [ 176.115016][T15044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15044 comm=syz.0.2948 [ 176.274437][T15089] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 176.789946][T15128] loop1: detected capacity change from 0 to 1024 [ 176.846706][T15148] loop1: detected capacity change from 0 to 512 [ 176.853834][T15148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.854582][T15154] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=15154 comm=syz.0.2960 [ 176.871037][T15148] EXT4-fs (loop1): 1 truncate cleaned up [ 176.882702][T15148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.920078][T14632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 176.940353][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.951311][T14632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 176.961574][T14632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 176.981807][T14632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 176.994738][T15181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15181 comm=syz.1.2963 [ 177.041524][T15197] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 177.055245][T14632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.075359][T14632] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.081669][T15200] loop2: detected capacity change from 0 to 512 [ 177.089979][T15200] EXT4-fs: Ignoring removed bh option [ 177.097388][T15200] EXT4-fs: old and new quota format mixing [ 177.105760][ T3866] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.112852][ T3866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.136280][ T3866] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.143414][ T3866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.166991][T15210] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=15210 comm=syz.0.2970 [ 177.263267][T15221] loop0: detected capacity change from 0 to 512 [ 177.281035][T15221] journal_path: Non-blockdev passed as './bus' [ 177.287394][T15221] EXT4-fs: error: could not find journal device path [ 177.308849][T15231] loop1: detected capacity change from 0 to 128 [ 177.328295][T15223] loop2: detected capacity change from 0 to 2048 [ 177.344149][T15231] FAT-fs (loop1): Directory bread(block 162) failed [ 177.352441][T15223] EXT4-fs: Ignoring removed orlov option [ 177.359271][T15231] FAT-fs (loop1): Directory bread(block 163) failed [ 177.372835][T15231] FAT-fs (loop1): Directory bread(block 164) failed [ 177.375719][T14632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.393959][T15231] FAT-fs (loop1): Directory bread(block 165) failed [ 177.407276][T15223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.423084][T15231] FAT-fs (loop1): Directory bread(block 166) failed [ 177.429732][T15231] FAT-fs (loop1): Directory bread(block 167) failed [ 177.455534][T15231] FAT-fs (loop1): Directory bread(block 168) failed [ 177.455564][T15231] FAT-fs (loop1): Directory bread(block 169) failed [ 177.625579][T14632] veth0_vlan: entered promiscuous mode [ 177.636793][T14632] veth1_vlan: entered promiscuous mode [ 177.657245][T14632] veth0_macvtap: entered promiscuous mode [ 177.666439][T14632] veth1_macvtap: entered promiscuous mode [ 177.676954][T15275] loop1: detected capacity change from 0 to 1024 [ 177.678221][T14632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.694086][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.699376][T14632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.706086][T15273] loop5: detected capacity change from 0 to 8192 [ 177.718727][ T3851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.729484][ T3851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.745564][ T3851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.763066][T15273] loop5: p1 p2 p3 p4 [ 177.763796][ T3851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.768508][T15275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.791317][T15273] loop5: p3 start 331777 is beyond EOD, truncated [ 177.797883][T15273] loop5: p4 size 262144 extends beyond EOD, truncated [ 177.807717][T15289] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=15289 comm=syz.2.2982 [ 177.826913][T15290] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.835929][T15290] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.860481][T15290] bridge0: entered allmulticast mode [ 178.048867][T15299] loop3: detected capacity change from 0 to 1024 [ 178.066120][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.076280][T15299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.117789][T15299] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 178.154588][T15309] wireguard0: entered promiscuous mode [ 178.160112][T15309] wireguard0: entered allmulticast mode [ 178.202410][T14632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.251988][T15326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 178.306677][T15336] netlink: 'syz.3.2991': attribute type 7 has an invalid length. [ 178.320049][T15330] wireguard1: entered promiscuous mode [ 178.325772][T15330] wireguard1: entered allmulticast mode [ 178.345295][T15336] FAULT_INJECTION: forcing a failure. [ 178.345295][T15336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.358528][T15336] CPU: 0 UID: 0 PID: 15336 Comm: syz.3.2991 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.358569][T15336] Tainted: [W]=WARN [ 178.358578][T15336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.358593][T15336] Call Trace: [ 178.358602][T15336] [ 178.358626][T15336] __dump_stack+0x1d/0x30 [ 178.358661][T15336] dump_stack_lvl+0xe8/0x140 [ 178.358679][T15336] dump_stack+0x15/0x1b [ 178.358723][T15336] should_fail_ex+0x265/0x280 [ 178.358754][T15336] should_fail+0xb/0x20 [ 178.358780][T15336] should_fail_usercopy+0x1a/0x20 [ 178.358805][T15336] _copy_to_user+0x20/0xa0 [ 178.358849][T15336] simple_read_from_buffer+0xb5/0x130 [ 178.358879][T15336] proc_fail_nth_read+0x10e/0x150 [ 178.358915][T15336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.358963][T15336] vfs_read+0x1a8/0x770 [ 178.359037][T15336] ? __rcu_read_unlock+0x4f/0x70 [ 178.359067][T15336] ? __fget_files+0x184/0x1c0 [ 178.359102][T15336] ksys_read+0xda/0x1a0 [ 178.359132][T15336] __x64_sys_read+0x40/0x50 [ 178.359209][T15336] x64_sys_call+0x27bc/0x2ff0 [ 178.359235][T15336] do_syscall_64+0xd2/0x200 [ 178.359266][T15336] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 178.359289][T15336] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 178.359339][T15336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.359360][T15336] RIP: 0033:0x7fce40afd8dc [ 178.359376][T15336] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.359393][T15336] RSP: 002b:00007fce3f55f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.359412][T15336] RAX: ffffffffffffffda RBX: 00007fce40d55fa0 RCX: 00007fce40afd8dc [ 178.359484][T15336] RDX: 000000000000000f RSI: 00007fce3f55f0a0 RDI: 0000000000000004 [ 178.359508][T15336] RBP: 00007fce3f55f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.359524][T15336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.359539][T15336] R13: 00007fce40d56038 R14: 00007fce40d55fa0 R15: 00007ffcbe87ec68 [ 178.359564][T15336] [ 178.394397][T15345] chnl_net:caif_netlink_parms(): no params data found [ 178.427002][T15347] loop3: detected capacity change from 0 to 1024 [ 178.495616][T15347] EXT4-fs: Ignoring removed nobh option [ 178.600438][T15347] EXT4-fs: inline encryption not supported [ 178.614435][T15347] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 178.635680][T15348] loop1: detected capacity change from 0 to 1024 [ 178.635929][T15348] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 178.860999][T15393] loop5: detected capacity change from 0 to 512 [ 178.875170][T15391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.928530][T15393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.948035][T15393] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.022739][ T5483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.104518][T15413] netlink: 'syz.3.3006': attribute type 27 has an invalid length. [ 179.157956][T15413] bridge0: left allmulticast mode [ 179.165815][T15415] loop5: detected capacity change from 0 to 128 [ 179.184182][T15415] FAT-fs (loop5): Directory bread(block 162) failed [ 179.192445][T15415] FAT-fs (loop5): Directory bread(block 163) failed [ 179.199329][T15415] FAT-fs (loop5): Directory bread(block 164) failed [ 179.206503][T15415] FAT-fs (loop5): Directory bread(block 165) failed [ 179.214815][T15415] FAT-fs (loop5): Directory bread(block 166) failed [ 179.221520][T15415] FAT-fs (loop5): Directory bread(block 167) failed [ 179.228514][T15415] FAT-fs (loop5): Directory bread(block 168) failed [ 179.236719][T15415] FAT-fs (loop5): Directory bread(block 169) failed [ 179.257041][T15415] FAT-fs (loop5): Directory bread(block 162) failed [ 179.271253][T15413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.278878][T15415] FAT-fs (loop5): Directory bread(block 163) failed [ 179.286584][T15415] syz.5.3007: attempt to access beyond end of device [ 179.286584][T15415] loop5: rw=3, sector=226, nr_sectors = 6 limit=128 [ 179.303033][T15413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.316200][T15415] syz.5.3007: attempt to access beyond end of device [ 179.316200][T15415] loop5: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 