last executing test programs: 1m8.435269586s ago: executing program 32 (id=2205): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = eventfd2(0x0, 0x0) iopl(0x3) read$eventfd(r3, &(0x7f0000000040), 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffd91, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1f}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000580)=0x14) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x81) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$eJzs3UFvI1cdAPD/eO3d7G62SYEDVGoptGi3grWThrYRh1IkBKdKiMJ5CYkTRXHiKHbaTVRB9hMgIQRInODCBYkPgIRW4sKxQqoEZ5CKQIhuQYIDdJDtcRKcceKsnHjX+f2kybz3xjP/9xy/8YznaSaAC+vZiHgtIj5M0/SFiJjKygvZFHudqfW6Dx68vdiakkjTN/6eRJKVdbeVZPPr2WoTEfH1r0Z8Ozkat7Gzu7ZQqxW7+UpzfbPS2Nm9vbq+sFJdqW7Mzc2+PP/K/EvzM0Np542IePXLf/7h937+lVd//bm3/nTnr7e+06rWZLb8cDtOqXjcwk7TS1cmelbYeshgj6JWe0rdzNXB1rl3hvUBAKC/1jH+RyLi0xHxQkzFpeMPZwEAAIDHUPrFyfhPEpHmu9ynHAAAAHiMFNpjYJNCORsLMBmFQrncGcP7sbhWqNUbzc8u17c3ljpjZaejVFherVVnsrHC01FKWvnZdvog/2JPfi4inoyIH0xdbefLi/Xa0qh//AAAAIAL4nrP+f8/pzrn/wAAAMCYmT5+8dR51QMAAAA4Oyec/wMAAABjwPk/AAAAjLWvvf56a0q7z79eenNne63+5u2lamOtvL69WF6sb22WV+r1lfY9+9ZP2l6tXt/8fGxs3600q41mpbGze2e9vr3RvLMaE+fSIAAAAOCIJz95/w9JROx94Wp7ark86koB56K4n0qyeU7v/+MTnfl751Qp4FxcGuA1713JL3ecAI+3Ym9Bn74OjJ/SqCsAjFxywvKewTvX9lPvZPNPDb9OAADAcN38RP71/5OvC+wVzqF6wBnSieHi6vmeTz3rBy6O9vX/QQfyOFiAsVIaaAQgMM5Oef3/wDuDRkjTU1UIAAAYusn2lBTK2c97k1EolMsRN9qPBSgly6u16kxEPBERv58qXWnlZ9trJieeMwAAAAAAAAAAAAAAAAAAAAAAAAAAHWmaRAoAAACMtYjCX5LfdO7lf3Pq+cne3wcuJ/9uPxL4ckS89ZM3fnR3odncmm2Vv79f3vxxVv7iKH7BAAAAAHp1z9Pb83+NujYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjJsPHry92J0GePnVYcX925ciYjovfjEm2vOJKEXEtX8kUTy0XhIRl4YQf+9eRHw8L37SqtZ+yLz4w3gTTogf09m7kBf/+hDiw0V2v7X/eS2v/xXi2fY8v/8VI/4v/7D67/9if/93qU//vzFgjKfe/WWlb/x7EU8V8/c/3fhJn/jPDRj/W9/Y3e23LP1pxM3u9097j3c4wkGq0lzfrDR2dm+vri+sVFeqG3Nzsy/PvzL/0vxMZXm1Vs3+5sb4/tO/+vC49l/L/f5Lstr0b//zOdvL+07677t3H3y0m9k7Gv/Wcznxf/uz7BVH4xeyOJ/J0kn2XrXTe53387BnfvG7Z45r/9JB+0un+f/f6rfRXkc6ytODfnQAgDPQ2NldW6jVqltjm2idpT8C1bjoiW++/wh+2L471A2maZq2+lTOovsRMch2khhySwv59TlI9P2njHrPBAAADNvBQf+oawIAAAAAAAAAAAAAAAAAAAAX13ncZa035sEtkJNh3EIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//A/7SsQ==") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x4000) io_submit(0x0, 0x0, 0x0) symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00') fchdir(0xffffffffffffffff) 51.003643689s ago: executing program 33 (id=2829): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8000, &(0x7f0000000100), 0x1, 0x7b2, &(0x7f00000007c0)="$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") syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) io_getevents(r1, 0x1, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000140)={0x77359400}) 25.382084167s ago: executing program 1 (id=3662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1, 0x0, 0xc6e9}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 25.253086098s ago: executing program 1 (id=3664): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) 25.103193051s ago: executing program 1 (id=3672): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000500000000000c02088074000080200004000a00000000000007fe800000000000000000000000000000000000001500040002000000ac1e0101000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000300020000000800030000000000060005000000000094010080200004000a004e21ffffffff0000000000000000000000000000000101000000240002002767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a62801098024010080400001000a00000014000200000000000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000bb05000300030000000600010002000000080002000a01010205000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fe80000000000000000000000000000e05000300010000000600010002000000080002000000000005000300ff000000060001000a0000001400020000000000000000000000ffffffffffff0500030001000000060001000200000008000200ac1414aa0500030001000000060001000200000008000200ac1414bb050003000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080007000000000008000100", @ANYRES32=r1], 0x25c}}, 0x0) 25.047991342s ago: executing program 1 (id=3675): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(0x0, 0x3) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 24.900948844s ago: executing program 1 (id=3680): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r2, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) 23.073741821s ago: executing program 0 (id=3728): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 22.906244244s ago: executing program 0 (id=3730): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, &(0x7f0000000180)=""/49, 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000800000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0xf1) 22.861715165s ago: executing program 0 (id=3733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) 22.623914378s ago: executing program 0 (id=3744): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) unlinkat(0xffffffffffffff9c, 0x0, 0x200) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 22.253458334s ago: executing program 0 (id=3742): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x8004}, 0x0) 21.927177739s ago: executing program 0 (id=3750): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 21.915889789s ago: executing program 34 (id=3750): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 20.51766751s ago: executing program 2 (id=3767): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000000000000deff0000000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) 20.50117256s ago: executing program 2 (id=3768): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000004c0)) 20.391242202s ago: executing program 2 (id=3770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') 20.390263532s ago: executing program 2 (id=3772): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(0x0, 0xd6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x1) 20.216125704s ago: executing program 2 (id=3773): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0xffff000000000000, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x5, 0x0, 0x2}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xa8, 0x9, 0x1}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000000c0)='./file0\x00', 0x2) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040040000000000000020000006c000480680001800a000100696e6e65720000005800028008000240007500840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f6164002400070008000340000000b908000240000000040800014000000014080004400000004b0900010073797a30000000000900020073797a320000"], 0xc0}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 20.006936978s ago: executing program 2 (id=3775): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 20.006722618s ago: executing program 35 (id=3775): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 13.401475647s ago: executing program 1 (id=3906): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) shutdown(r0, 0x0) 13.401194738s ago: executing program 36 (id=3906): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) shutdown(r0, 0x0) 6.272971765s ago: executing program 9 (id=4191): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x1, 0x69}, 0x13101, 0x0, 0x0, 0x2, 0x0, 0x7, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 6.199436536s ago: executing program 9 (id=4194): unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fcntl$setlease(r3, 0x400, 0x0) 6.135660777s ago: executing program 9 (id=4197): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaa8baaaaaaaaaaaa2286dd60cabf0000103aff00000000000000000000ffff7f0000010002000000000000000000005e8ec9371aa6c682000000"], 0x0) 6.135143467s ago: executing program 9 (id=4198): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x212589b, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) 5.9753409s ago: executing program 9 (id=4200): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) 5.871308011s ago: executing program 6 (id=4206): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) write(r0, 0x0, 0x0) 5.775410303s ago: executing program 9 (id=4208): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1aI\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8:\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x81\x00\x00\x00\x00\x00\x00\x00nC\xec', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.775136373s ago: executing program 37 (id=4208): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1aI\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8:\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x81\x00\x00\x00\x00\x00\x00\x00nC\xec', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.690976964s ago: executing program 6 (id=4212): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x508, 0x3d8, 0x3d8, 0x508, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x2}}}}, {{@uncond, 0x0, 0x1f8, 0x228, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'dvmrp1\x00', {0x3ff, 0x1, 0x2, 0x8, 0x3b7c, 0x1ff, 0x1, 0x8, 0x40}, {0xffffffffffffffff}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0xb, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) 5.671572664s ago: executing program 6 (id=4215): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4040095}, 0x8010) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.559146776s ago: executing program 6 (id=4218): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000340)={[{@nodiscard}, {@dioread_lock}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 5.441765228s ago: executing program 6 (id=4222): io_uring_setup(0x3c8e, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 5.086358483s ago: executing program 6 (id=4228): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 5.067124804s ago: executing program 38 (id=4228): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.121375273s ago: executing program 5 (id=4324): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x140f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) 1.113612483s ago: executing program 3 (id=4326): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000040000000c00000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.085975604s ago: executing program 5 (id=4327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, r3, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20004004) 1.062974124s ago: executing program 3 (id=4328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.003186105s ago: executing program 5 (id=4329): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 1.002632235s ago: executing program 3 (id=4330): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000001a00)={[{@user_xattr}, {@lazytime}, {@nodioread_nolock}, {@errors_remount}, {@user_xattr}, {@nodelalloc}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x101}}]}, 0x1, 0x7d0, &(0x7f0000000d80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x20, 0x0, 0x0, 0x3, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0xb9ec7bc4f5bb1f27, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.001735245s ago: executing program 5 (id=4331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0xffff000000000000, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) gettid() pipe(&(0x7f0000000000)={0xffffffffffffffff}) splice(r9, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x7) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x5, 0x0, 0x2}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xa8, 0x9, 0x1}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000000c0)='./file0\x00', 0x2) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040040000000000000020000006c000480680001800a000100696e6e65720000005800028008000240007500840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f6164002400070008000340000000b908000240000000040800014000000014080004400000004b0900010073797a30000000000900020073797a320000"], 0xc0}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 860.263837ms ago: executing program 3 (id=4335): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000780)={0x28, 0x0, 0xffffffff, @host}, 0x10) 859.663877ms ago: executing program 3 (id=4336): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/221, 0xdd}, 0x1}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 439.077054ms ago: executing program 8 (id=4356): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) 410.199874ms ago: executing program 8 (id=4359): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) 352.152805ms ago: executing program 7 (id=4363): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$eJzs3c9vG1kdAPCvnV9umm6ysIcFAVuWhYKq2om7G632wnJBQqvVIi2cEGqjxI2i2HEUO6UJkUjPXJGoxAn+BA5IHJB64s4NblzKAalABWqQEPJq7HGbOHFiNXHcxp+PNPJ7MxN/v8/SvBc/2/MCGFpXI2I3IsYj4nZETKf7M+kWH7a25LynT3YW957sLGai0fj0n6PpmTuL7fPbLqfPmYv4JKlPHBG3trW9ulAulzbSeqFeWS/UtrZvrFQWlkvLpbVicX5ufvb9m+8Vz6ytb1V++/i7Kx/98A+///KjP+1+66dJzt9OjyVtO7NA+7Rel7GY2rcveeU+6kewARhJ2zM+6ER4IdmI+FxEvJ2Wn8kNLicAoL8ajeloTO+vd5fp4RwA4OWXvOefikw2n77/n4psNp9vzuHl3ojJbLlaq1+/U91cW4rmHNZMjGXvrJRLs+lc4UyMZZL6XLP8vF7sqN+MiNcj4hcTl5r1/GK1vDSof3oAYMhd7hj//zPRGv974BMCAHiVGckBYPgcHv/HBpIHAHB+vP8HgOGzb/w/6re6AMAFlOv47T8AcPGdOP//Zvzsx+eTCgBwTnz+DwBD5fsff5xsjb30/tdLd7c2V6t3byyVaqv5yuZifrG6sZ5frlaXm/fsqZz0fOVqdX3u3di8V6iXavVCbWv7VqW6uVa/1byv962SHxYAwOC9/tbDv2QiYveDS80t2ms5+EIAXHgucxheI4NOABiY0UEnAAyM+Xggc8Lxrl8RetD9by6dIh+g/659ocv8//H/G/y/cT7pAX1k/h+G1+nm/80ewKvM/D8Mr0YjYz1/ABgyPbyD9xVBuOBe+PN/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGGJTzS2TzadrgU9FNpvPR1yJiJkYy9xZKZdmI+K1iPjzxNhEUp8bdNIAwCll/55J1/+6Nv3OVOfR8cx/J5qPEfGTX336y3sL9frGXLL/X8/21x+k+4tHBpjofxsAgH1GO3e0x+n2ON5e3/fpk53F9naeCT7+Tmtx0STuXrq1U28ln4uxiJj8d+ZAYzJntDDx7v2IeLOz/dlnx2fSlU874yexr/QtfjRbOHUgfvZA/GzzWOsxeS0+fwa5wLB5mPQ/Hx51/WXjavMxvf4yBzvTXPz8cOf6Atr9316js/9rXe+fXMk1+5qj+r+rvcZ494/f63rs/kjji6MRe4f63/aK0Llm6aj47/QY/69f+srb3Y41fh1xLY6L3yoV6pX1Qm1r+8ZKZWG5tFxaKxbn5+Zn37/5XrHQnKMutGeqD/vHB9df697+iMku8XMntP/rPbb/N/+7/aOvHhP/m187Kn423jgmfjImfqPH+AuTv+u6fHcSf6lL+0cPxB8/8HfJvus9xn/0t+2lHk8FAM5BbWt7daFcLm0onLaQ69czX35JGqhwTGEkyu35qJcin1MXBtwxAX33/KIfdCYAAAAAAAAAAAAAAEA3tR+kt/zr44/hBt1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7PAgAA//+iDcmp") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x17e) pwritev2(r2, &(0x7f0000000600)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x0, 0x0) 344.833415ms ago: executing program 8 (id=4364): recvmsg(0xffffffffffffffff, 0x0, 0x20) mbind(&(0x7f00006a1000/0x1000)=nil, 0x1000, 0x8003, 0x0, 0x8, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2000018, &(0x7f00000005c0)=ANY=[], 0x1, 0x728, &(0x7f0000000b80)="$eJzs3U9v2/b5APBHjtO6/gFF8dtQFFmasmkPCZA6ktw6MHoYNJl22MqiQMpFgh2GokmGoE47NBuweIeul2477CXs0OveRN/EbnsNve80D6Qk/4stZ0kaBdnnY8T8knzI70Na4OOvQ1EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAESju9ZsthrRy/pbN5KTddeKfHPK+sn+vj80mdJvRKP6FwsL8cZo0Rs/3V/9evXtYpwfzZ2PhWqyEDv/9/prH/5kfm6y/ZSEnon7D3Y+/3R7+/ZXs05kRjbSflbm2WZnI02yMk9WV1aaV6+vl8l61kvLm+Uw3Uy6RdoZ5kVyqXs5aa2uLifp0s18q7+x1umlk4XX3ms3myvJR0uDtFOUef/qR0tl93rW62X9jTqmWl3FXEt+/WXxcTZMhmlnM0nu3N2+vXxaklVQ61GC2qcFtZvtdqvVbrdWPlj94FqzOd9uLsShBc0j4tAmSbM5P3nRxmuj1/Yjn+sD/vE4G/GjmTs0F3+c/pN9atdueFJz4/ofvciiH1txI5Jjv7qxFkXksXnC+rHvI/5QN66mU/ut6vfCuP5Pqvwb+6vPVd8uLoznLpxU/0/I5dl93Y8HsROfx6exHdtxO76aeUbP9msj0uhHFmXkkcVmdOolyXhJEquxEivRjF/F9ViPMpJYjyx6kUYZN6OMYaT1K6obRaTRiWHkUUQSl6IblyOJVqzGaixHEmksxc3IYyv6sRFr0an3cifu1ud9eUqOe0GtRwlqTwkaF/PqhVebf+gXgmZzfrzuuPp/ba/+/62uD/fffQbFiefDmUnj6V284QntTup/7O7+e7cy64wAAACAp61R//W9ceGlvfn1rJf+csZZAQAAAE9TfSvT+Wpytmq9GY1q/N/cD3hpdrkBAAAAT0cjLoz/CrAYb41ak3dCNY39AQAA4MVQ////hWqyWLXeisaB8f/E3AwTBAAAAJ7Yn/efsb8Txz5jtxxUw//5iGh8M7jxbuNep4rr3Dsz2u7M0T0O1881Xh3vpJ6szI/nuun5xvjpl3sPwfxhPLlz2rP+G0Vx9kkT2P9Lxtu3RtNbe2vqXhbXs1661M17H7ai03l1bpjeGP7ui7u/j6h6/0t/89VG3Lm7fXvpsy+3b9W5fFPt5Zt74yfCNv6LXH4bb45i3nw5HjrinWicrd+IMe53cdRv8+Dxj49lckivPEKf305iLi6OpouHj3+h6rO1dNLRLzZeHm//REf+7ST4nUvvjCbHZNGekkV9LtoHz/+Rc/FIWcQ7p2exPMli/8mYh7NYfsIsAGblzl4VOlx3z+7V/4fq7mNc5Z5Ndf82Lo1iLp2rL6zz5465ojePrSu7Z47U2Mevbn+Py6OYy5Pgk2psdcx/3eu3Vff7XbXBdyf2W/YmJ+Teb+Lq3IOd9+7Wsbe/aLeXV5rvN5sftONsfRjjSZXpvxaOZvpKqD0A/9Mu1vf/T/uMneMjzuyX5sb78XY1/dmBUXVVk/Yq3v/v3VKwFJ/Fl7Edt+JK/W6D+o6DY/tdPHAbwpW4OE72+FHr4oFPeLlyyqhuFDv53eVRYkcfLwMAL5KLp9Thvfo/+Sy+SURdQkdj9ysHxt0L++PuGI8wj9Ty6aPjg7UcAPhxpMUPjcXhnxpFNdNaXW11htfTpMi7HydFtraRJll/mBbd653+RpoMinyYd/Ne1fgkW0vLpNwaDPJimKznRTLIy+zGzyPrpcn4o9/LdLPTH2bdctBLO2WadPP+sNMdJmtZ2U0GW7/oZeXXu7u71cblIO1m61m3M8zyflLmW0U3XUqSMk3HgdfTIsnW0v4wW8+qZj8ZFNnLUdxMPsl7W5tpspaW3SIbDPOizmbSV9Zfz4vNerdLsz7ZAPCcuP9g5/NPt7dvf3V8YyFOXFU3/jl981Fj1scIABw2rUo/dPcZAAAAAAAAAAAAAAAwE6e8/+/xG40jS+Yi4sfq64Vr7H79TPqavMFjdj+dM8/JCX+48d2BJclT3PMrEfFcHOBpjRlfmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgGP8JAAD//yNLSwY=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x110) mount(0x0, 0x0, 0x0, 0x104889, 0x0) socket$unix(0x1, 0x1, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 222.946497ms ago: executing program 4 (id=4366): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 222.485397ms ago: executing program 4 (id=4367): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 222.262217ms ago: executing program 8 (id=4368): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 221.991517ms ago: executing program 4 (id=4369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2100001, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 213.667427ms ago: executing program 8 (id=4370): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 183.205717ms ago: executing program 8 (id=4371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='mm_page_free\x00', r0, 0x0, 0x1000000}, 0x18) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@auto_da_alloc}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000f80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 142.424518ms ago: executing program 7 (id=4372): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='sched_switch\x00', r0}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 141.414878ms ago: executing program 4 (id=4373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) 86.820509ms ago: executing program 7 (id=4374): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), &(0x7f0000000440)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r2, 0x0, 0x0) writev(r3, 0x0, 0x0) 86.305989ms ago: executing program 4 (id=4375): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 85.725469ms ago: executing program 7 (id=4376): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 85.443629ms ago: executing program 4 (id=4377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb93a"], 0xfdef) 62.010269ms ago: executing program 7 (id=4378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000380)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34c98a3f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)="1121e5", 0x3}, 0x1, 0x0, 0x0, 0x1}, 0xc0e4) 52.651959ms ago: executing program 5 (id=4379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xeb4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 804.24µs ago: executing program 7 (id=4380): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) 418.22µs ago: executing program 3 (id=4381): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000015, 0x0, 0x0) 0s ago: executing program 5 (id=4382): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) kernel console output (not intermixed with test programs): inux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11804 comm=syz.3.3390 [ 124.214224][T11807] serio: Serial port ptm1 [ 124.283823][T11823] netlink: 'syz.2.3399': attribute type 10 has an invalid length. [ 124.292686][T11823] syz_tun: entered promiscuous mode [ 124.301469][T11823] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 124.313445][T11823] netlink: 'syz.2.3399': attribute type 10 has an invalid length. [ 124.325977][T11830] loop3: detected capacity change from 0 to 512 [ 124.333495][T11823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.342380][T11823] team0: Port device bond0 added [ 124.351939][T11830] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 124.381942][T11830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 124.394255][T11830] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.3401: corrupted in-inode xattr: e_value size too large [ 124.421467][T11830] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3401: couldn't read orphan inode 15 (err -117) [ 124.446944][T11841] netlink: 664 bytes leftover after parsing attributes in process `syz.1.3406'. [ 124.494912][T11843] loop1: detected capacity change from 0 to 1024 [ 124.553142][T11843] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3407: Allocating blocks 449-513 which overlap fs metadata [ 124.578713][T11842] EXT4-fs (loop1): pa ffff888107207770: logic 48, phys. 177, len 21 [ 124.587422][T11842] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 124.704091][T11876] loop0: detected capacity change from 0 to 512 [ 124.718302][T11876] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.734179][T11876] EXT4-fs (loop0): 1 truncate cleaned up [ 124.746510][T11881] sd 0:0:1:0: device reset [ 124.872315][T11906] loop6: detected capacity change from 0 to 512 [ 124.879541][T11907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3431'. [ 124.898068][T11907] loop1: detected capacity change from 0 to 512 [ 124.924686][T11907] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3431: Failed to acquire dquot type 1 [ 124.952630][T11907] EXT4-fs (loop1): 1 truncate cleaned up [ 124.959080][T11913] random: crng reseeded on system resumption [ 124.967326][T11907] ext4 filesystem being mounted at /740/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.987892][T11913] Restarting kernel threads ... [ 124.994742][T11907] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3431: Failed to acquire dquot type 1 [ 125.016876][T11913] Done restarting kernel threads. [ 125.432103][T11936] loop2: detected capacity change from 0 to 128 [ 125.453216][T11936] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 125.462690][T11936] FAT-fs (loop2): Filesystem has been set read-only [ 125.470264][T11936] bio_check_eod: 15621 callbacks suppressed [ 125.470277][T11936] syz.2.3448: attempt to access beyond end of device [ 125.470277][T11936] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 125.492205][T11936] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 125.500058][T11936] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 125.508581][T11936] syz.2.3448: attempt to access beyond end of device [ 125.508581][T11936] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.522823][T11936] syz.2.3448: attempt to access beyond end of device [ 125.522823][T11936] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.524281][T11938] loop3: detected capacity change from 0 to 2048 [ 125.536192][T11936] syz.2.3448: attempt to access beyond end of device [ 125.536192][T11936] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.536256][T11936] syz.2.3448: attempt to access beyond end of device [ 125.536256][T11936] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.536292][T11936] syz.2.3448: attempt to access beyond end of device [ 125.536292][T11936] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.536349][T11936] syz.2.3448: attempt to access beyond end of device [ 125.536349][T11936] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.536386][T11936] syz.2.3448: attempt to access beyond end of device [ 125.536386][T11936] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.536474][T11936] syz.2.3448: attempt to access beyond end of device [ 125.536474][T11936] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.536644][T11936] syz.2.3448: attempt to access beyond end of device [ 125.536644][T11936] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.576078][T11939] buffer_io_error: 9 callbacks suppressed [ 125.576171][T11939] Buffer I/O error on dev loop2, logical block 2065, async page read [ 125.669129][T11939] Buffer I/O error on dev loop2, logical block 2066, async page read [ 125.677405][T11939] Buffer I/O error on dev loop2, logical block 2067, async page read [ 125.685933][T11939] Buffer I/O error on dev loop2, logical block 2068, async page read [ 125.691976][T11938] loop3: p1 < > p4 [ 125.696644][T11939] Buffer I/O error on dev loop2, logical block 2069, async page read [ 125.706618][T11939] Buffer I/O error on dev loop2, logical block 2070, async page read [ 125.708566][T11938] loop3: p4 size 8388608 extends beyond EOD, [ 125.715364][T11939] Buffer I/O error on dev loop2, logical block 2071, async page read [ 125.715402][T11939] Buffer I/O error on dev loop2, logical block 2072, async page read [ 125.715451][T11939] Buffer I/O error on dev loop2, logical block 2065, async page read [ 125.715476][T11939] Buffer I/O error on dev loop2, logical block 2066, async page read [ 125.758344][T11938] truncated [ 125.817711][T11947] loop1: detected capacity change from 0 to 512 [ 125.828916][T11947] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.884474][T11947] EXT4-fs (loop1): 1 truncate cleaned up [ 125.925942][T11955] loop1: detected capacity change from 0 to 1024 [ 125.933070][T11955] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 125.944349][T11955] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 125.970733][T11955] JBD2: no valid journal superblock found [ 125.973964][T11956] loop0: detected capacity change from 0 to 2048 [ 125.976514][T11955] EXT4-fs (loop1): Could not load journal inode [ 126.176300][T11980] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3467'. [ 126.232107][T11986] loop1: detected capacity change from 0 to 128 [ 126.293008][T11984] loop6: detected capacity change from 0 to 8192 [ 126.362850][T11988] loop1: detected capacity change from 0 to 512 [ 126.371510][T11988] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.385533][T11988] EXT4-fs (loop1): 1 truncate cleaned up [ 126.391855][T11988] EXT4-fs mount: 150 callbacks suppressed [ 126.391868][T11988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.417203][T11988] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.515322][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'. [ 126.599099][T12009] netlink: 'syz.3.3481': attribute type 4 has an invalid length. [ 126.663864][T12025] loop3: detected capacity change from 0 to 512 [ 126.676675][T12025] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.688431][T12025] EXT4-fs (loop3): 1 truncate cleaned up [ 126.705269][T12025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.719726][T12025] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.791701][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 126.872392][ T29] kauditd_printk_skb: 850 callbacks suppressed [ 126.872414][ T29] audit: type=1326 audit(1752766065.707:21412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bc3fe929 code=0x7ffc0000 [ 126.905249][ T29] audit: type=1326 audit(1752766065.707:21413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bc3fe929 code=0x7ffc0000 [ 126.929769][ T29] audit: type=1326 audit(1752766065.737:21414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f31bc3fe929 code=0x7ffc0000 [ 126.954781][ T29] audit: type=1326 audit(1752766065.737:21415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bc3fe929 code=0x7ffc0000 [ 126.979137][ T29] audit: type=1326 audit(1752766065.737:21416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.3.3504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31bc3fe929 code=0x7ffc0000 [ 127.008775][T12063] SELinux: policydb version 0 does not match my version range 15-34 [ 127.008801][ T29] audit: type=1400 audit(1752766065.837:21417): avc: denied { load_policy } for pid=12062 comm="syz.2.3507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 127.043649][T12063] SELinux: failed to load policy [ 127.112794][ T29] audit: type=1326 audit(1752766065.947:21418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.0.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c8a8e929 code=0x7ffc0000 [ 127.136626][T12075] loop0: detected capacity change from 0 to 512 [ 127.137033][T12075] EXT4-fs: Ignoring removed nobh option [ 127.152416][T12055] loop1: detected capacity change from 0 to 1024 [ 127.152475][ T29] audit: type=1326 audit(1752766065.947:21419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.0.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c8a8e929 code=0x7ffc0000 [ 127.159037][T12055] EXT4-fs: Ignoring removed bh option [ 127.184734][ T29] audit: type=1326 audit(1752766065.947:21420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.0.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa4c8a8e929 code=0x7ffc0000 [ 127.212659][T12055] EXT4-fs: inline encryption not supported [ 127.212968][T12055] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.231698][ T29] audit: type=1326 audit(1752766065.947:21421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12074 comm="syz.0.3512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c8a8e929 code=0x7ffc0000 [ 127.261284][T12055] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 127.270267][T12055] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.3503: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.285002][T12075] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3512: corrupted inode contents [ 127.285763][T12055] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.3503: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.300380][T12075] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #3: comm syz.0.3512: mark_inode_dirty error [ 127.332778][T12055] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3503: Failed to acquire dquot type 0 [ 127.350938][T12075] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #3: comm syz.0.3512: corrupted inode contents [ 127.370931][T12055] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 127.378048][T12075] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.3512: mark_inode_dirty error [ 127.392651][T12055] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3503: mark_inode_dirty error [ 127.396084][T12075] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3512: Failed to acquire dquot type 0 [ 127.417795][T12075] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3512: corrupted inode contents [ 127.431871][T12075] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.3512: mark_inode_dirty error [ 127.448471][T12055] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 127.463220][T12075] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3512: corrupted inode contents [ 127.476418][T12055] EXT4-fs (loop1): 1 orphan inode deleted [ 127.491668][T12075] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.3512: mark_inode_dirty error [ 127.497897][T12090] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3517'. [ 127.503724][ T51] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.520754][T12055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.529181][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 127.552452][T12075] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3512: corrupted inode contents [ 127.564659][T12075] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 127.583769][T12092] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3518'. [ 127.589252][T12075] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.3512: corrupted inode contents [ 127.606414][T12055] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 127.606471][T12075] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.3512: mark_inode_dirty error [ 127.645338][T12075] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 127.656902][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.710177][T12075] EXT4-fs (loop0): 1 truncate cleaned up [ 127.730901][T12075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.761603][T12109] loop3: detected