179.377342][T15425] loop5: detected capacity change from 0 to 1024 [ 179.383271][ T3851] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.393598][ T3851] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.396364][T15425] EXT4-fs: Ignoring removed nobh option [ 179.409463][ T3851] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.428840][ T3851] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.430357][T15428] loop2: detected capacity change from 0 to 512 [ 179.444965][T15428] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.457377][T15425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.466730][T15428] EXT4-fs (loop2): 1 truncate cleaned up [ 179.477027][T15428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.484731][T15437] netlink: 'syz.3.3010': attribute type 4 has an invalid length. [ 179.498496][T15425] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 179.524506][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.568137][T15443] bridge0: entered allmulticast mode [ 179.609857][T15450] netlink: 'syz.0.3013': attribute type 29 has an invalid length. [ 179.623077][T15452] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 179.668667][T15458] loop0: detected capacity change from 0 to 1024 [ 179.669373][T15458] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 179.669397][T15458] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 179.670516][T15458] JBD2: no valid journal superblock found [ 179.702690][T15458] EXT4-fs (loop0): Could not load journal inode [ 179.723428][T15458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=15458 comm=syz.0.3015 [ 179.834324][T15475] loop0: detected capacity change from 0 to 1024 [ 179.854487][T15475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.879995][T15475] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 179.953596][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.994708][T15487] loop1: detected capacity change from 0 to 128 [ 180.004923][T15487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 180.004957][T15487] System zones: 1-3, 19-19, 35-36 [ 180.005465][T15487] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 180.013803][T15487] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.015301][T15487] FAULT_INJECTION: forcing a failure. [ 180.015301][T15487] name failslab, interval 1, probability 0, space 0, times 0 [ 180.015350][T15487] CPU: 0 UID: 0 PID: 15487 Comm: syz.1.3022 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.015412][T15487] Tainted: [W]=WARN [ 180.015420][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.015433][T15487] Call Trace: [ 180.015440][T15487] [ 180.015449][T15487] __dump_stack+0x1d/0x30 [ 180.015473][T15487] dump_stack_lvl+0xe8/0x140 [ 180.015494][T15487] dump_stack+0x15/0x1b [ 180.015514][T15487] should_fail_ex+0x265/0x280 [ 180.015588][T15487] should_failslab+0x8c/0xb0 [ 180.015619][T15487] kmem_cache_alloc_noprof+0x50/0x310 [ 180.015654][T15487] ? __es_insert_extent+0x508/0xee0 [ 180.015759][T15487] __es_insert_extent+0x508/0xee0 [ 180.015793][T15487] ext4_es_insert_extent+0x435/0x1c10 [ 180.015935][T15487] ? ext4_ext_map_blocks+0x26eb/0x38a0 [ 180.015974][T15487] ext4_map_blocks+0x8cd/0xd00 [ 180.016018][T15487] ext4_iomap_begin+0x88d/0xe00 [ 180.016094][T15487] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 180.016123][T15487] iomap_iter+0x332/0x730 [ 180.016189][T15487] ? should_failslab+0x8c/0xb0 [ 180.016223][T15487] __iomap_dio_rw+0x708/0x1250 [ 180.016271][T15487] iomap_dio_rw+0x40/0x90 [ 180.016294][T15487] ext4_file_write_iter+0xad9/0xf00 [ 180.016386][T15487] iter_file_splice_write+0x663/0xa60 [ 180.016417][T15487] ? __pfx_iter_file_splice_write+0x10/0x10 [ 180.016469][T15487] direct_splice_actor+0x153/0x2a0 [ 180.016488][T15487] ? ext4_release_file+0x101/0x1c0 [ 180.016696][T15487] splice_direct_to_actor+0x30f/0x680 [ 180.016720][T15487] ? __pfx_direct_splice_actor+0x10/0x10 [ 180.016747][T15487] do_splice_direct+0xda/0x150 [ 180.016770][T15487] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 180.016798][T15487] do_sendfile+0x380/0x650 [ 180.016879][T15487] __x64_sys_sendfile64+0x105/0x150 [ 180.016923][T15487] x64_sys_call+0x2bb0/0x2ff0 [ 180.017020][T15487] do_syscall_64+0xd2/0x200 [ 180.017053][T15487] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 180.017137][T15487] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 180.017167][T15487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.017190][T15487] RIP: 0033:0x7f491a3aeec9 [ 180.017207][T15487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.017297][T15487] RSP: 002b:00007f4918e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 180.017326][T15487] RAX: ffffffffffffffda RBX: 00007f491a605fa0 RCX: 00007f491a3aeec9 [ 180.017340][T15487] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000b [ 180.017360][T15487] RBP: 00007f4918e17090 R08: 0000000000000000 R09: 0000000000000000 [ 180.017375][T15487] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000002 [ 180.017390][T15487] R13: 00007f491a606038 R14: 00007f491a605fa0 R15: 00007ffd9f4309e8 [ 180.017464][T15487] [ 180.139136][T14015] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.220602][T15506] loop2: detected capacity change from 0 to 512 [ 180.237322][T15497] loop0: detected capacity change from 0 to 512 [ 180.272376][T15506] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 180.324863][T15497] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 180.414212][T15497] EXT4-fs (loop0): 1 truncate cleaned up [ 180.420458][T15497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.421221][ T5483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.448145][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 180.448164][ T29] audit: type=1400 audit(1758908511.761:9658): avc: denied { map } for pid=15511 comm="syz.1.3025" path="socket:[36875]" dev="sockfs" ino=36875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 180.484109][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.591891][T15542] loop2: detected capacity change from 0 to 1024 [ 180.603605][T15547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=40 sclass=netlink_audit_socket pid=15547 comm=syz.0.3034 [ 180.620467][T15542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.646141][T15542] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 180.713441][T15556] bridge0: entered allmulticast mode [ 180.714496][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.729159][T15558] __nla_validate_parse: 8 callbacks suppressed [ 180.729179][T15558] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3038'. [ 180.794882][T15556] bridge_slave_1: left allmulticast mode [ 180.801630][T15556] bridge_slave_1: left promiscuous mode [ 180.819836][T15556] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.837140][T15556] bridge_slave_0: left allmulticast mode [ 180.843387][T15556] bridge_slave_0: left promiscuous mode [ 180.851426][T15556] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.862953][ T29] audit: type=1326 audit(1758908512.171:9659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 180.886546][ T29] audit: type=1326 audit(1758908512.171:9660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 180.888362][T15590] loop2: detected capacity change from 0 to 512 [ 180.910131][ T29] audit: type=1326 audit(1758908512.171:9661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 180.917385][T15590] EXT4-fs: Ignoring removed oldalloc option [ 180.940044][ T29] audit: type=1326 audit(1758908512.171:9662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 180.946001][T15590] EXT4-fs: inline encryption not supported [ 180.946034][T15590] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.969530][ T29] audit: type=1326 audit(1758908512.171:9663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 181.005314][ T29] audit: type=1326 audit(1758908512.171:9664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 181.028826][ T29] audit: type=1326 audit(1758908512.171:9665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 181.054482][ T29] audit: type=1326 audit(1758908512.171:9666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 181.078116][ T29] audit: type=1326 audit(1758908512.181:9667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15577 comm="syz.2.3041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134738eec9 code=0x7ffc0000 [ 181.121243][T15590] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.155333][T15590] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3041: bg 0: block 64: padding at end of block bitmap is not set [ 181.184490][T15590] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3041: Failed to acquire dquot type 0 [ 181.205290][T15590] EXT4-fs (loop2): 1 truncate cleaned up [ 181.219475][T15590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.245221][T15591] syzkaller0: entered promiscuous mode [ 181.250825][T15591] syzkaller0: entered allmulticast mode [ 181.272209][T15614] FAULT_INJECTION: forcing a failure. [ 181.272209][T15614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.285433][T15614] CPU: 0 UID: 0 PID: 15614 Comm: syz.5.3048 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.285545][T15614] Tainted: [W]=WARN [ 181.285554][T15614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.285624][T15614] Call Trace: [ 181.285632][T15614] [ 181.285641][T15614] __dump_stack+0x1d/0x30 [ 181.285667][T15614] dump_stack_lvl+0xe8/0x140 [ 181.285712][T15614] dump_stack+0x15/0x1b [ 181.285732][T15614] should_fail_ex+0x265/0x280 [ 181.285797][T15614] should_fail+0xb/0x20 [ 181.285871][T15614] should_fail_usercopy+0x1a/0x20 [ 181.285902][T15614] _copy_from_user+0x1c/0xb0 [ 181.285942][T15614] do_ipv6_setsockopt+0x124/0x2160 [ 181.285971][T15614] ? kstrtoull+0x111/0x140 [ 181.286017][T15614] ? avc_has_perm_noaudit+0x1b1/0x200 [ 181.286047][T15614] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 181.286102][T15614] ipv6_setsockopt+0x59/0x130 [ 181.286126][T15614] udpv6_setsockopt+0x99/0xb0 [ 181.286161][T15614] sock_common_setsockopt+0x66/0x80 [ 181.286194][T15614] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 181.286254][T15614] __sys_setsockopt+0x184/0x200 [ 181.286283][T15614] __x64_sys_setsockopt+0x64/0x80 [ 181.286312][T15614] x64_sys_call+0x20ec/0x2ff0 [ 181.286338][T15614] do_syscall_64+0xd2/0x200 [ 181.286432][T15614] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 181.286463][T15614] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 181.286498][T15614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.286547][T15614] RIP: 0033:0x7f879b6aeec9 [ 181.286566][T15614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.286587][T15614] RSP: 002b:00007f879a0f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.286611][T15614] RAX: ffffffffffffffda RBX: 00007f879b906090 RCX: 00007f879b6aeec9 [ 181.286627][T15614] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000006 [ 181.286643][T15614] RBP: 00007f879a0f6090 R08: 0000000000000014 R09: 0000000000000000 [ 181.286658][T15614] R10: 0000200000004c40 R11: 0000000000000246 R12: 0000000000000001 [ 181.286693][T15614] R13: 00007f879b906128 R14: 00007f879b906090 R15: 00007ffca91c1db8 [ 181.286719][T15614] [ 181.295343][T15590] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.535780][T15597] lo speed is unknown, defaulting to 1000 [ 181.586679][T15628] loop2: detected capacity change from 0 to 2048 [ 181.708509][T15662] netlink: 'syz.5.3053': attribute type 3 has an invalid length. [ 181.725377][T15628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.740064][T15628] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.3050: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 181.758219][T15628] EXT4-fs (loop2): Remounting filesystem read-only [ 181.827552][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.864262][T15665] lo speed is unknown, defaulting to 1000 [ 182.012646][T15676] lo speed is unknown, defaulting to 1000 [ 182.320290][T15725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3059'. [ 182.386179][T15725] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 182.601617][T15737] bridge0: entered allmulticast mode [ 183.012820][ T4365] can0 (unregistered): slcan off ttyS3. [ 183.104524][T15753] lo speed is unknown, defaulting to 1000 [ 183.153914][T15792] loop0: detected capacity change from 0 to 512 [ 183.161195][T15792] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 183.179054][T15792] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3076: bg 0: block 104: invalid block bitmap [ 183.207120][T15792] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 183.234851][T15792] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3076: invalid indirect mapped block 1 (level 1) [ 183.280784][T15792] EXT4-fs (loop0): 1 truncate cleaned up [ 183.304328][T15792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.347967][ T3833]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.368390][ T3833]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.378118][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.387954][ T3833]  (unregistering): Released all slaves [ 183.410010][T15753] chnl_net:caif_netlink_parms(): no params data found [ 183.467607][T15935] loop3: detected capacity change from 0 to 128 [ 183.476534][T15935] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.488911][T15935] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 183.539886][T15944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.594360][T15753] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.601477][T15753] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.616356][T15753] bridge_slave_0: entered allmulticast mode [ 183.622883][T15753] bridge_slave_0: entered promiscuous mode [ 183.655059][T15987] loop1: detected capacity change from 0 to 2048 [ 183.682954][T15753] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.690060][T15753] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.697697][T15753] bridge_slave_1: entered allmulticast mode [ 183.704129][T15987] Alternate GPT is invalid, using primary GPT. [ 183.704532][T15753] bridge_slave_1: entered promiscuous mode [ 183.710615][T15987] loop1: p2 p3 p7 [ 183.760046][ T3833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.768928][ T3833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.847228][ T3833] team0 (unregistering): Port device hsr_slave_0 removed [ 183.866561][ T3833] team0 (unregistering): Port device 26±ÿ removed [ 183.878595][ T3833] team0 (unregistering): Port device team_slave_0 removed [ 183.955233][T15753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.984045][T15753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.018988][T16030] loop5: detected capacity change from 0 to 1024 [ 184.047391][T15753] team0: Port device team_slave_0 added [ 184.064521][T16030] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.066259][T15753] team0: Port device team_slave_1 added [ 184.114708][T15753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.121755][T15753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.147762][T15753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.168863][T15753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.175890][T15753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.201862][T15753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.261806][T15753] hsr_slave_0: entered promiscuous mode [ 184.270325][T15753] hsr_slave_1: entered promiscuous mode [ 184.294381][T15753] debugfs: 'hsr0' already exists in 'hsr' [ 184.300158][T15753] Cannot create hsr debugfs directory [ 184.307762][ T3833] IPVS: stop unused estimator thread 0... [ 184.314738][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3086'. [ 184.342711][ T3866] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.364966][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3086'. [ 184.442344][T16121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3086'. [ 184.451274][T16121] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3086'. [ 184.499347][T16193] loop0: detected capacity change from 0 to 128 [ 184.526562][T16193] syz.0.3088: attempt to access beyond end of device [ 184.526562][T16193] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 184.606584][T16193] syz.0.3088: attempt to access beyond end of device [ 184.606584][T16193] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 184.627450][T16193] syz.0.3088: attempt to access beyond end of device [ 184.627450][T16193] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 184.642244][T16193] syz.0.3088: attempt to access beyond end of device [ 184.642244][T16193] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 184.655864][T16193] syz.0.3088: attempt to access beyond end of device [ 184.655864][T16193] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 184.669452][T16193] syz.0.3088: attempt to access beyond end of device [ 184.669452][T16193] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 184.696774][T16193] syz.0.3088: attempt to access beyond end of device [ 184.696774][T16193] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 184.718860][T16237] loop3: detected capacity change from 0 to 128 [ 184.736514][T16241] loop1: detected capacity change from 0 to 128 [ 184.768712][ T3851] kworker/u8:42: attempt to access beyond end of device [ 184.768712][ T3851] loop0: rw=1, sector=161, nr_sectors = 1 limit=128 [ 184.782206][ T3851] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 184.796925][T16241] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 184.803475][T16241] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 184.811232][T16241] vhci_hcd vhci_hcd.0: Device attached [ 184.819899][T16254] random: crng reseeded on system resumption [ 184.858288][T15753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.870119][T16252] vhci_hcd: connection closed [ 184.874888][ T3866] vhci_hcd: stop threads [ 184.883969][ T3866] vhci_hcd: release socket [ 184.888391][ T3866] vhci_hcd: disconnect device [ 184.910807][T15753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.928860][T15753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.949930][T15753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.099325][T15753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.113847][T15753] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.130448][ T3866] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.137614][ T3866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.168246][ T3866] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.175484][ T3866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.249621][T16303] loop0: detected capacity change from 0 to 1024 [ 185.364809][T16320] loop1: detected capacity