capacity change from 0 to 1024 [ 127.761815][T12112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3520'. [ 127.779861][T12109] EXT4-fs: Ignoring removed nobh option [ 127.785522][T12109] EXT4-fs: Ignoring removed bh option [ 127.786500][T12075] ext4 filesystem being mounted at /717/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.813556][T12112] loop2: detected capacity change from 0 to 512 [ 127.836989][T12114] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3527'. [ 127.848142][T12114] netem: change failed [ 127.875416][T12112] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3520: Failed to acquire dquot type 1 [ 127.889630][T12112] EXT4-fs (loop2): 1 truncate cleaned up [ 127.897055][T12112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.911457][T12112] ext4 filesystem being mounted at /663/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.925848][T12112] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3520: Failed to acquire dquot type 1 [ 127.943281][T12109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.996536][T12128] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3532'. [ 128.007417][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.050878][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.086113][T12139] netlink: 'syz.3.3537': attribute type 13 has an invalid length. [ 128.148824][T12147] loop0: detected capacity change from 0 to 128 [ 128.171934][T12139] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.179272][T12139] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.193477][T12147] FAT-fs (loop0): Directory bread(block 162) failed [ 128.200722][T12147] FAT-fs (loop0): Directory bread(block 163) failed [ 128.214561][T12147] FAT-fs (loop0): Directory bread(block 164) failed [ 128.224447][T12147] FAT-fs (loop0): Directory bread(block 165) failed [ 128.232073][T12147] FAT-fs (loop0): Directory bread(block 166) failed [ 128.240171][T12147] FAT-fs (loop0): Directory bread(block 167) failed [ 128.262661][T12147] FAT-fs (loop0): Directory bread(block 168) failed [ 128.264221][T12139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.280630][T12139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.292047][T12147] FAT-fs (loop0): Directory bread(block 169) failed [ 128.313627][T12139] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.322818][T12139] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.332554][T12139] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.341629][T12139] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.425568][T12160] loop3: detected capacity change from 0 to 512 [ 128.433423][T12160] EXT4-fs: Ignoring removed nobh option [ 128.454062][T12160] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3545: corrupted inode contents [ 128.478045][T12160] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.3545: mark_inode_dirty error [ 128.502374][T12160] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.3545: corrupted inode contents [ 128.526213][T12160] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3545: mark_inode_dirty error [ 128.544308][T12160] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3545: Failed to acquire dquot type 0 [ 128.579473][T12160] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3545: corrupted inode contents [ 128.594691][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.607717][T12160] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.3545: mark_inode_dirty error [ 128.631726][T12160] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3545: corrupted inode contents [ 128.635607][T12176] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3551'. [ 128.661017][T12176] loop0: detected capacity change from 0 to 512 [ 128.686950][T12176] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3551: Failed to acquire dquot type 1 [ 128.703816][T12160] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3545: mark_inode_dirty error [ 128.718898][T12160] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3545: corrupted inode contents [ 128.732766][T12176] EXT4-fs (loop0): 1 truncate cleaned up [ 128.733059][T12176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.760534][T12176] ext4 filesystem being mounted at /722/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.773800][T12160] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 128.780935][T12176] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3551: Failed to acquire dquot type 1 [ 128.795803][T12175] SELinux: ebitmap: truncated map [ 128.804082][T12175] SELinux: failed to load policy [ 128.827972][T12160] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3545: corrupted inode contents [ 128.862313][T12160] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.3545: mark_inode_dirty error [ 128.897510][T12160] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 128.897837][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3560'. [ 128.922794][T12160] EXT4-fs (loop3): 1 truncate cleaned up [ 128.928911][T12160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.956924][T12160] ext4 filesystem being mounted at /752/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.970071][T12199] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 129.035562][T12201] loop1: detected capacity change from 0 to 4096 [ 129.045686][T12201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.060896][T12201] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.111319][T12209] loop2: detected capacity change from 0 to 512 [ 129.123735][T12209] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 129.139703][T12209] EXT4-fs (loop2): mount failed [ 129.213588][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.274081][T12225] vhci_hcd: invalid port number 96 [ 129.279276][T12225] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 129.303800][T12234] SELinux: failed to load policy [ 129.348272][T12243] wireguard0: entered promiscuous mode [ 129.354458][T12243] wireguard0: entered allmulticast mode [ 129.357849][T12247] loop1: detected capacity change from 0 to 512 [ 129.368520][T12247] EXT4-fs: Ignoring removed nobh option [ 129.382664][T12247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3582: corrupted inode contents [ 129.397081][T12247] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.3582: mark_inode_dirty error [ 129.409638][T12247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3582: corrupted inode contents [ 129.423459][T12247] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3582: mark_inode_dirty error [ 129.435208][T12247] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3582: Failed to acquire dquot type 0 [ 129.448347][T12247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3582: corrupted inode contents [ 129.462667][T12247] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.3582: mark_inode_dirty error [ 129.474229][T12247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3582: corrupted inode contents [ 129.487618][T12247] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3582: mark_inode_dirty error [ 129.501643][T12247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3582: corrupted inode contents [ 129.539707][T12247] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 129.552829][T12247] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3582: corrupted inode contents [ 129.566482][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.583527][T12247] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.3582: mark_inode_dirty error [ 129.620031][T12247] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 129.637141][T12264] rdma_op ffff88812cf56580 conn xmit_rdma 0000000000000000 [ 129.660838][T12247] EXT4-fs (loop1): 1 truncate cleaned up [ 129.667078][T12247] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.683545][T12247] ext4 filesystem being mounted at /780/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.898557][T12287] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.917996][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.951818][T12293] program syz.0.3602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.095648][T12316] loop6: detected capacity change from 0 to 512 [ 130.102479][T12316] EXT4-fs: Ignoring removed nobh option [ 130.113278][T12316] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.3610: corrupted inode contents [ 130.125349][T12316] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #3: comm syz.6.3610: mark_inode_dirty error [ 130.137509][T12316] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #3: comm syz.6.3610: corrupted inode contents [ 130.152057][T12316] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.3610: mark_inode_dirty error [ 130.164342][T12316] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3610: Failed to acquire dquot type 0 [ 130.175997][T12316] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3610: corrupted inode contents [ 130.189708][T12316] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #16: comm syz.6.3610: mark_inode_dirty error [ 130.202134][T12316] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3610: corrupted inode contents [ 130.214920][T12316] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3610: mark_inode_dirty error [ 130.227121][T12316] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3610: corrupted inode contents [ 130.239160][T12316] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 130.249445][T12316] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #16: comm syz.6.3610: corrupted inode contents [ 130.262275][T12316] EXT4-fs error (device loop6): ext4_truncate:4597: inode #16: comm syz.6.3610: mark_inode_dirty error [ 130.274184][T12316] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 130.284152][T12316] EXT4-fs (loop6): 1 truncate cleaned up [ 130.290304][T12316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.304324][T12316] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.531293][T12326] loop3: detected capacity change from 0 to 512 [ 130.542359][T12326] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3612: Failed to acquire dquot type 1 [ 130.554525][T12326] EXT4-fs (loop3): 1 truncate cleaned up [ 130.560518][T12326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.573667][T12326] ext4 filesystem being mounted at /759/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.585275][T12326] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3612: Failed to acquire dquot type 1 [ 130.839058][T10428] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.855252][T12330] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 130.936626][T12343] sd 0:0:1:0: device reset [ 130.951522][T12347] loop1: detected capacity change from 0 to 128 [ 130.980016][T12347] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 130.989028][T12347] FAT-fs (loop1): Filesystem has been set read-only [ 131.000847][T12347] bio_check_eod: 10013 callbacks suppressed [ 131.000888][T12347] syz.1.3621: attempt to access beyond end of device [ 131.000888][T12347] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 131.059029][T12347] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 131.067564][T12347] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 131.100092][T12347] syz.1.3621: attempt to access beyond end of device [ 131.100092][T12347] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.135030][T12361] loop6: detected capacity change from 0 to 128 [ 131.146644][T12347] syz.1.3621: attempt to access beyond end of device [ 131.146644][T12347] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.147832][T12361] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.176112][T12361] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.226283][T12347] syz.1.3621: attempt to access beyond end of device [ 131.226283][T12347] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.264303][T10428] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.272855][T12347] syz.1.3621: attempt to access beyond end of device [ 131.272855][T12347] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.299287][T12347] syz.1.3621: attempt to access beyond end of device [ 131.299287][T12347] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.316862][T12364] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 131.330332][T12364] SELinux: failed to load policy [ 131.341792][T12347] syz.1.3621: attempt to access beyond end of device [ 131.341792][T12347] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.380322][T12347] syz.1.3621: attempt to access beyond end of device [ 131.380322][T12347] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.405123][T12347] syz.1.3621: attempt to access beyond end of device [ 131.405123][T12347] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.419812][T12347] syz.1.3621: attempt to access beyond end of device [ 131.419812][T12347] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.440588][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.499850][T12378] netlink: 'syz.6.3635': attribute type 10 has an invalid length. [ 131.508970][T12378] __nla_validate_parse: 2 callbacks suppressed [ 131.508983][T12378] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3635'. [ 131.548714][T12378] team0: Port device geneve1 added [ 131.559213][T12383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3634'. [ 131.575142][T12380] syz_tun: entered allmulticast mode [ 131.610951][T12383] loop2: detected capacity change from 0 to 512 [ 131.622724][T12379] syz_tun: left allmulticast mode [ 131.638861][T12383] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3634: Failed to acquire dquot type 1 [ 131.661879][T12383] EXT4-fs (loop2): 1 truncate cleaned up [ 131.679125][T12383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.711925][T12395] loop3: detected capacity change from 0 to 128 [ 131.723038][T12395] EXT4-fs: Ignoring removed orlov option [ 131.729139][T12383] ext4 filesystem being mounted at /692/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.755313][T12395] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.774979][T12383] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3634: Failed to acquire dquot type 1 [ 131.797319][T12395] ext4 filesystem being mounted at /763/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.887994][ T29] kauditd_printk_skb: 1198 callbacks suppressed [ 131.888009][ T29] audit: type=1326 audit(1752766070.717:22592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36c57c58e7 code=0x7ffc0000 [ 131.920652][ T29] audit: type=1326 audit(1752766070.757:22593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36c576ab19 code=0x7ffc0000 [ 131.944798][ T29] audit: type=1326 audit(1752766070.757:22594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36c57c58e7 code=0x7ffc0000 [ 131.969014][ T29] audit: type=1326 audit(1752766070.757:22595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36c576ab19 code=0x7ffc0000 [ 131.993056][ T29] audit: type=1326 audit(1752766070.757:22596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 132.020902][ T29] audit: type=1326 audit(1752766070.807:22597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36c57c58e7 code=0x7ffc0000 [ 132.044991][ T29] audit: type=1326 audit(1752766070.807:22598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36c576ab19 code=0x7ffc0000 [ 132.069123][ T29] audit: type=1326 audit(1752766070.807:22599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 132.093314][ T29] audit: type=1326 audit(1752766070.827:22600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36c57c58e7 code=0x7ffc0000 [ 132.117353][ T29] audit: type=1326 audit(1752766070.827:22601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12375 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36c576ab19 code=0x7ffc0000 [ 132.265015][T12422] loop0: detected capacity change from 0 to 1024 [ 