change from 0 to 512 [ 185.397114][T16320] EXT4-fs (loop1): orphan cleanup on readonly fs [ 185.404022][T16343] team0: entered promiscuous mode [ 185.409100][T16343] team_slave_0: entered promiscuous mode [ 185.411892][T16320] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.3105: Failed to acquire dquot type 1 [ 185.414970][T16343] team_slave_1: entered promiscuous mode [ 185.443042][T15753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.446806][T16320] EXT4-fs (loop1): 1 truncate cleaned up [ 185.472509][T16346] FAULT_INJECTION: forcing a failure. [ 185.472509][T16346] name failslab, interval 1, probability 0, space 0, times 0 [ 185.472549][T16346] CPU: 1 UID: 0 PID: 16346 Comm: syz.0.3107 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.472625][T16346] Tainted: [W]=WARN [ 185.472633][T16346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.472649][T16346] Call Trace: [ 185.472656][T16346] [ 185.472665][T16346] __dump_stack+0x1d/0x30 [ 185.472688][T16346] dump_stack_lvl+0xe8/0x140 [ 185.472709][T16346] dump_stack+0x15/0x1b [ 185.472802][T16346] should_fail_ex+0x265/0x280 [ 185.472826][T16346] should_failslab+0x8c/0xb0 [ 185.472855][T16346] __kmalloc_noprof+0xa5/0x3e0 [ 185.472918][T16346] ? vc_do_resize+0x20e/0xd70 [ 185.472949][T16346] ? vfree+0x295/0x3a0 [ 185.473024][T16346] vc_do_resize+0x20e/0xd70 [ 185.473130][T16346] ? __schedule+0x6b9/0xb30 [ 185.473155][T16346] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 185.473179][T16346] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 185.473203][T16346] ? vgacon_set_cursor_size+0x2b3/0x310 [ 185.473239][T16346] __vc_resize+0x3c/0x50 [ 185.473287][T16346] vgacon_adjust_height+0x3cb/0x450 [ 185.473359][T16346] vgacon_font_set+0x191/0x1b0 [ 185.473388][T16346] ? __pfx_vgacon_font_set+0x10/0x10 [ 185.473453][T16346] con_font_op+0x8b9/0x930 [ 185.473478][T16346] ? selinux_capable+0x31/0x40 [ 185.473509][T16346] vt_ioctl+0x153c/0x1880 [ 185.473606][T16346] tty_ioctl+0x7de/0xb80 [ 185.473624][T16346] ? __pfx_tty_ioctl+0x10/0x10 [ 185.473647][T16346] __se_sys_ioctl+0xcb/0x140 [ 185.473672][T16346] __x64_sys_ioctl+0x43/0x50 [ 185.473759][T16346] x64_sys_call+0x1816/0x2ff0 [ 185.473779][T16346] do_syscall_64+0xd2/0x200 [ 185.473816][T16346] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.473849][T16346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.473957][T16346] RIP: 0033:0x7f37806beec9 [ 185.473977][T16346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.474016][T16346] RSP: 002b:00007f377f11f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.474035][T16346] RAX: ffffffffffffffda RBX: 00007f3780915fa0 RCX: 00007f37806beec9 [ 185.474093][T16346] RDX: 0000200000000040 RSI: 0000000000004b72 RDI: 0000000000000005 [ 185.474108][T16346] RBP: 00007f377f11f090 R08: 0000000000000000 R09: 0000000000000000 [ 185.474201][T16346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.474213][T16346] R13: 00007f3780916038 R14: 00007f3780915fa0 R15: 00007ffd71cbae18 [ 185.474231][T16346] [ 185.517828][T16348] openvswitch: netlink: Message has 6 unknown bytes. [ 185.518962][T16348] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3108'. [ 185.599670][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 185.599688][ T29] audit: type=1400 audit(1758908516.911:10006): avc: denied { watch watch_reads } for pid=16356 comm="syz.5.3110" path="/418/file0" dev="tmpfs" ino=2245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 185.679643][T15753] veth0_vlan: entered promiscuous mode [ 185.953666][T15753] veth1_vlan: entered promiscuous mode [ 185.987383][T15753] veth0_macvtap: entered promiscuous mode [ 186.003871][T15753] veth1_macvtap: entered promiscuous mode [ 186.025479][T15753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.043299][T15753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.055789][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.079235][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.119507][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.134691][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.192378][T16377] loop5: detected capacity change from 0 to 1024 [ 186.236787][T16392] bridge_slave_1: left allmulticast mode [ 186.242595][T16392] bridge_slave_1: left promiscuous mode [ 186.248400][T16392] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.263561][T16392] bridge_slave_0: left allmulticast mode [ 186.269265][T16392] bridge_slave_0: left promiscuous mode [ 186.275187][T16392] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.291944][T16377] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 186.294871][T16395] netlink: 'syz.0.3119': attribute type 8 has an invalid length. [ 186.353177][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3119'. [ 186.363947][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3120'. [ 186.367957][T16402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=16402 comm=syz.0.3119 [ 186.407759][ T29] audit: type=1400 audit(1758908517.721:10007): avc: denied { kexec_image_load } for pid=16403 comm="syz.0.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 186.484737][T16404] loop0: detected capacity change from 0 to 512 [ 186.502025][T16408] netlink: 'syz.3.3123': attribute type 10 has an invalid length. [ 186.510299][T16410] loop5: detected capacity change from 0 to 512 [ 186.511699][T16408] team0: Port device dummy0 added [ 186.523134][T16404] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.523517][T16408] netlink: 'syz.3.3123': attribute type 10 has an invalid length. [ 186.543867][T16408] team0: Port device dummy0 removed [ 186.546093][T16410] ext4 filesystem being mounted at /423/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.551030][T16408] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 186.567037][T16404] FAULT_INJECTION: forcing a failure. [ 186.567037][T16404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.581411][T16404] CPU: 1 UID: 0 PID: 16404 Comm: syz.0.3121 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 186.581444][T16404] Tainted: [W]=WARN [ 186.581451][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.581485][T16404] Call Trace: [ 186.581498][T16404] [ 186.581506][T16404] __dump_stack+0x1d/0x30 [ 186.581528][T16404] dump_stack_lvl+0xe8/0x140 [ 186.581548][T16404] dump_stack+0x15/0x1b [ 186.581640][T16404] should_fail_ex+0x265/0x280 [ 186.581665][T16404] should_fail+0xb/0x20 [ 186.581704][T16404] should_fail_usercopy+0x1a/0x20 [ 186.581785][T16404] _copy_from_user+0x1c/0xb0 [ 186.581895][T16404] ext4_ioctl+0x5ac/0x2080 [ 186.581922][T16404] ? file_ioctl+0x146/0x530 [ 186.581940][T16404] ? ioctl_has_perm+0x257/0x2a0 [ 186.581965][T16404] ? do_vfs_ioctl+0x7ca/0xe10 [ 186.582020][T16404] ? selinux_file_ioctl+0x308/0x3a0 [ 186.582042][T16404] ? __fget_files+0x184/0x1c0 [ 186.582066][T16404] ? rcu_read_unlock_trace_special+0x195/0x210 [ 186.582133][T16404] ? __pfx_ext4_ioctl+0x10/0x10 [ 186.582156][T16404] __se_sys_ioctl+0xcb/0x140 [ 186.582239][T16404] __x64_sys_ioctl+0x43/0x50 [ 186.582257][T16404] x64_sys_call+0x1816/0x2ff0 [ 186.582278][T16404] do_syscall_64+0xd2/0x200 [ 186.582374][T16404] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 186.582398][T16404] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 186.582427][T16404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.582466][T16404] RIP: 0033:0x7f37806beec9 [ 186.582482][T16404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.582509][T16404] RSP: 002b:00007f377f11f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.582528][T16404] RAX: ffffffffffffffda RBX: 00007f3780915fa0 RCX: 00007f37806beec9 [ 186.582541][T16404] RDX: 0000200000000040 RSI: 00000000c028660f RDI: 0000000000000008 [ 186.582593][T16404] RBP: 00007f377f11f090 R08: 0000000000000000 R09: 0000000000000000 [ 186.582606][T16404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.582618][T16404] R13: 00007f3780916038 R14: 00007f3780915fa0 R15: 00007ffd71cbae18 [ 186.582639][T16404] [ 186.798761][ T29] audit: type=1400 audit(1758908517.891:10008): avc: denied { bind } for pid=16407 comm="syz.3.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.818387][ T29] audit: type=1400 audit(1758908517.891:10009): avc: denied { listen } for pid=16407 comm="syz.3.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.948306][T16424] loop3: detected capacity change from 0 to 1024 [ 186.955478][T16424] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.962187][T16424] EXT4-fs: dax option not supported [ 187.053932][T16426] loop3: detected capacity change from 0 to 1024 [ 187.088491][T16436] loop1: detected capacity change from 0 to 1024 [ 187.118285][ T29] audit: type=1400 audit(1758908518.431:10010): avc: denied { validate_trans } for pid=16446 comm="syz.2.3130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 187.142032][T16426] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 187.233571][T16436] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 187.271503][ T29] audit: type=1400 audit(1758908518.521:10011): avc: denied { mount } for pid=16450 comm="syz.0.3131" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 187.383652][T16474] loop2: detected capacity change from 0 to 512 [ 187.408504][T16474] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3134: corrupted in-inode xattr: invalid ea_ino [ 187.510532][T16474] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3134: couldn't read orphan inode 15 (err -117) [ 187.543514][ T29] audit: type=1400 audit(1758908518.861:10012): avc: denied { write } for pid=16465 comm="syz.2.3134" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 187.572745][T16499] loop1: detected capacity change from 0 to 512 [ 187.580129][T16499] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 187.591411][ T29] audit: type=1400 audit(1758908518.891:10013): avc: denied { setopt } for pid=16465 comm="syz.2.