132.280064][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.292643][T12422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.306754][T12422] ext4 filesystem being mounted at /749/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.337311][T12422] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 132.366860][T12422] EXT4-fs (loop0): Remounting filesystem read-only [ 132.385771][ T31] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4940: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30 [ 132.404850][T12428] loop3: detected capacity change from 0 to 1024 [ 132.411846][T12428] EXT4-fs: Ignoring removed bh option [ 132.417286][T12428] EXT4-fs: inline encryption not supported [ 132.440826][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.440826][T12428] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 132.454174][T12422] syz.0.3655 (12422) used greatest stack depth: 9088 bytes left [ 132.471614][T12428] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 132.493924][T12428] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.3656: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.509251][T12438] netlink: 'syz.1.3662': attribute type 10 has an invalid length. [ 132.517721][T12438] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3662'. [ 132.527489][T12438] dummy0: entered promiscuous mode [ 132.528062][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.533409][T12438] bridge0: port 4(dummy0) entered blocking state [ 132.533490][T12438] bridge0: port 4(dummy0) entered disabled state [ 132.533553][T12438] dummy0: entered allmulticast mode [ 132.554102][T12428] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.3656: lblock 0 mapped to illegal pblock 48 (length 1) [ 132.560150][T12441] program syz.2.3658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.591013][T12441] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 132.591388][T12428] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3656: Failed to acquire dquot type 0 [ 132.672205][T12428] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 132.692946][T12428] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3656: mark_inode_dirty error [ 132.754897][T12428] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 132.780310][T12428] EXT4-fs (loop3): 1 orphan inode deleted [ 132.788365][T12428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.804505][ T6497] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 132.823511][ T6497] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 132.841301][T12465] loop1: detected capacity change from 0 to 512 [ 132.856344][T12465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.872354][T12465] ext4 filesystem being mounted at /797/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.884610][T12428] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 132.891925][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3677'. [ 132.910568][T12465] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 132.932487][T12476] loop2: detected capacity change from 0 to 512 [ 132.942026][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.952004][T12465] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 132.967809][T12476] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11d, mo2=0002] [ 132.981643][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.016022][T12476] System zones: 1-12 [ 133.024565][T12482] loop3: detected capacity change from 0 to 512 [ 133.034393][T12476] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.3678: corrupted in-inode xattr: e_value size too large [ 133.057558][T12482] EXT4-fs: Ignoring removed bh option [ 133.074295][T12486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3683'. [ 133.097411][T12482] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.107188][T12482] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 133.131333][T12476] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3678: couldn't read orphan inode 15 (err -117) [ 133.174758][T12482] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 133.185656][T12476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.188469][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.207197][T12492] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3684'. [ 133.242358][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 133.254473][T12482] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 133.262582][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.307526][T12482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.342668][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.374064][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.390393][T12492] loop6: detected capacity change from 0 to 512 [ 133.434502][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.457939][T12492] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3684: Failed to acquire dquot type 1 [ 133.471602][T12492] EXT4-fs (loop6): 1 truncate cleaned up [ 133.477638][T12492] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.492820][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 133.504982][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.512843][T12492] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.574495][T12492] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3684: Failed to acquire dquot type 1 [ 133.588056][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.596611][T12513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3693'. [ 133.610836][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 133.632433][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.756454][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.798077][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 133.814115][T12526] loop2: detected capacity change from 0 to 8192 [ 133.820423][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.874806][T12535] loop3: detected capacity change from 0 to 164 [ 133.939506][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 133.962720][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 134.069198][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 134.124488][T10428] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.148809][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3712'. [ 134.261952][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 134.376986][T12569] loop6: detected capacity change from 0 to 2048 [ 134.401995][T12569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.432771][T12569] EXT4-fs (loop6): shut down requested (0) [ 134.439564][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 134.469169][T10428] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.521849][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 134.615955][T12579] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3722'. [ 134.639047][T12579] loop6: detected capacity change from 0 to 512 [ 134.653125][T12579] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3722: Failed to acquire dquot type 1 [ 134.665422][T12579] EXT4-fs (loop6): 1 truncate cleaned up [ 134.672620][T12579] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.685675][T12579] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.686173][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 134.708079][T12579] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3722: Failed to acquire dquot type 1 [ 134.784690][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'. [ 135.254315][T12609] loop0: detected capacity change from 0 to 128 [ 135.287853][T12609] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.316453][T12611] loop3: detected capacity change from 0 to 8192 [ 135.336805][T12609] ext4 filesystem being mounted at /769/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.460894][T12609] loop0: detected capacity change from 128 to 64 [ 135.468205][T12620] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Out of memory [ 135.481343][T12620] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Out of memory [ 135.492238][T12620] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #13: comm syz.0.3744: mark_inode_dirty error [ 135.509102][T10428] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.548867][T12620] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -12) [ 135.614586][ T3305] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Out of memory [ 135.625134][ T3305] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz-executor: mark_inode_dirty error [ 135.718102][T11802] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.729971][T12635] loop2: detected capacity change from 0 to 2048 [ 135.899030][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.984522][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.097565][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.184326][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.295608][ T31] team0: left allmulticast mode [ 136.300791][ T31] team0: left promiscuous mode [ 136.305833][ T31] bridge0: port 1(team0) entered disabled state [ 136.403214][ T31] bond0 (unregistering): Released all slaves [ 136.435676][T12660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.444271][T12660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.468301][T12648] chnl_net:caif_netlink_parms(): no params data found [ 136.484703][ T31] hsr_slave_0: left promiscuous mode [ 136.499322][ T31] hsr_slave_1: left promiscuous mode [ 136.523151][ T31] veth1_macvtap: left promiscuous mode [ 136.528746][ T31] veth0_macvtap: left promiscuous mode [ 136.540249][ T31] veth1_vlan: left promiscuous mode [ 136.570993][ T31] veth0_vlan: left promiscuous mode [ 136.690038][T12648] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.697797][T12648] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.708078][T12648] bridge_slave_0: entered allmulticast mode [ 136.715351][T12648] bridge_slave_0: entered promiscuous mode [ 136.722374][T12648] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.729444][T12648] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.738703][T12648] bridge_slave_1: entered allmulticast mode [ 136.745393][T12648] bridge_slave_1: entered promiscuous mode [ 136.764763][T12648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.775769][T12648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.798169][T12648] team0: Port device team_slave_0 added [ 136.804761][T12648] team0: Port device team_slave_1 added [ 136.824116][T12648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.831725][T12648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.859500][T12648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.872225][T12648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.879237][T12648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.907067][T12648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.940071][T12648] hsr_slave_0: entered promiscuous mode [ 136.946795][T12648] hsr_slave_1: entered promiscuous mode [ 136.953485][T12648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.963052][T12648] Cannot create hsr debugfs directory [ 136.981234][ T31] IPVS: stop unused estimator thread 0... [ 137.075022][T12648] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 137.083303][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3762'. [ 137.114235][T12684] IPVS: Error joining to the multicast group [ 137.130427][T12648] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 137.150353][T12648] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 137.168821][T12648] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 137.256833][T12648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.284139][T12697] rdma_op ffff88812af17180 conn xmit_rdma 0000000000000000 [ 137.292642][T12648] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.303272][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.310431][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.331388][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.338500][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.349829][T12699] xt_NFQUEUE: number of total queues is 0 [ 137.396125][ T29] kauditd_printk_skb: 1495 callbacks suppressed [ 137.396139][ T29] audit: type=1326 audit(1752766076.227:24086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 137.433539][T12648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.448092][T12707] random: crng reseeded on system resumption [ 137.473076][ T29] audit: type=1326 audit(1752766076.237:24087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 137.497303][ T29] audit: type=1326 audit(1752766076.257:24088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 137.521422][ T29] audit: type=1326 audit(1752766076.257:24089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 137.528592][T12711] vlan2: entered allmulticast mode [ 137.544971][ T29] audit: type=1326 audit(1752766076.257:24090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 137.544999][ T29] audit: type=1326 audit(1752766076.257:24091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 137.545169][ T29] audit: type=1326 audit(1752766076.257:24092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 137.545193][ T29] audit: type=1326 audit(1752766076.257:24093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 137.545371][ T29] audit: type=1326 audit(1752766076.257:24094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 137.545394][ T29] audit: type=1326 audit(1752766076.257:24095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.2.3768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c57ce929 code=0x7ffc0000 [ 137.723594][ T7574] bond0: (slave syz_tun): Releasing backup interface [ 137.781771][T12648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.973255][T12648] veth0_vlan: entered promiscuous mode [ 137.990853][T12648] veth1_vlan: entered promiscuous mode [ 138.059200][T12648] veth0_macvtap: entered promiscuous mode [ 138.073190][T12648] veth1_macvtap: entered promiscuous mode [ 138.080146][ T6497] bridge_slave_1: left allmulticast mode [ 138.086477][ T6497] bridge_slave_1: left promiscuous mode [ 138.092906][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.107361][ T3314] EXT4-fs error: 79 callbacks suppressed [ 138.107370][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.134805][ T6497] bridge_slave_0: left allmulticast mode [ 138.134806][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.141084][ T6497] bridge_slave_0: left promiscuous mode [ 138.167737][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.225917][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.246360][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.275750][ T6497] team0: Port device bond0 removed [ 138.282594][ T6497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.292543][ T6497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.303191][ T6497] bond0 (unregistering): Released all slaves [ 138.325660][T12648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.326979][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.347797][T12648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.367059][ T3314] EXT4-fs warning: 36 callbacks suppressed [ 138.367071][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 138.386307][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.414543][T12648] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.424051][T12648] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.432768][T12648] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.443396][T12648] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.460185][ T6497] hsr_slave_0: left promiscuous mode [ 138.466270][ T6497] hsr_slave_1: left promiscuous mode [ 138.481041][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.491983][ T6497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.539815][ T6497] team0 (unregistering): Port device team_slave_1 removed [ 138.556119][ T6497] team0 (unregistering): Port device team_slave_0 removed [ 138.570115][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.605024][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 138.638453][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.704105][T12735] chnl_net:caif_netlink_parms(): no params data found [ 138.755749][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.779878][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 138.800128][T12735] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.800519][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.808079][T12735] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.880511][T12735] bridge_slave_0: entered allmulticast mode [ 138.887554][T12735] bridge_slave_0: entered promiscuous mode [ 138.898966][T12735] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.906098][T12735] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.914587][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 138.914745][T12735] bridge_slave_1: entered allmulticast mode [ 138.934331][T12735] bridge_slave_1: entered promiscuous mode [ 138.954938][T12735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.967359][T12735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.987463][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3787'. [ 138.997839][T12735] team0: Port device team_slave_0 added [ 139.006191][T12735] team0: Port device team_slave_1 added [ 139.032927][T12776] loop6: detected capacity change from 0 to 512 [ 139.050183][T12735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.057215][T12735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.084272][T12735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.096969][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 139.109615][T12776] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3787: Failed to acquire dquot type 1 [ 139.127847][T12735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.130360][T12776] EXT4-fs (loop6): 1 truncate cleaned up [ 139.135009][T12735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.150579][T12776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.169032][T12735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.193552][T12776] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.213488][T12776] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3787: Failed to acquire dquot type 1 [ 139.235950][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 139.252494][T12785] loop3: detected capacity change from 0 to 512 [ 139.259726][T12785] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 139.261310][T12735] hsr_slave_0: entered promiscuous mode [ 139.276439][T12735] hsr_slave_1: entered promiscuous mode [ 139.276444][T12785] EXT4-fs (loop3): 1 truncate cleaned up [ 139.276930][T12785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.282464][T12735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.310089][T12735] Cannot create hsr debugfs directory [ 139.352912][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.410441][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 139.453682][T12735] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 139.472782][T12735] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 139.489829][T12735] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 139.517871][T12735] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 139.539445][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 139.559387][T12735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.584543][T12735] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.595969][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.603080][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.625209][T12735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.636226][T12735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.652676][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.659770][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.708618][T12810] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3797'. [ 139.741638][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 139.753442][T12735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.767806][T12810] loop3: detected capacity change from 0 to 512 [ 139.795014][T12810] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3797: Failed to acquire dquot type 1 [ 139.829125][T12810] EXT4-fs (loop3): 1 truncate cleaned up [ 139.859622][T10428] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.859914][T12810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.906138][T12810] ext4 filesystem being mounted at /795/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.916766][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 139.940341][T12810] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3797: Failed to acquire dquot type 1 [ 139.964997][T12824] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 140.068504][T12735] veth0_vlan: entered promiscuous mode [ 140.102388][T12735] veth1_vlan: entered promiscuous mode [ 140.128948][T12735] veth0_macvtap: entered promiscuous mode [ 140.149681][T12831] vhci_hcd: invalid port number 96 [ 140.156597][T12831] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 140.167460][T12735] veth1_macvtap: entered promiscuous mode [ 140.192463][T12735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.221291][T12735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.247416][T12735] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.256831][T12735] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.265658][T12735] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.276252][T12735] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.341404][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.351214][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.378475][T12846] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3776'. [ 140.398780][T12846] loop8: detected capacity change from 0 to 512 [ 140.417643][T12846] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3776: Failed to acquire dquot type 1 [ 140.437415][T12846] EXT4-fs (loop8): 1 truncate cleaned up [ 140.443990][T12846] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.486257][T12846] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.502009][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3806'. [ 140.512955][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3806'. [ 140.522043][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3806'. [ 140.533318][T12846] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3776: Failed to acquire dquot type 1 [ 140.558403][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3806'. [ 140.567405][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3806'. [ 140.577591][T12852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3806'. [ 140.597349][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.654139][T12856] pim6reg1: entered promiscuous mode [ 140.659470][T12856] pim6reg1: entered allmulticast mode [ 140.678641][T12859] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 140.688538][T12859] SELinux: failed to load policy [ 140.831333][T12868] syzkaller1: entered promiscuous mode [ 140.836889][T12868] syzkaller1: entered allmulticast mode [ 141.013032][T12877] netlink: 'syz.7.3816': attribute type 10 has an invalid length. [ 141.238127][T12892] netlink: 'syz.3.3823': attribute type 1 has an invalid length. [ 141.246540][T12892] netlink: 'syz.3.3823': attribute type 1 has an invalid length. [ 141.294669][T12902] openvswitch: netlink: Message has 6 unknown bytes. [ 141.303081][T12735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.325131][ T6503] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4b [ 141.484022][T12919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12919 comm=syz.8.3834 [ 141.496672][T12919] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12919 comm=syz.8.3834 [ 141.756971][T12939] loop8: detected capacity change from 0 to 512 [ 141.792954][T12939] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.834318][T12945] loop6: detected capacity change from 0 to 512 [ 141.853521][T12945] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 141.865725][T12945] System zones: 1-12 [ 141.877091][T12945] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.3845: corrupted in-inode xattr: e_value size too large [ 141.877135][T12735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.905953][T12945] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.3845: couldn't read orphan inode 15 (err -117) [ 141.937536][T12945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.074645][T12965] loop8: detected capacity change from 0 to 128 [ 142.112440][T10428] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.217875][T12977] __nla_validate_parse: 7 callbacks suppressed [ 142.217891][T12977] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3857'. [ 142.279765][T12977] loop8: detected capacity change from 0 to 512 [ 142.313695][T12977] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3857: Failed to acquire dquot type 1 [ 142.358553][T12977] EXT4-fs (loop8): 1 truncate cleaned up [ 142.389889][T12977] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.402631][ T29] kauditd_printk_skb: 937 callbacks suppressed [ 142.402643][ T29] audit: type=1326 audit(1752766081.237:25019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.8.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7f51558e7 code=0x7ffc0000 [ 142.432740][T12977] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.444587][T12977] Quota error (device loop8): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 142.445409][ T29] audit: type=1326 audit(1752766081.237:25020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.8.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb7f50fab19 code=0x7ffc0000 [ 142.455216][T12977] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 142.455237][T12977] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3857: Failed to acquire dquot type 1 [ 142.502360][T12989] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3863'. [ 142.504065][ T29] audit: type=1326 audit(1752766081.237:25021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.8.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb7f515e929 code=0x7ffc0000 [ 142.622023][ T29] audit: type=1326 audit(1752766081.267:25022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.8.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7f51558e7 code=0x7ffc0000 [ 142.645695][ T29] audit: type=1326 audit(1752766081.267:25023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.8.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb7f50fab19 code=0x7ffc0000 [ 142.669475][ T29] audit: type=1326 audit(1752766081.267:25024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.8.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb7f515e929 code=0x7ffc0000 [ 142.693054][ T29] audit: type=1326 audit(1752766081.267:25025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.8.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7f51558e7 code=0x7ffc0000 [ 142.716752][ T29] audit: type=1326 audit(1752766081.267:25026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12971 comm="syz.8.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb7f50fab19 code=0x7ffc0000 [ 143.054946][T12735] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.133102][T13038] syz.8.3886: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 143.148426][T13038] CPU: 1 UID: 0 PID: 13038 Comm: syz.8.3886 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 143.148470][T13038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.148477][T13038] Call Trace: [ 143.148482][T13038] [ 143.148487][T13038] __dump_stack+0x1d/0x30 [ 143.148499][T13038] dump_stack_lvl+0xe8/0x140 [ 143.148510][T13038] dump_stack+0x15/0x1b [ 143.148580][T13038] warn_alloc+0x12b/0x1a0 [ 143.148598][T13038] __vmalloc_node_range_noprof+0x9c/0xe00 [ 143.148624][T13038] ? __futex_wait+0x1ff/0x260 [ 143.148666][T13038] ? __pfx_futex_wake_mark+0x10/0x10 [ 143.148682][T13038] ? __rcu_read_unlock+0x4f/0x70 [ 143.148694][T13038] ? avc_has_perm_noaudit+0x1b1/0x200 [ 143.148783][T13038] ? should_fail_ex+0x30/0x280 [ 143.148846][T13038] ? xskq_create+0x36/0xe0 [ 143.148859][T13038] vmalloc_user_noprof+0x7d/0xb0 [ 143.148875][T13038] ? xskq_create+0x80/0xe0 [ 143.148886][T13038] xskq_create+0x80/0xe0 [ 143.148935][T13038] xsk_init_queue+0x95/0xf0 [ 143.148947][T13038] xsk_setsockopt+0x35c/0x510 [ 143.148957][T13038] ? __pfx_xsk_setsockopt+0x10/0x10 [ 143.148969][T13038] __sys_setsockopt+0x184/0x200 [ 143.149045][T13038] __x64_sys_setsockopt+0x64/0x80 [ 143.149061][T13038] x64_sys_call+0x2bd5/0x2fb0 [ 143.149073][T13038] do_syscall_64+0xd2/0x200 [ 143.149083][T13038] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.149130][T13038] ? clear_bhb_loop+0x40/0x90 [ 143.149142][T13038] ? clear_bhb_loop+0x40/0x90 [ 143.149225][T13038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.149250][T13038] RIP: 0033:0x7fb7f515e929 [ 143.149259][T13038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.149269][T13038] RSP: 002b:00007fb7f37c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.149280][T13038] RAX: ffffffffffffffda RBX: 00007fb7f5385fa0 RCX: 00007fb7f515e929 [ 143.149306][T13038] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 143.149313][T13038] RBP: 00007fb7f51e0ca1 R08: 0000000000000004 R09: 0000000000000000 [ 143.149320][T13038] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.149326][T13038] R13: 0000000000000000 R14: 00007fb7f5385fa0 R15: 00007ffca1a2a178 [ 143.149378][T13038] [ 143.149382][T13038] Mem-Info: [ 143.173498][ T3314] EXT4-fs error: 84 callbacks suppressed [ 143.173512][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 143.173768][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 143.250519][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 143.254099][T13038] active_anon:3708 inactive_anon:20 isolated_anon:0 [ 143.254099][T13038] active_file:5749 inactive_file:2563 isolated_file:0 [ 143.254099][T13038] unevictable:0 dirty:317 writeback:1 [ 143.254099][T13038] slab_reclaimable:3178 slab_unreclaimable:31932 [ 143.254099][T13038] mapped:28795 shmem:413 pagetables:1001 [ 143.254099][T13038] sec_pagetables:0 bounce:0 [ 143.254099][T13038] kernel_misc_reclaimable:0 [ 143.254099][T13038] free:1877704 free_pcp:19737 free_cma:0 [ 143.258374][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 143.264457][T13038] Node 0 active_anon:14832kB inactive_anon:80kB active_file:22996kB inactive_file:10252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115180kB dirty:1268kB writeback:4kB shmem:1652kB writeback_tmp:0kB kernel_stack:3232kB pagetables:4004kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 143.408894][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 143.423520][T13038] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 143.460446][ T3314] EXT4-fs warning: 37 callbacks suppressed [ 143.460461][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 143.465974][T13038] lowmem_reserve[]: [ 143.514385][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 143.534237][T13038] 0 [ 143.619284][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 143.621825][T13038] 2882 [ 143.634735][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 143.637519][T13038] 7860 7860 [ 143.637535][T13038] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3528kB free_cma:0kB [ 143.659545][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 143.714603][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 143.735328][T13038] lowmem_reserve[]: [ 143.755015][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 143.773705][T13038] 0 0 4978 4978 [ 143.773729][T13038] Node 0 Normal free:4551036kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14888kB inactive_anon:76kB