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.611728][ T29] audit: type=1400 audit(1758908518.891:10014): avc: denied { bind } for pid=16465 comm="syz.2.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.631758][ T29] audit: type=1400 audit(1758908518.891:10015): avc: denied { ioctl } for pid=16465 comm="syz.2.3134" path="socket:[37832]" dev="sockfs" ino=37832 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.660062][T16475] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.3134: deleted inode referenced: 15 [ 187.696130][T16499] EXT4-fs (loop1): 1 truncate cleaned up [ 187.919619][T16522] loop0: detected capacity change from 0 to 512 [ 187.966403][T16522] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 188.047356][T16537] netlink: 180 bytes leftover after parsing attributes in process `+}[@'. [ 188.160792][T16547] loop5: detected capacity change from 0 to 8192 [ 188.174197][T16547] FAULT_INJECTION: forcing a failure. [ 188.174197][T16547] name failslab, interval 1, probability 0, space 0, times 0 [ 188.187049][T16547] CPU: 0 UID: 0 PID: 16547 Comm: syz.5.3148 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 188.187087][T16547] Tainted: [W]=WARN [ 188.187095][T16547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.187110][T16547] Call Trace: [ 188.187118][T16547] [ 188.187194][T16547] __dump_stack+0x1d/0x30 [ 188.187214][T16547] dump_stack_lvl+0xe8/0x140 [ 188.187233][T16547] dump_stack+0x15/0x1b [ 188.187284][T16547] should_fail_ex+0x265/0x280 [ 188.187314][T16547] should_failslab+0x8c/0xb0 [ 188.187344][T16547] kmem_cache_alloc_noprof+0x50/0x310 [ 188.187420][T16547] ? fat_parse_long+0x5d/0x430 [ 188.187450][T16547] fat_parse_long+0x5d/0x430 [ 188.187500][T16547] fat_search_long+0x1cc/0x9c0 [ 188.187533][T16547] ? uni2char+0x64/0xa0 [ 188.187612][T16547] ? fat_bmap+0x262/0x280 [ 188.187654][T16547] ? avc_has_perm+0xf7/0x180 [ 188.187692][T16547] vfat_rename2+0x302/0x1370 [ 188.187766][T16547] ? __pfx_vfat_rename2+0x10/0x10 [ 188.187859][T16547] vfs_rename+0x7f3/0xa40 [ 188.188052][T16547] do_renameat2+0x557/0xa10 [ 188.188094][T16547] __x64_sys_renameat2+0x7e/0x90 [ 188.188184][T16547] x64_sys_call+0x3f9/0x2ff0 [ 188.188208][T16547] do_syscall_64+0xd2/0x200 [ 188.188245][T16547] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 188.188348][T16547] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 188.188440][T16547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.188466][T16547] RIP: 0033:0x7f879b6aeec9 [ 188.188483][T16547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.188524][T16547] RSP: 002b:00007f879a117038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 188.188548][T16547] RAX: ffffffffffffffda RBX: 00007f879b905fa0 RCX: 00007f879b6aeec9 [ 188.188564][T16547] RDX: 0000000000000005 RSI: 0000200000000380 RDI: 0000000000000005 [ 188.188579][T16547] RBP: 00007f879a117090 R08: 0000000000000000 R09: 0000000000000000 [ 188.188608][T16547] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 188.188619][T16547] R13: 00007f879b906038 R14: 00007f879b905fa0 R15: 00007ffca91c1db8 [ 188.188643][T16547] [ 188.217519][T16558] loop3: detected capacity change from 0 to 1024 [ 188.253320][T16554] loop2: detected capacity change from 0 to 8192 [ 188.335577][T16558] EXT4-fs: Ignoring removed orlov option [ 188.353688][T16554] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 188.358774][T16558] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.440133][T16558] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 188.583757][T16579] loop0: detected capacity change from 0 to 128 [ 188.669685][T16579] syz.0.3152: attempt to access beyond end of device [ 188.669685][T16579] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 188.760874][T10507] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 188.768492][T10507] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 188.776016][T10507] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 188.783560][T10507] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 188.791091][T10507] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 188.798499][T10507] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 188.805938][T10507] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 188.813404][T10507] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 188.820801][T10507] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 188.828252][T10507] hid-generic 0003:0004:0000.0006: unknown main item tag 0x0 [ 188.846529][T10507] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 189.150698][T16639] loop0: detected capacity change from 0 to 1024 [ 189.195030][T16639] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 189.474610][T16685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3171'. [ 189.575959][T16689] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3172'. [ 190.512608][T16694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'. [ 190.548704][T16694] bridge_slave_1: left allmulticast mode [ 190.554722][T16694] bridge_slave_1: left promiscuous mode [ 190.561436][T16694] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.574523][T16694] bridge_slave_0: left allmulticast mode [ 190.580274][T16694] bridge_slave_0: left promiscuous mode [ 190.586116][T16694] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.595018][T16697] loop5: detected capacity change from 0 to 512 [ 190.655309][T16706] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3175'. [ 190.692067][T16685] netlink: 'syz.0.3171': attribute type 14 has an invalid length. [ 190.718418][T16706] loop5: detected capacity change from 0 to 128 [ 190.831329][T16721] 9pnet_fd: Insufficient options for proto=fd [ 190.870885][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 190.870903][ T29] audit: type=1400 audit(1758908522.192:10084): avc: denied { append } for pid=16730 comm="syz.5.3179" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.904997][T16731] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 190.979305][ T29] audit: type=1326 audit(1758908522.292:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37806beec9 code=0x7ffc0000 [ 190.986995][T16741] loop0: detected capacity change from 0 to 1024 [ 191.011744][T16739] netlink: 'syz.2.3182': attribute type 27 has an invalid length. [ 191.012977][ T29] audit: type=1326 audit(1758908522.292:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f37806beec9 code=0x7ffc0000 [ 191.043507][ T29] audit: type=1326 audit(1758908522.292:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f37806bef03 code=0x7ffc0000 [ 191.066986][ T29] audit: type=1326 audit(1758908522.292:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f37806bd97f code=0x7ffc0000 [ 191.090464][ T29] audit: type=1326 audit(1758908522.292:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f37806bef57 code=0x7ffc0000 [ 191.114199][ T29] audit: type=1326 audit(1758908522.292:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37806bd710 code=0x7ffc0000 [ 191.137953][ T29] audit: type=1326 audit(1758908522.292:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37806beacb code=0x7ffc0000 [ 191.161538][ T29] audit: type=1326 audit(1758908522.332:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f37806bdb2a code=0x7ffc0000 [ 191.185047][ T29] audit: type=1326 audit(1758908522.332:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16740 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f37806bdb2a code=0x7ffc0000 [ 191.336288][T16739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.355609][T16739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.366125][T16754] loop0: detected capacity change from 0 to 2048 [ 191.405727][T16758] macvtap0: refused to change device tx_queue_len [ 191.412696][ T3851] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.423156][T16754] loop0: p1 < > p4 [ 191.427513][ T3851] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.437869][T16754] loop0: p4 size 8388608 extends beyond EOD, truncated [ 191.464945][ T3851] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.495574][T16754] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 191.506634][ T3851] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.533915][T16769] netlink: 'syz.5.3189': attribute type 7 has an invalid length. [ 191.541883][T16769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3189'. [ 191.565557][T16767] loop2: detected capacity change from 0 to 1024 [ 191.576315][T16769] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3189'. [ 191.590201][T16776] batman_adv: batadv0: Adding interface: dummy0 [ 191.596653][T16776] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.621921][T16776] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 191.643020][T16767] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 191.665384][T16776] netlink: 'syz.0.3190': attribute type 10 has an