active_file:22996kB inactive_file:10224kB unevictable:0kB writepending:1280kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:71200kB local_pcp:38800kB free_cma:0kB [ 143.779309][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /797/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 143.835837][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 143.850900][T13038] lowmem_reserve[]: 0 0 0 0 [ 143.850932][T13038] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 143.883307][T13038] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB [ 143.899417][T13038] Node 0 Normal: 129*4kB (U) 58*8kB (UM) 212*16kB (UM) 18*32kB (UME) 3*64kB (UM) 9*128kB (UME) 5*256kB (UME) 6*512kB (UM) 58*1024kB (UM) 46*2048kB (UME) 1071*4096kB (UM) = 4551060kB [ 143.919940][T13038] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 143.922819][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 143.929307][T13038] 8707 total pagecache pages [ 143.947911][T13038] 20 pages in swap cache [ 143.952166][T13038] Free swap = 124916kB [ 143.956322][T13038] Total swap = 124996kB [ 143.961038][T13038] 2097051 pages RAM [ 143.964848][T13038] 0 pages HighMem/MovableOnly [ 143.969510][T13038] 80812 pages reserved [ 144.010605][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 144.110654][T13065] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3893'. [ 144.128003][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 144.204577][T13065] loop3: detected capacity change from 0 to 512 [ 144.226896][T13076] netlink: 'syz.6.3901': attribute type 6 has an invalid length. [ 144.234673][T13076] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3901'. [ 144.255646][T13065] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3893: Failed to acquire dquot type 1 [ 144.261191][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3086: inode #12: comm syz-executor: directory missing '.' [ 144.283017][T13080] loop8: detected capacity change from 0 to 1024 [ 144.293069][T13065] EXT4-fs (loop3): 1 truncate cleaned up [ 144.307481][ T3314] syz_tun (unregistering): left allmulticast mode [ 144.314762][T13065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.316038][T13080] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.356918][T13065] ext4 filesystem being mounted at /826/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.367726][T13089] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3903'. [ 144.379122][T13089] loop7: detected capacity change from 0 to 512 [ 144.397523][T13080] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.3902: Allocating blocks 385-513 which overlap fs metadata [ 144.420930][T13089] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3903: Failed to acquire dquot type 1 [ 144.435241][T13065] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3893: Failed to acquire dquot type 1 [ 144.439598][T13080] EXT4-fs (loop8): pa ffff88810572a380: logic 16, phys. 129, len 24 [ 144.454808][T13080] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 144.461493][T13089] EXT4-fs (loop7): 1 truncate cleaned up [ 144.480454][T13089] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.504714][T13089] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.530720][T13089] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3903: Failed to acquire dquot type 1 [ 144.556811][T13104] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3909'. [ 144.568050][T13104] veth0_macvtap: left promiscuous mode [ 144.601055][T13111] loop8: detected capacity change from 0 to 164 [ 144.745292][T13097] chnl_net:caif_netlink_parms(): no params data found [ 144.758598][T13121] serio: Serial port ptm2 [ 144.773222][T13123] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13123 comm=syz.6.3914 [ 144.785938][T13123] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13123 comm=syz.6.3914 [ 144.805911][T13097] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.813331][T13097] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.823348][T13097] bridge_slave_0: entered allmulticast mode [ 144.830154][T13097] bridge_slave_0: entered promiscuous mode [ 144.837545][T13097] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.845403][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.855236][T13097] bridge_slave_1: entered allmulticast mode [ 144.863143][T13097] bridge_slave_1: entered promiscuous mode [ 144.872471][T13133] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.894928][T13097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.907336][T13097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.920127][T13133] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.953687][T13097] team0: Port device team_slave_0 added [ 144.965665][T13097] team0: Port device team_slave_1 added [ 145.003024][T13133] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.016848][T13097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.024425][T13097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.051006][T13097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.063058][T13097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.070071][T13097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.096669][T13097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.120075][T13133] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.164364][T13097] hsr_slave_0: entered promiscuous mode [ 145.174107][T13097] hsr_slave_1: entered promiscuous mode [ 145.180449][T13097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.188002][T13097] Cannot create hsr debugfs directory [ 145.231311][T13133] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.253971][T13133] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.311521][T13133] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.356675][T13133] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.446795][T13097] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 145.474643][T13097] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 145.486389][T13097] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 145.496971][T13097] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 145.559987][T13097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.572741][T13097] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.595672][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.602865][ T6497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.623623][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.630753][ T6497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.705052][T13097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.772872][T13097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.928348][T13097] veth0_vlan: entered promiscuous mode [ 145.937447][T13097] veth1_vlan: entered promiscuous mode [ 145.956643][T13097] veth0_macvtap: entered promiscuous mode [ 145.978958][T13097] veth1_macvtap: entered promiscuous mode [ 145.994071][T13246] loop8: detected capacity change from 0 to 1024 [ 146.004285][T13097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.012967][T13246] EXT4-fs: Ignoring removed orlov option [ 146.020679][T13097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.031063][T13097] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.039782][T13097] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.049142][T13097] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.057888][T13097] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.073377][T13250] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 146.126379][T13261] netlink: 'syz.9.3916': attribute type 10 has an invalid length. [ 146.134815][T13261] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3916'. [ 146.160553][T13261] dummy0: entered promiscuous mode [ 146.166302][T13261] bridge0: port 3(dummy0) entered blocking state [ 146.173560][T13261] bridge0: port 3(dummy0) entered disabled state [ 146.182201][T13261] dummy0: entered allmulticast mode [ 146.188810][T13261] bridge0: port 3(dummy0) entered blocking state [ 146.195194][T13261] bridge0: port 3(dummy0) entered forwarding state [ 146.276612][T13278] loop3: detected capacity change from 0 to 512 [ 146.288394][T13278] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.304742][T13278] EXT4-fs (loop3): 1 truncate cleaned up [ 146.384228][T13289] loop7: detected capacity change from 0 to 512 [ 146.424241][T13289] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 146.462827][T13289] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #17: comm syz.7.3976: iget: bad i_size value: -6917529027641081756 [ 146.488975][T13289] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3976: couldn't read orphan inode 17 (err -117) [ 146.508697][T13289] 9pnet: p9_errstr2errno: server reported unknown error @΂(aaaaaaaaaaaaaaaaaaaaaaaaa [ 146.672079][T13319] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3983'. [ 146.702532][T13323] Cannot find del_set index 0 as target [ 146.708353][T13319] loop6: detected capacity change from 0 to 512 [ 146.736344][T13319] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3983: Failed to acquire dquot type 1 [ 146.753326][T13319] EXT4-fs (loop6): 1 truncate cleaned up [ 146.759431][T13319] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.773680][T13319] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.3983: Failed to acquire dquot type 1 [ 146.885676][T13346] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3996'. [ 146.909229][T13346] loop7: detected capacity change from 0 to 512 [ 146.937201][T13346] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3996: Failed to acquire dquot type 1 [ 146.957076][T13346] EXT4-fs (loop7): 1 truncate cleaned up [ 146.980177][T13346] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.993713][T13346] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3996: Failed to acquire dquot type 1 [ 147.412186][ T29] kauditd_printk_skb: 1186 callbacks suppressed [ 147.412199][ T29] audit: type=1326 audit(1752766086.247:26197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13338 comm="syz.7.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f47be1258e7 code=0x7ffc0000 [ 147.445872][ T29] audit: type=1326 audit(1752766086.277:26198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13338 comm="syz.7.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47be0cab19 code=0x7ffc0000 [ 147.469460][ T29] audit: type=1326 audit(1752766086.277:26199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13338 comm="syz.7.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f47be1258e7 code=0x7ffc0000 [ 147.493713][ T29] audit: type=1326 audit(1752766086.277:26200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13338 comm="syz.7.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f47be0cab19 code=0x7ffc0000 [ 147.517191][ T29] audit: type=1326 audit(1752766086.277:26201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13338 comm="syz.7.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f47be12e929 code=0x7ffc0000 [ 147.541178][ T29] audit: type=1326 audit(1752766086.277:26202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13308 comm="syz.6.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f074e9e58e7 code=0x7ffc0000 [ 147.564689][ T29] audit: type=1326 audit(1752766086.277:26203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13308 comm="syz.6.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f074e98ab19 code=0x7ffc0000 [ 147.588771][ T29] audit: type=1326 audit(1752766086.277:26204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13308 comm="syz.6.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f074e9ee929 code=0x7ffc0000 [ 147.613356][ T29] audit: type=1326 audit(1752766086.307:26205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13308 comm="syz.6.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f074e9e58e7 code=0x7ffc0000 [ 147.636853][ T29] audit: type=1326 audit(1752766086.307:26206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13308 comm="syz.6.3983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f074e98ab19 code=0x7ffc0000 [ 147.798114][T13381] loop8: detected capacity change from 0 to 8192 [ 147.807193][T13390] loop9: detected capacity change from 0 to 164 [ 147.819343][T13390] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 147.853216][T13394] netlink: 'syz.7.4019': attribute type 39 has an invalid length. [ 148.212654][T13430] loop7: detected capacity change from 0 to 256 [ 148.227144][T13430] vfat: Unknown parameter '1$E"wÈ}a̝Fwn"D*@ڍBr79 :t o!kWҤ@>섅ɮ' [ 148.256538][ T3383] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 148.264102][ T3383] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 148.272115][ T3383] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 148.295309][ T3383] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 148.404013][ T3410] kernel write not supported for file /112/clear_refs (pid: 3410 comm: kworker/1:4) [ 148.562676][T13453] rdma_op ffff88810595f180 conn xmit_rdma 0000000000000000 [ 148.654896][T13465] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4049'. [ 148.721916][T13465] loop6: detected capacity change from 0 to 512 [ 148.728706][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4053'. [ 148.759889][T13465] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4049: Failed to acquire dquot type 1 [ 148.793791][T13465] EXT4-fs (loop6): 1 truncate cleaned up [ 148.798593][ T3410] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 148.810852][T13468] hsr_slave_0 (unregistering): left promiscuous mode [ 148.826772][ T3410] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 148.832866][T13465] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.890712][T13465] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4049: Failed to acquire dquot type 1 [ 149.064559][T13498] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4066'. [ 149.142049][T13507] loop7: detected capacity change from 0 to 1024 [ 149.158985][T13507] EXT4-fs: Ignoring removed orlov option [ 149.164756][T13507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.229034][T13513] loop8: detected capacity change from 0 to 512 [ 149.259380][T13513] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 149.313383][T13513] EXT4-fs (loop8): 1 truncate cleaned up [ 149.521790][ T3383] IPVS: starting estimator thread 0... [ 149.573903][T13526] ALSA: seq fatal error: cannot create timer (-19) [ 149.591220][T13536] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4081'. [ 149.611003][T13527] IPVS: using max 2400 ests per chain, 120000 per kthread [ 149.655747][T13542] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4083'. [ 149.680495][T13548] netlink: 'syz.8.4086': attribute type 1 has an invalid length. [ 149.688267][T13548] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.4086'. [ 149.697465][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4087'. [ 149.728642][T13547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4087'. [ 149.750180][T13556] loop6: detected capacity change from 0 to 128 [ 149.757246][T13556] EXT4-fs: Ignoring removed nobh option [ 149.778924][T13556] ext4 filesystem being mounted at /241/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.841829][T13567] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 149.887695][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4097'. [ 149.921433][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4102'. [ 149.974798][T13592] loop8: detected capacity change from 0 to 1024 [ 149.986506][T13592] EXT4-fs: Ignoring removed orlov option [ 149.992382][T13592] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.092282][T13607] SELinux: Context system_u:object_r:syslogd_var_run_t:s0 is not valid (left unmapped). [ 150.167612][T13617] loop6: detected capacity change from 0 to 2048 [ 150.239095][T13636] loop8: detected capacity change from 0 to 256 [ 150.289366][T13636] netlink: 'syz.8.4122': attribute type 1 has an invalid length. [ 150.809810][T13714] loop6: detected capacity change from 0 to 512 [ 150.829094][T13714] EXT4-fs: Ignoring removed nobh option [ 150.837817][T13714] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4160: bg 0: block 393: padding at end of block bitmap is not set [ 150.860337][T13717] loop9: detected capacity change from 0 to 1024 [ 150.871656][T13714] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 150.882852][T13714] EXT4-fs (loop6): 2 truncates cleaned up [ 150.892057][T13720] loop7: detected capacity change from 0 to 164 [ 150.901770][T13720] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 150.950302][T13720] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 150.963998][T13720] Symlink component flag not implemented [ 150.969662][T13720] Symlink component flag not implemented [ 151.012048][T13720] Symlink component flag not implemented (7) [ 151.018177][T13720] Symlink component flag not implemented (116) [ 151.149653][T13750] loop3: detected capacity change from 0 to 512 [ 151.192232][T13750] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4171: Failed to acquire dquot type 1 [ 151.205497][T13750] EXT4-fs (loop3): 1 truncate cleaned up [ 151.211657][T13750] ext4 filesystem being mounted at /897/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.232614][T13750] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4171: Failed to acquire dquot type 1 [ 151.313390][T13766] wireguard0: entered promiscuous mode [ 151.318965][T13766] wireguard0: entered allmulticast mode [ 151.425300][T13776] loop8: detected capacity change from 0 to 512 [ 151.465940][T13776] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4186: bg 0: block 248: padding at end of block bitmap is not set [ 151.500281][T13776] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4186: Failed to acquire dquot type 1 [ 151.531529][T13776] EXT4-fs (loop8): 1 truncate cleaned up [ 151.551605][T13776] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.598087][T13786] loop9: detected capacity change from 0 to 7 [ 151.618346][T13786] buffer_io_error: 9014 callbacks suppressed [ 151.618433][T13786] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.637948][T13786] Buffer I/O error on dev loop9, logical block 0, async page read [ 151.645966][T13786] loop9: unable to read partition table [ 151.654168][T13786] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 151.654168][T13786] ) failed (rc=-5) [ 151.692092][ T6492] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 151.723039][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 151.730951][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 151.743491][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.751362][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.759055][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.766749][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.775011][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.782713][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.790422][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.798068][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.806367][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.814115][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.821867][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.829507][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.837743][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.845483][ T3383] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 151.860812][ T3383] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 151.966123][T13812] loop6: detected capacity change from 0 to 8192 [ 152.055067][ T51] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.104807][ T51] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.169761][T13830] Cannot find add_set index 0 as target [ 152.201296][ T51] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.222058][T13841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=13841 comm=syz.6.4215 [ 152.261079][T13841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=13841 comm=syz.6.4215 [ 152.275612][ T51] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.320315][T13851] loop6: detected capacity change from 0 to 512 [ 152.334134][T13851] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 152.353340][T13851] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:169: inode #17: comm syz.6.4218: inline data xattr refers to an external xattr inode [ 152.370116][T13851] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.4218: couldn't read orphan inode 17 (err -117) [ 152.393911][ T51] dummy0: left allmulticast mode [ 152.399019][ T51] bridge0: port 3(dummy0) entered disabled state [ 152.406727][ T51] bridge_slave_1: left allmulticast mode [ 152.412521][ T51] bridge_slave_1: left promiscuous mode [ 152.418244][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.429875][T10428] VFS: Lookup of '.' in ext4 loop6 would have caused loop [ 152.437359][T10428] VFS: Lookup of '.' in ext4 loop6 would have caused loop [ 152.445100][ T51] bridge_slave_0: left allmulticast mode [ 152.452818][ T51] bridge_slave_0: left promiscuous mode [ 152.458685][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.535015][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.546834][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.557574][ T51] bond0 (unregistering): Released all slaves [ 152.603285][T13866] IPVS: Error joining to the multicast group [ 152.620883][ T51] hsr_slave_0: left promiscuous mode [ 152.627614][ T51] hsr_slave_1: left promiscuous mode [ 152.633495][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.640927][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.652450][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.659833][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.674856][ T51] veth1_macvtap: left promiscuous mode [ 152.682445][ T51] veth0_macvtap: left promiscuous mode [ 152.687942][ T51] veth1_vlan: left promiscuous mode [ 152.693560][ T51] veth0_vlan: left promiscuous mode [ 152.748433][ T51] team0 (unregistering): Port device team_slave_1 removed [ 152.761093][ T51] team0 (unregistering): Port device team_slave_0 removed [ 152.809705][T13831] chnl_net:caif_netlink_parms(): no params data found [ 152.890167][T13831] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.898596][T13831] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.908777][T13831] bridge_slave_0: entered allmulticast mode [ 152.916041][T13831] bridge_slave_0: entered promiscuous mode [ 152.924288][T13831] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.933291][T13831] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.947415][T13831] bridge_slave_1: entered allmulticast mode [ 152.962041][T13831] bridge_slave_1: entered promiscuous mode [ 153.021048][T13831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.056998][T13899] netlink: 'syz.7.4234': attribute type 3 has an invalid length. [ 153.057960][T13831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.147482][T13831] team0: Port device team_slave_0 added [ 153.161993][T13831] team0: Port device team_slave_1 added [ 153.206219][ T51] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.221961][T13831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.222666][T13913] SELinux: failed to load policy [ 153.228965][T13831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.260565][T13831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.273948][T13878] chnl_net:caif_netlink_parms(): no params data found [ 153.287224][ T51] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.300013][T13831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.307016][T13831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.333650][T13831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.374106][ T51] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.408085][T13831] hsr_slave_0: entered promiscuous mode [ 153.422300][T13831] hsr_slave_1: entered promiscuous mode [ 153.434079][T13831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.441686][T13831] Cannot create hsr debugfs directory [ 153.453005][ T51] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.476668][T13927] loop7: detected capacity change from 0 to 1024 [ 153.513300][T13878] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.521057][T13878] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.528367][T13878] bridge_slave_0: entered allmulticast mode [ 153.536858][T13878] bridge_slave_0: entered promiscuous mode [ 153.603409][T13878] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.611728][T13878] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.619045][T13878] bridge_slave_1: entered allmulticast mode [ 153.626267][T13878] bridge_slave_1: entered promiscuous mode [ 153.633226][T13942] smc: net device bond0 erased user defined pnetid SYZ2 [ 153.701170][T13952] loop8: detected capacity change from 0 to 128 [ 153.769698][T13878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.793062][T13878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.805455][T13952] bio_check_eod: 7422 callbacks suppressed [ 153.805469][T13952] syz.8.4255: attempt to access beyond end of device [ 153.805469][T13952] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 153.833965][T13952] syz.8.4255: attempt to access beyond end of device [ 153.833965][T13952] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 153.857328][T13952] syz.8.4255: attempt to access beyond end of device [ 153.857328][T13952] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 153.892562][ T51] bridge_slave_1: left allmulticast mode [ 153.893287][T13952] syz.8.4255: attempt to access beyond end of device [ 153.893287][T13952] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 153.898303][ T51] bridge_slave_1: left promiscuous mode [ 153.917979][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.936167][T13952] syz.8.4255: attempt to access beyond end of device [ 153.936167][T13952] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 153.971126][T13952] syz.8.4255: attempt to access beyond end of device [ 153.971126][T13952] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 153.985958][ T51] bridge_slave_0: left promiscuous mode [ 153.992274][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.996008][T13952] syz.8.4255: attempt to access beyond end of device [ 153.996008][T13952] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 154.015949][T13952] syz.8.4255: attempt to access beyond end of device [ 154.015949][T13952] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 154.038059][T13952] syz.8.4255: attempt to access beyond end of device [ 154.038059][T13952] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 154.054566][T13952] syz.8.4255: attempt to access beyond end of device [ 154.054566][T13952] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 154.055800][ T29] kauditd_printk_skb: 929 callbacks suppressed [ 154.055813][ T29] audit: type=1326 audit(1752766092.887:27125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.7.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be12e929 code=0x7ffc0000 [ 154.098926][ T29] audit: type=1326 audit(1752766092.887:27126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.7.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be12e929 code=0x7ffc0000 [ 154.123166][ T29] audit: type=1326 audit(1752766092.907:27127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.7.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f47be12e929 code=0x7ffc0000 [ 154.146772][ T29] audit: type=1326 audit(1752766092.907:27128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.7.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be12e929 code=0x7ffc0000 [ 154.171058][ T29] audit: type=1326 audit(1752766092.907:27129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.7.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be12e929 code=0x7ffc0000 [ 154.194797][ T29] audit: type=1326 audit(1752766092.947:27130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.7.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f47be12e929 code=0x7ffc0000 [ 154.219018][ T29] audit: type=1326 audit(1752766092.947:27131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.7.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be12e929 code=0x7ffc0000 [ 154.243178][ T29] audit: type=1326 audit(1752766092.947:27132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.7.4260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47be12e929 code=0x7ffc0000 [ 154.328853][ T51] team0: Port device geneve1 removed [ 154.374430][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.386624][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.397164][ T51] bond0 (unregistering): Released all slaves [ 154.442728][T13878] team0: Port device team_slave_0 added [ 154.449756][T13878] team0: Port device team_slave_1 added [ 154.467572][T13978] __nla_validate_parse: 14 callbacks suppressed [ 154.467586][T13978] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4264'. [ 154.484790][ T3401] IPVS: starting estimator thread 0... [ 154.485190][T13973] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4264'. [ 154.515302][ T51] hsr_slave_0: left promiscuous mode [ 154.525193][ T51] hsr_slave_1: left promiscuous mode [ 154.530861][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.538314][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.549364][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.557522][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.572196][ T51] veth1_macvtap: left promiscuous mode [ 154.577775][ T51] veth1_vlan: left promiscuous mode [ 154.580327][T13982] IPVS: using max 2544 ests per chain, 127200 per kthread [ 154.584668][ T51] veth0_vlan: left promiscuous mode [ 154.692947][ T51] team0 (unregistering): Port device team_slave_1 removed [ 154.712101][ T51] team0 (unregistering): Port device team_slave_0 removed [ 154.812084][T13878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.819078][T13878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.845760][T13878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.865963][T13878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.873593][T13878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.899600][T13878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.953571][ T29] audit: type=1326 audit(1752766093.787:27133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13991 comm="syz.8.