invalid length. [ 191.674380][T16776] batman_adv: batadv0: Removing interface: dummy0 [ 191.683791][T16776] dummy0: entered promiscuous mode [ 191.689332][T16776] team0: Port device dummy0 added [ 191.718676][T16776] netlink: 'syz.0.3190': attribute type 10 has an invalid length. [ 191.745636][T16776] dummy0: left promiscuous mode [ 191.752975][T16776] team0: Port device dummy0 removed [ 191.768069][T16787] loop5: detected capacity change from 0 to 1024 [ 191.769952][T16776] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 191.803064][T16787] EXT4-fs mount: 26 callbacks suppressed [ 191.803084][T16787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.858334][T16787] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 191.921860][T16809] loop0: detected capacity change from 0 to 1024 [ 191.948349][T16809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.984485][ T5483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.030307][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.035471][T16816] netlink: 'syz.5.3198': attribute type 27 has an invalid length. [ 192.085701][T16828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3199'. [ 192.094827][T16828] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3199'. [ 192.119537][T16836] loop0: detected capacity change from 0 to 512 [ 192.127475][T16836] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.141266][T16836] EXT4-fs (loop0): 1 truncate cleaned up [ 192.147407][T16836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.167261][T16832] loop5: detected capacity change from 0 to 2364 [ 192.226858][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.266665][T16843] loop2: detected capacity change from 0 to 512 [ 192.267234][T16850] loop5: detected capacity change from 0 to 764 [ 192.274908][T16843] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.292848][T16843] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3204: invalid indirect mapped block 4294967295 (level 0) [ 192.311147][T16843] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3204: invalid indirect mapped block 4294967295 (level 1) [ 192.335065][T16843] EXT4-fs (loop2): 1 orphan inode deleted [ 192.340889][T16843] EXT4-fs (loop2): 1 truncate cleaned up [ 192.342547][T10507] kernel write not supported for file /278/net/netstat (pid: 10507 comm: kworker/1:13) [ 192.364067][T16843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.427988][T16864] loop5: detected capacity change from 0 to 1024 [ 192.442549][T16866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.453059][T16866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.462906][T15753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.474399][T16864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.502452][T16875] netlink: 'syz.2.3211': attribute type 27 has an invalid length. [ 192.563507][ T5483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.682139][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3216'. [ 192.726698][T16896] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3220'. [ 192.746371][T16898] loop5: detected capacity change from 0 to 128 [ 192.754194][T16896] vlan2: entered allmulticast mode [ 192.759363][T16896] gretap0: entered allmulticast mode [ 192.767749][T16898] SELinux: failed to load policy [ 192.808433][T16909] netlink: 'syz.2.3223': attribute type 27 has an invalid length. [ 192.857033][T16913] loop2: detected capacity change from 0 to 1024 [ 192.889859][T16919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3225'. [ 192.892120][T16913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.932346][T16921] sd 0:0:1:0: device reset [ 192.980083][T15753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.997589][T16928] SELinux: failed to load policy [ 193.012154][T16928] SELinux: policydb version -193216440 does not match my version range 15-35 [ 193.021598][T16928] SELinux: failed to load policy [ 193.035418][T16934] tipc: Started in network mode [ 193.040363][T16934] tipc: Node identity ac14140f, cluster identity 4711 [ 193.093289][T16934] tipc: New replicast peer: 255.255.255.83 [ 193.099190][T16934] tipc: Enabled bearer , priority 10 [ 193.108405][T10507] IPVS: starting estimator thread 0... [ 193.115806][T16940] loop3: detected capacity change from 0 to 512 [ 193.117315][T16941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3228'. [ 193.131152][T16941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3228'. [ 193.166189][T16947] loop1: detected capacity change from 0 to 512 [ 193.171726][T16940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.173525][T16934] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3228'. [ 193.200132][T16940] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.210665][T16942] IPVS: using max 2160 ests per chain, 108000 per kthread [ 193.217056][T16948] loop5: detected capacity change from 0 to 512 [ 193.228572][T16934] tmpfs: Bad value for 'mpol' [ 193.247255][T16947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.270721][T16947] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.282923][T16948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.305437][T16956] netlink: 'syz.2.3234': attribute type 27 has an invalid length. [ 193.348053][T16948] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.374620][T16958] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.3233: iget: bad i_size value: 2533274857506816 [ 193.402787][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.482143][T14632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.493796][ T5483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.534055][T16972] loop3: detected capacity change from 0 to 1024 [ 193.553314][T16978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.566218][T16979] bond1 (unregistering): Released all slaves [ 193.574336][T16972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.620285][T14632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.685393][T17070] netlink: 'syz.2.3246': attribute type 27 has an invalid length. [ 193.702446][T17074] program syz.5.3249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.712894][T17074] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 193.718973][T17072] loop1: detected capacity change from 0 to 512 [ 193.730259][T17072] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 193.743922][T17072] EXT4-fs (loop1): 1 truncate cleaned up [ 193.750118][T17072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.795196][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.863380][T17098] loop1: detected capacity change from 0 to 512 [ 193.870742][T17098] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 193.885353][T17098] EXT4-fs (loop1): 1 truncate cleaned up [ 193.986580][T17098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.022561][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.031951][T17112] loop0: detected capacity change from 0 to 2048 [ 194.069661][T17112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 194.469424][T10507] tipc: Node number set to 2886997007 [ 194.479146][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 194.547352][T17175] loop0: detected capacity change from 0 to 512 [ 194.558196][T17175] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 194.580746][T17175] EXT4-fs (loop0): 1 truncate cleaned up [ 194.602391][T17175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.641443][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.766758][T17204] loop3: detected capacity change from 0 to 1024 [ 194.789024][T17210] loop1: detected capacity change from 0 to 512 [ 194.800434][T17204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.807303][T17208] loop0: detected capacity change from 0 to 512 [ 194.820997][T17210] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3280: bg 0: block 5: invalid block bitmap [ 194.842913][T17208] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 194.864214][T17210] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 194.874125][T14632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.881034][T17208] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.3278: invalid indirect mapped block 4294967295 (level 0) [ 194.900859][T17210] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.3280: invalid indirect mapped block 3 (level 2) [ 194.930631][T17208] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.3278: invalid indirect mapped block 4294967295 (level 1) [ 194.950479][T17210] EXT4-fs (loop1): 2 truncates cleaned up [ 194.957640][T17210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.966310][T17208] EXT4-fs (loop0): 1 orphan inode deleted [ 194.975949][T17208] EXT4-fs (loop0): 1 truncate cleaned up [ 194.986466][T17208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.041518][T17208] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.3278: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 195.097360][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.113941][T17242] loop3: detected capacity change from 0 to 1024 [ 195.122687][T17242] EXT4-fs: Ignoring removed bh option [ 195.128204][T17242] EXT4-fs: inline encryption not supported [ 195.139036][T17244] blkio.reset_stats is deprecated [ 195.140251][T17242] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.156484][T17242] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 