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f515e929 code=0x7ffc0000 [ 154.977987][ T29] audit: type=1326 audit(1752766093.787:27134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13991 comm="syz.8.4272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7f515e929 code=0x7ffc0000 [ 155.007555][T13878] hsr_slave_0: entered promiscuous mode [ 155.015569][T13878] hsr_slave_1: entered promiscuous mode [ 155.022303][T13878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.033640][T13878] Cannot create hsr debugfs directory [ 155.053292][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.068002][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.095646][T13831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 155.130670][T13831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.146480][T13831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.163463][T13831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.205167][T13831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.219290][T13831] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.238479][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.245560][ T6492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.261414][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.268566][ T6492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.344795][T13831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.441526][T13878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.457075][T13878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.476088][T13878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.489644][T13878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.535408][T13831] veth0_vlan: entered promiscuous mode [ 155.548898][T13831] veth1_vlan: entered promiscuous mode [ 155.565075][T13831] veth0_macvtap: entered promiscuous mode [ 155.579950][T13831] veth1_macvtap: entered promiscuous mode [ 155.607495][T14054] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4285' sets config #0 [ 155.623848][T13878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.633006][T13831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.646215][T13831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.661482][T13878] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.681404][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.688447][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.711718][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.718854][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.737247][T13831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.746606][T13831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.755331][T13831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.764129][T13831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.787741][T13878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.849613][T13878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.097191][T14100] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 156.105083][T13878] veth0_vlan: entered promiscuous mode [ 156.139141][T13878] veth1_vlan: entered promiscuous mode [ 156.147392][T14109] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4301'. [ 156.153586][T13878] veth0_macvtap: entered promiscuous mode [ 156.164140][T13878] veth1_macvtap: entered promiscuous mode [ 156.179747][T13878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.191652][T13878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.208744][T13878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.217538][T13878] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.226658][T13878] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.236753][T13878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.246336][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4303'. [ 156.256000][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4303'. [ 156.314964][T14120] ip6gre1: entered promiscuous mode [ 156.320968][T14120] ip6gre1: entered allmulticast mode [ 156.329973][T14124] loop5: detected capacity change from 0 to 256 [ 156.331520][T14122] netlink: 'syz.4.4306': attribute type 21 has an invalid length. [ 156.348973][T14124] FAT-fs (loop5): Directory bread(block 64) failed [ 156.359293][T14124] FAT-fs (loop5): Directory bread(block 65) failed [ 156.366692][T14124] FAT-fs (loop5): Directory bread(block 66) failed [ 156.372249][T14122] netlink: 'syz.4.4306': attribute type 1 has an invalid length. [ 156.374487][T14124] FAT-fs (loop5): Directory bread(block 67) failed [ 156.381582][T14122] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4306'. [ 156.401271][T14126] netlink: 'syz.3.4307': attribute type 2 has an invalid length. [ 156.409109][T14126] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4307'. [ 156.409671][T14124] FAT-fs (loop5): Directory bread(block 68) failed [ 156.444316][T14124] FAT-fs (loop5): Directory bread(block 69) failed [ 156.460480][T14124] FAT-fs (loop5): Directory bread(block 70) failed [ 156.467333][T14124] FAT-fs (loop5): Directory bread(block 71) failed [ 156.474071][T14124] FAT-fs (loop5): Directory bread(block 72) failed [ 156.481301][T14124] FAT-fs (loop5): Directory bread(block 73) failed [ 156.564620][T14139] SELinux: failed to load policy [ 156.634678][T14156] loop3: detected capacity change from 0 to 512 [ 156.644672][T14156] EXT4-fs: Ignoring removed oldalloc option [ 156.651752][T14156] EXT4-fs: Ignoring removed nobh option [ 156.657680][T14156] EXT4-fs: Ignoring removed oldalloc option [ 156.665906][T14156] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.4320: iget: bad extended attribute block 1 [ 156.678903][T14156] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4320: couldn't read orphan inode 15 (err -117) [ 156.692279][T14156] EXT4-fs mount: 37 callbacks suppressed [ 156.692291][T14156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.754247][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.843380][T14180] loop3: detected capacity change from 0 to 2048 [ 156.873813][T14180] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.4330: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 25349(25349) [ 156.912189][T14180] EXT4-fs (loop3): Remounting filesystem read-only [ 156.918786][T14180] EXT4-fs (loop3): get root inode failed [ 156.925090][T14180] EXT4-fs (loop3): mount failed [ 157.405174][T14231] SELinux: unknown common [ 157.410912][T14231] SELinux: failed to load policy [ 157.474127][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4359'. [ 157.483438][T14246] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4359'. [ 157.492414][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4359'. [ 157.504426][T14246] netlink: 'syz.8.4359': attribute type 6 has an invalid length. [ 157.532896][T14255] loop8: detected capacity change from 0 to 764 [ 157.539382][T14256] loop7: detected capacity change from 0 to 512 [ 157.548864][T14256] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.557918][T14256] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 157.566276][T14255] rock: directory entry would overflow storage [ 157.573085][T14255] rock: sig=0x4f50, size=4, remaining=3 [ 157.578642][T14255] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 157.587557][T14256] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 157.597034][T14256] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 157.618368][T14256] System zones: 0-2, 18-18, 34-35 [ 157.630124][T14256] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.656642][T14256] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4363: bg 0: block 353: padding at end of block bitmap is not set [ 157.695336][T12648] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.821835][T14287] loop8: detected capacity change from 0 to 512 [ 157.838681][T14287] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.845232][T14290] loop7: detected capacity change from 0 to 128 [ 157.872005][T14287] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 157.879995][T14287] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 157.890569][T14287] System zones: 0-1, 15-15, 18-18, 34-34 [ 157.892053][T14290] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.908985][T14287] EXT4-fs (loop8): orphan cleanup on readonly fs [ 157.909066][T14287] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 157.930681][T14287] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 157.937574][T14295] ================================================================== [ 157.945646][T14295] BUG: KCSAN: data-race in smc_poll / smc_switch_to_fallback [ 157.945672][T14295] [ 157.945677][T14295] write to 0xffff888104708c3d of 1 bytes by task 14298 on cpu 0: [ 157.945691][T14295] smc_switch_to_fallback+0x5a/0x800 [ 157.945709][T14295] smc_sendmsg+0xce/0x2f0 [ 157.945724][T14295] __sock_sendmsg+0x145/0x180 [ 157.945745][T14295] __sys_sendto+0x268/0x330 [ 157.953288][T14287] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4371: bg 0: block 40: padding at end of block bitmap is not set [ 157.955402][T14295] __x64_sys_sendto+0x76/0x90 [ 157.963326][T14287] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 157.968463][T14295] x64_sys_call+0x2eb6/0x2fb0 [ 157.972906][T14287] EXT4-fs (loop8): 1 truncate cleaned up [ 157.977414][T14295] do_syscall_64+0xd2/0x200 [ 157.977434][T14295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.030085][T14295] [ 158.032402][T14295] read to 0xffff888104708c3d of 1 bytes by task 14295 on cpu 1: [ 158.040022][T14295] smc_poll+0x4a/0x530 [ 158.044085][T14295] sock_poll+0x218/0x240 [ 158.048327][T14295] __io_arm_poll_handler+0x1eb/0xb70 [ 158.053619][T14295] io_poll_add+0x69/0xe0 [ 158.057857][T14295] __io_issue_sqe+0xfe/0x2e0 [ 158.062441][T14295] io_issue_sqe+0x53/0x970 [ 158.066848][T14295] io_submit_sqes+0x667/0xfd0 [ 158.071522][T14295] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 158.077086][T14295] __x64_sys_io_uring_enter+0x78/0x90 [ 158.082455][T14295] x64_sys_call+0x28c8/0x2fb0 [ 158.087122][T14295] do_syscall_64+0xd2/0x200 [ 158.091610][T14295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.097494][T14295] [ 158.099802][T14295] value changed: 0x00 -> 0x01 [ 158.104457][T14295] [ 158.106763][T14295] Reported by Kernel Concurrency Sanitizer on: [ 158.112896][T14295] CPU: 1 UID: 0 PID: 14295 Comm: syz.3.4381 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 158.125381][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.135425][T14295] ================================================================== [ 158.146554][T14287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 158.164001][T14290] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.507669][T14271] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.554549][ T6503] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.570871][T14290] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.613053][ T6503] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.703037][ T6503] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.762763][ T6503] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.832403][ T6503] bridge_slave_1: left allmulticast mode [ 158.838043][ T6503] bridge_slave_1: left promiscuous mode [ 158.844152][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.851816][ T6503] bridge_slave_0: left allmulticast mode [ 158.857457][ T6503] bridge_slave_0: left promiscuous mode [ 158.864245][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.962443][ T6503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.972625][ T6503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.983131][ T6503] bond0 (unregistering): Released all slaves [ 159.033401][ T6503] hsr_slave_0: left promiscuous mode [ 159.039043][ T6503] hsr_slave_1: left promiscuous mode [ 159.044707][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.052151][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.059686][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.067174][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.076923][ T6503] veth1_macvtap: left promiscuous mode [ 159.082515][ T6503] veth0_macvtap: left promiscuous mode [ 159.088131][ T6503] veth1_vlan: left promiscuous mode [ 159.093407][ T6503] veth0_vlan: left promiscuous mode [ 159.145226][ T6503] team0 (unregistering): Port device team_slave_1 removed [ 159.155767][ T6503] team0 (unregistering): Port device team_slave_0 removed [ 159.433566][ T6503] IPVS: stop unused estimator thread 0... [ 159.482514][ T6503] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.552352][ T6503] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.612570][ T6503] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.661562][ T6503] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.732099][ T6503] bridge_slave_1: left allmulticast mode [ 159.737801][ T6503] bridge_slave_1: left promiscuous mode [ 159.743672][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.751402][ T6503] bridge_slave_0: left allmulticast mode [ 159.757072][ T6503] bridge_slave_0: left promiscuous mode [ 159.762709][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.842823][ T6503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.853354][ T6503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.862967][ T6503] bond0 (unregistering): Released all slaves [ 159.923272][ T6503] hsr_slave_1: left promiscuous mode [ 159.929142][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.936618][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.944212][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.951606][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.961461][ T6503] veth1_macvtap: left promiscuous mode [ 159.966983][ T6503] veth0_macvtap: left promiscuous mode [ 159.972488][ T6503] veth1_vlan: left promiscuous mode [ 159.977765][ T6503] veth0_vlan: left promiscuous mode [ 160.027559][ T6503] team0 (unregistering): Port device team_slave_1 removed [ 160.037102][ T6503] team0 (unregistering): Port device team_slave_0 removed [ 160.303071][ T6503] IPVS: stop unused estimator thread 0... [ 160.373352][ T6503] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.423272][ T6503] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.462931][ T6503] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.522989][ T6503] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.584263][ T6503] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.633077][ T6503] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.702726][ T6503] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.742276][ T6503] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.801682][ T6503] bridge_slave_1: left allmulticast mode [ 160.807387][ T6503] bridge_slave_1: left promiscuous mode [ 160.813100][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.822063][ T6503] bridge_slave_0: left allmulticast mode [ 160.827712][ T6503] bridge_slave_0: left promiscuous mode [ 160.833454][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.841763][ T6503] bridge_slave_1: left allmulticast mode [ 160.847526][ T6503] bridge_slave_1: left promiscuous mode [ 160.853143][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.861767][ T6503] bridge_slave_0: left allmulticast mode [ 160.867399][ T6503] bridge_slave_0: left promiscuous mode [ 160.873007][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.982955][ T6503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.992645][ T6503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.002201][ T6503] bond0 (unregistering): Released all slaves [ 161.062896][ T6503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.072499][ T6503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.081746][ T6503] bond0 (unregistering): Released all slaves [ 161.104097][ T6503] hsr_slave_0: left promiscuous mode [ 161.109690][ T6503] hsr_slave_1: left promiscuous mode [ 161.116033][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.123452][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.131615][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.139018][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.148274][ T6503] hsr_slave_0: left promiscuous mode [ 161.154305][ T6503] hsr_slave_1: left promiscuous mode [ 161.159923][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.167344][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.175660][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.183042][ T6503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.194640][ T6503] veth1_macvtap: left promiscuous mode [ 161.200174][ T6503] veth0_macvtap: left promiscuous mode [ 161.206533][ T6503] veth1_vlan: left promiscuous mode [ 161.211789][ T6503] veth0_vlan: left promiscuous mode [ 161.217439][ T6503] veth1_macvtap: left promiscuous mode [ 161.223286][ T6503] veth0_macvtap: left promiscuous mode [ 161.228771][ T6503] veth1_vlan: left promiscuous mode [ 161.234513][ T6503] veth0_vlan: left promiscuous mode [ 161.319507][ T6503] team0 (unregistering): Port device team_slave_1 removed [ 161.329931][ T6503] team0 (unregistering): Port device team_slave_0 removed [ 161.377305][ T6503] team0 (unregistering): Port device team_slave_1 removed [ 161.386913][ T6503] team0 (unregistering): Port device team_slave_0 removed