195.165566][T17242] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3287: lblock 2 mapped to illegal pblock 2 (length 1) [ 195.180908][T17242] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3287: lblock 0 mapped to illegal pblock 48 (length 1) [ 195.196016][T17242] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3287: Failed to acquire dquot type 0 [ 195.207969][T17242] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 195.218109][T17242] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3287: mark_inode_dirty error [ 195.229952][T17242] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 195.241241][T17242] EXT4-fs (loop3): 1 orphan inode deleted [ 195.247585][T17242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.270524][ T3851] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.354457][ T3851] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:42: Failed to release dquot type 0 [ 195.394281][T17256] loop2: detected capacity change from 0 to 128 [ 195.537858][T17267] loop2: detected capacity change from 0 to 1024 [ 195.553713][T17267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.587720][T17272] loop5: detected capacity change from 0 to 512 [ 195.603823][T17272] ext4: Unknown parameter 'dont_hash' [ 195.636018][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.672731][T15753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.762935][T17285] loop1: detected capacity change from 0 to 1024 [ 195.771850][T14632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.777146][T17284] loop2: detected capacity change from 0 to 1024 [ 195.782632][T14632] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 195.790443][T17285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.803361][T17284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.825374][T14632] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 195.834440][T17285] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 195.851168][T14632] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 195.865706][T17284] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 195.895462][T14015] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.921755][T17303] loop1: detected capacity change from 0 to 1024 [ 195.931430][T15753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.940897][T17303] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.952277][T17297] loop3: detected capacity change from 0 to 2048 [ 195.964923][T17308] loop0: detected capacity change from 0 to 512 [ 195.973746][T17303] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.975191][T17313] FAULT_INJECTION: forcing a failure. [ 195.975191][T17313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.988086][T17303] __quota_error: 943 callbacks suppressed [ 195.988104][T17303] Quota error (device loop1): write_blk: dquota write failed [ 196.000436][T17313] CPU: 0 UID: 0 PID: 17313 Comm: syz.2.3300 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 196.000483][T17313] Tainted: [W]=WARN [ 196.000508][T17313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.000525][T17313] Call Trace: [ 196.000534][T17313] [ 196.000545][T17313] __dump_stack+0x1d/0x30 [ 196.000576][T17313] dump_stack_lvl+0xe8/0x140 [ 196.000601][T17313] dump_stack+0x15/0x1b [ 196.000624][T17313] should_fail_ex+0x265/0x280 [ 196.000658][T17313] should_fail+0xb/0x20 [ 196.000733][T17313] should_fail_usercopy+0x1a/0x20 [ 196.000768][T17313] _copy_from_user+0x1c/0xb0 [ 196.000812][T17313] kstrtouint_from_user+0x69/0xf0 [ 196.000909][T17313] ? 0xffffffff81000000 [ 196.000928][T17313] ? selinux_file_permission+0x1e4/0x320 [ 196.001009][T17313] proc_fail_nth_write+0x50/0x160 [ 196.001043][T17313] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 196.001068][T17313] vfs_write+0x269/0x960 [ 196.001130][T17313] ? vfs_read+0x4e6/0x770 [ 196.001157][T17313] ? __rcu_read_unlock+0x4f/0x70 [ 196.001205][T17313] ? __fget_files+0x184/0x1c0 [ 196.001244][T17313] ksys_write+0xda/0x1a0 [ 196.001418][T17313] __x64_sys_write+0x40/0x50 [ 196.001511][T17313] x64_sys_call+0x27fe/0x2ff0 [ 196.001539][T17313] do_syscall_64+0xd2/0x200 [ 196.001615][T17313] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 196.001654][T17313] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 196.001699][T17313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.001816][T17313] RIP: 0033:0x7fa56bf3d97f [ 196.001837][T17313] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 196.001927][T17313] RSP: 002b:00007fa56a99f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 196.001954][T17313] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa56bf3d97f [ 196.001972][T17313] RDX: 0000000000000001 RSI: 00007fa56a99f0a0 RDI: 0000000000000007 [ 196.002019][T17313] RBP: 00007fa56a99f090 R08: 0000000000000000 R09: 0000000000000000 [ 196.002034][T17313] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 196.002051][T17313] R13: 00007fa56c196038 R14: 00007fa56c195fa0 R15: 00007fffa22e10a8 [ 196.002077][T17313] [ 196.016456][T17308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.024990][T17303] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 196.025401][T17303] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 0 [ 196.029979][T17308] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.039604][T17297] loop3: p1 < > p4 [ 196.081466][ T29] audit: type=1400 audit(1758908527.402:11034): avc: denied { mount } for pid=17306 comm=ACED name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 196.084949][T17303] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096 [ 196.197880][T17297] loop3: p4 size 8388608 extends beyond EOD, [ 196.231245][T17303] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm +}[@: Invalid inode bitmap blk 0 in block_group 0 [ 196.232930][T17297] truncated [ 196.246736][T17303] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 196.344493][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 196.359280][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 196.367793][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 196.380993][T17303] EXT4-fs (loop1): 1 orphan inode deleted [ 196.381900][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.387330][T17303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.421923][T17297] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 196.443406][T17303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.487055][T17303] validate_nla: 1 callbacks suppressed [ 196.487071][T17303] netlink: '+}[@': attribute type 1 has an invalid length. [ 196.508582][T17342] loop3: detected capacity change from 0 to 1024 [ 196.518002][T17345] tmpfs: Bad value for 'mpol' [ 196.527618][T17345] policy can only be matched on NF_INET_PRE_ROUTING [ 196.527636][T17345] unable to load match [ 196.530539][T17303] netlink: '+}[@': attribute type 1 has an invalid length. [ 196.549751][T17342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.584434][ T29] audit: type=1326 audit(1758908527.902:11035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56bf3eec9 code=0x7ffc0000 [ 196.592034][T17360] netlink: 'syz.0.3311': attribute type 27 has an invalid length. [ 196.608179][ T29] audit: type=1326 audit(1758908527.902:11036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56bf3eec9 code=0x7ffc0000 [ 196.654318][T17357] loop2: detected capacity change from 0 to 1024 [ 196.659592][T17360] team0: left promiscuous mode [ 196.662716][ T29] audit: type=1326 audit(1758908527.962:11037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa56bf3eec9 code=0x7ffc0000 [ 196.665539][T17360] team_slave_0: left promiscuous mode [ 196.689120][ T29] audit: type=1326 audit(1758908527.962:11038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa56bf3ef03 code=0x7ffc0000 [ 196.689152][ T29] audit: type=1326 audit(1758908527.972:11039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa56bf3d97f code=0x7ffc0000 [ 196.694641][T17360] team_slave_1: left promiscuous mode [ 196.718101][ T29] audit: type=1326 audit(1758908527.972:11040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17356 comm="syz.2.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa56bf3ef57 code=0x7ffc0000 [ 196.753456][T17355] loop5: detected capacity change from 0 to 8192 [ 196.785379][T17357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.799074][T14632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.820377][T17355] loop5: p1 p2 p3 p4 [ 196.825698][T17355] loop5: p3 start 331777 is beyond EOD, truncated [ 196.832342][T17355] loop5: p4 size 262144 extends beyond EOD, truncated [ 196.879160][T15753] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.912653][T17388] loop3: detected capacity change from 0 to 128 [ 196.934638][T17412] __nla_validate_parse: 10 callbacks suppressed [ 196.934653][T17412] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3315'. [ 196.967361][T17412] gretap0: entered promiscuous mode [ 196.974139][T17385] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3315'. [ 196.983304][T17385] 0ªX¹¦D: renamed from gretap0 [ 196.991026][T17385] 0ªX¹¦D: left promiscuous mode [ 196.996024][T17385] 0ªX¹¦D: entered allmulticast mode [ 197.004341][T17385] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 197.025282][T17412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17412 comm=syz.0.3315 [ 197.063039][T17423] loop3: detected capacity change from 0 to 512 [ 197.093288][T17423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.116337][T17423] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.215318][T14632] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.361728][T17447] pim6reg: entered allmulticast mode [ 197.407724][T17451] loop0: detected capacity change from 0 to 1024 [ 197.439742][T17451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.457308][T17451] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.3323: Allocating blocks 497-513 which overlap fs metadata [ 197.473748][T17451] EXT4-fs (loop0): pa ffff888106e75b60: logic 256, phys. 369, len 9 [ 197.481880][T17451] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 197.497711][T17464] loop5: detected capacity change from 0 to 512 [ 197.504970][T17464] EXT4-fs: inline encryption not supported [ 197.511396][T17451] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 197.669216][T17464] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 197.698051][T17464] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 197.751741][T12028] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.763145][ T3290] ================================================================== [ 197.771259][ T3290] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 197.779545][ T3290] [ 197.781874][ T3290] read to 0xffff8881022d5c78 of 2 bytes by interrupt on cpu 0: [ 197.789422][ T3290] virtqueue_disable_cb+0x58/0x150 [ 197.794555][ T3290] skb_xmit_done+0x65/0x140 [ 197.799070][ T3290] vring_interrupt+0x155/0x180 [ 197.803840][ T3290] __handle_irq_event_percpu+0x90/0x440 [ 197.809400][ T3290] handle_irq_event+0x64/0xf0 [ 197.814073][ T3290] handle_edge_irq+0x154/0x470 [ 197.818829][ T3290] __common_interrupt+0x60/0xb0 [ 197.823698][ T3290] common_interrupt+0x7e/0x90 [ 197.828371][ T3290] asm_common_interrupt+0x26/0x40 [ 197.833396][ T3290] _raw_spin_unlock_irqrestore+0x3c/0x60 [ 197.839027][ T3290] __unix_dgram_recvmsg+0x3a7/0x810 [ 197.844223][ T3290] unix_dgram_recvmsg+0x81/0x90 [ 197.849075][ T3290] sock_recvmsg_nosec+0x107/0x130 [ 197.854104][ T3290] ____sys_recvmsg+0x26f/0x280 [ 197.858895][ T3290] ___sys_recvmsg+0x11f/0x370 [ 197.863571][ T3290] do_recvmmsg+0x1ef/0x540 [ 197.867991][ T3290] __x64_sys_recvmmsg+0xe5/0x170 [ 197.872934][ T3290] x64_sys_call+0x27a6/0x2ff0 [ 197.877611][ T3290] do_syscall_64+0xd2/0x200 [ 197.882121][ T3290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.888019][ T3290] [ 197.890341][ T3290] write to 0xffff8881022d5c78 of 2 bytes by task 3290 on cpu 1: [ 197.897971][ T3290] virtqueue_disable_cb+0x7a/0x150 [ 197.903094][ T3290] start_xmit+0x103/0x17a0 [ 197.907506][ T3290] dev_hard_start_xmit+0x125/0x3e0 [ 197.912624][ T3290] sch_direct_xmit+0x192/0x550 [ 197.917410][ T3290] __dev_queue_xmit+0xe9a/0x2000 [ 197.922349][ T3290] ip_finish_output2+0x77f/0x8b0 [ 197.927301][ T3290] ip_finish_output+0x114/0x2a0 [ 197.932156][ T3290] ip_output+0xbd/0x190 [ 197.936324][ T3290] __ip_queue_xmit+0xb4b/0xb80 [ 197.941094][ T3290] ip_queue_xmit+0x39/0x50 [ 197.945523][ T3290] __tcp_transmit_skb+0x1641/0x1a60 [ 197.950749][ T3290] tcp_write_xmit+0x1210/0x2fd0 [ 197.955617][ T3290] __tcp_push_pending_frames+0x6d/0x1b0 [ 197.961163][ T3290] tcp_push+0x311/0x330 [ 197.965335][ T3290] tcp_sendmsg_locked+0x2458/0x2c00 [ 197.970549][ T3290] tcp_sendmsg+0x2f/0x50 [ 197.974817][ T3290] inet_sendmsg+0x76/0xd0 [ 197.979151][ T3290] __sock_sendmsg+0x102/0x180 [ 197.983831][ T3290] sock_write_iter+0x165/0x1b0 [ 197.988600][ T3290] vfs_write+0x52a/0x960 [ 197.992843][ T3290] ksys_write+0xda/0x1a0 [ 197.997084][ T3290] __x64_sys_write+0x40/0x50 [ 198.001710][ T3290] x64_sys_call+0x27fe/0x2ff0 [ 198.006395][ T3290] do_syscall_64+0xd2/0x200 [ 198.010908][ T3290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.016808][ T3290] [ 198.019124][ T3290] value changed: 0x0000 -> 0x0001 [ 198.024142][ T3290] [ 198.026457][ T3290] Reported by Kernel Concurrency Sanitizer on: [ 198.032620][ T3290] CPU: 1 UID: 0 PID: 3290 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 198.044107][ T3290] Tainted: [W]=WARN [ 198.047904][ T3290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.058131][ T3290] ================================================================== [ 198.072481][T17464] EXT4-fs (loop5): 1 truncate cleaned up [ 198.079278][T17464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.094709][T17464] FAULT_INJECTION: forcing a failure. [ 198.094709][T17464] name failslab, interval 1, probability 0, space 0, times 0 [ 198.107412][T17464] CPU: 1 UID: 0 PID: 17464 Comm: syz.5.3324 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 198.107445][T17464] Tainted: [W]=WARN [ 198.107454][T17464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.107470][T17464] Call Trace: [ 198.107478][T17464] [ 198.107488][T17464] __dump_stack+0x1d/0x30 [ 198.107514][T17464] dump_stack_lvl+0xe8/0x140 [ 198.107551][T17464] dump_stack+0x15/0x1b [ 198.107599][T17464] should_fail_ex+0x265/0x280 [ 198.107623][T17464] should_failslab+0x8c/0xb0 [ 198.107652][T17464] kmem_cache_alloc_noprof+0x50/0x310 [ 198.107679][T17464] ? security_file_alloc+0x32/0x100 [ 198.107772][T17464] security_file_alloc+0x32/0x100 [ 198.107814][T17464] init_file+0x5c/0x1d0 [ 198.107885][T17464] alloc_empty_file+0x8b/0x200 [ 198.107916][T17464] path_openat+0x68/0x2170 [ 198.107940][T17464] ? _parse_integer_limit+0x170/0x190 [ 198.108005][T17464] ? kstrtoull+0x111/0x140 [ 198.108027][T17464] ? kstrtouint+0x76/0xc0 [ 198.108135][T17464] do_filp_open+0x109/0x230 [ 198.108169][T17464] do_sys_openat2+0xa6/0x110 [ 198.108203][T17464] __x64_sys_openat+0xf2/0x120 [ 198.108245][T17464] x64_sys_call+0x2e9c/0x2ff0 [ 198.108335][T17464] do_syscall_64+0xd2/0x200 [ 198.108393][T17464] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 198.108418][T17464] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 198.108470][T17464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.108497][T17464] RIP: 0033:0x7f879b6aeec9 [ 198.108516][T17464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.108537][T17464] RSP: 002b:00007f879a117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.108634][T17464] RAX: ffffffffffffffda RBX: 00007f879b905fa0 RCX: 00007f879b6aeec9 [ 198.108650][T17464] RDX: 0000000000181242 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 198.108666][T17464] RBP: 00007f879a117090 R08: 0000000000000000 R09: 0000000000000000 [ 198.108682][T17464] R10: 00000000000000a3 R11: 0000000000000246 R12: 0000000000000001 [ 198.108698][T17464] R13: 00007f879b906038 R14: 00007f879b905fa0 R15: 00007ffca91c1db8 [ 198.108723][T17464] [ 198.510246][ T5483] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 199.328159][ T8764] tipc: Disabling bearer [ 199.596828][ T3868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.606230][ T3868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.615610][ T3868] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 199.624588][ T3868] bond0 (unregistering): Released all slaves [ 199.707791][ T3868] hsr_slave_0: left promiscuous mode [ 199.713524][ T3868] hsr_slave_1: left promiscuous mode [ 199.719117][ T3868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.727157][ T3868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.758684][ T3868] team0 (unregistering): Port device team_slave_1 removed [ 199.768482][ T3868] team0 (unregistering): Port device team_slave_0 removed [ 200.692443][ T3872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.702138][ T3872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.711540][ T3872] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 200.719963][ T3872] bond0 (unregistering): Released all slaves [ 200.741155][ T3872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.751387][ T3872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.760365][ T3872] bond0 (unregistering): Released all slaves [ 200.781503][ T3872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.790876][ T3872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.800812][ T3872] bond0 (unregistering): Released all slaves [ 200.833163][ T3872] tipc: Disabling bearer [ 200.838149][ T3872] tipc: Left network mode [ 200.913394][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.921050][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.930079][ T3872] hsr_slave_0: left promiscuous mode [ 200.935648][ T3872] hsr_slave_1: left promiscuous mode [ 200.941409][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.948931][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.958053][ T3872] hsr_slave_0: left promiscuous mode [ 200.963773][ T3872] hsr_slave_1: left promiscuous mode [ 200.969415][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.976932][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.985945][ T3872] pim6reg (unregistering): left allmulticast mode [ 201.019339][ T3872] team0 (unregistering): Port device team_slave_1 removed [ 201.028788][ T3872] team0 (unregistering): Port device team_slave_0 removed [ 201.084114][ T3872] team0 (unregistering): Port device team_slave_1 removed [ 201.093582][ T3872] team0 (unregistering): Port device team_slave_0 removed [ 201.147337][ T3872] team0 (unregistering): Port device team_slave_1 removed [ 201.157264][ T3872] team0 (unregistering): Port device team_slave_0 removed [ 201.863634][ T3872] IPVS: stop unused estimator thread 0...