last executing test programs: 53.000949888s ago: executing program 3 (id=272): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020306091000000000fb004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) 52.9678629s ago: executing program 3 (id=273): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010102, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {0xd72}, 0x0, 0x0, 0x2}, {{@in6=@mcast2, 0x0, 0x19}, 0x0, @in=@multicast2, 0xfffffffd}}, 0xe8) 52.823744239s ago: executing program 3 (id=275): r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000002000/0x2000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20000000) splice(r1, 0x0, r1, 0x0, 0x1, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r2, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000540)=ANY=[@ANYBLOB='('], &(0x7f00000002c0), 0x600) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x6) 52.822566888s ago: executing program 3 (id=276): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet_smc(0x2b, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="000000006a6f3d781ef7d90786945330e72dadebe12909a06330ca2ee69909c631ea21c72c6b6c2103915e2672103f33572f3901092c756c8f5f8dd92ca0e073ab5fc587f6760b5c4de3e46e7113684a061fd1337b0f0a20349523967348c89cd7cb56b610c1ba79b8f0c67ca292064e0242048715d54a029bfe0adf8390", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)={0x2, 0x9, 0x4, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x4000000) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x6e3) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x5287f473}}, './file0\x00'}) dup3(r6, r6, 0x0) syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) syz_io_uring_submit(r7, 0x0, &(0x7f0000000300)=@IORING_OP_UNLINKAT={0x24, 0x58, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x7ca1dd7b0bcdffe4, 0x1}) fcntl$notify(r3, 0x402, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c000180050002"], 0x38}}, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r11, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r12 = dup3(r10, r11, 0x0) sendmsg$tipc(r10, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r12, 0x10f, 0x88) 52.542935305s ago: executing program 3 (id=281): r0 = socket$nl_route(0x10, 0x3, 0x0) setresuid(0xee01, 0x0, 0x0) setreuid(0xee01, 0xee00) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e0500"/36], 0x3c}, 0x1, 0x2000000000000000}, 0x40000) 52.365052165s ago: executing program 3 (id=286): r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x80800) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x2ff}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x28, 0x0, r3, 0x0, 0x0, 0x0, 0xacead2938b77c37a}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0xfffffffffffffffd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x8818, 0x1000000000, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x2) recvmsg$unix(r9, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r12 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f00000002c0)=r11, 0x4) setsockopt$sock_attach_bpf(r12, 0x1, 0x41, &(0x7f0000000040)=r11, 0x4) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340), 0x10, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) recvfrom$unix(r2, 0x0, 0x0, 0x40000000, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 41.131345526s ago: executing program 32 (id=489): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000000694", 0x2e}], 0x1}, 0x0) 37.332614656s ago: executing program 33 (id=286): r0 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x80800) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x2ff}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff}) io_uring_enter(r4, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x28, 0x0, r3, 0x0, 0x0, 0x0, 0xacead2938b77c37a}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0xfffffffffffffffd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x8818, 0x1000000000, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0x2) recvmsg$unix(r9, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r12 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f00000002c0)=r11, 0x4) setsockopt$sock_attach_bpf(r12, 0x1, 0x41, &(0x7f0000000040)=r11, 0x4) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000340), 0x10, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) recvfrom$unix(r2, 0x0, 0x0, 0x40000000, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 36.719269422s ago: executing program 5 (id=530): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5, 0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x54, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x9, 0x58f, [{0x0, 0x20008000, 0x4, 0x20001}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000055}, 0x24040084) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x568, 0x3c8, 0x12, 0x600, 0x0, 0x202, 0x498, 0x2e8, 0x2e8, 0x498, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {0xff}}, 0x0, 0x398, 0x3c8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa0318236000000c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b50700", 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3f, 0x0, [{0x8, 0xb, 0x7}, {0x1, 0x4, 0x80, 0x2}, {0x9, 0x4, 0xf8, 0xfffffff5}, {0x3, 0x8d, 0x5, 0xfffffc93}, {0x3, 0x0, 0x0, 0x4}, {0xa, 0x60, 0xee, 0xb}, {0x81, 0x0, 0xf3, 0x100}, {0x0, 0xff, 0x81, 0xed65}, {0x1bd4, 0x0, 0x6, 0xa}, {0x800, 0x1, 0xf1, 0x1}, {0x8000, 0x82, 0x9, 0x3}, {0x617, 0x9, 0xb9, 0x864}, {0x2, 0x5, 0x10, 0x1}, {0xdb8b, 0xb, 0x9, 0x2}, {0x8, 0x40, 0x8}, {0xfff1, 0x2, 0x5, 0x2}, {0x10, 0xc7, 0x2, 0x8}, {0x6, 0x0, 0xd, 0x80}, {0x95f1, 0x8, 0x2, 0x600000}, {0x1, 0x2f, 0xfb, 0x6}, {0x6, 0x4c, 0xfc, 0x80}, {0x4c24, 0x83, 0x7, 0xcbf4d91}, {0x3, 0x7, 0x9, 0xc9}, {0x3, 0x2, 0x7, 0x7fff}, {0x9, 0x6, 0x3, 0x6a9}, {0x3, 0x3, 0x10, 0x7}, {0x400, 0x1, 0x7, 0x8000}, {0x5a8a, 0x3, 0x5, 0x8}, {0x9d5, 0xff, 0xb, 0xedc6}, {0x9, 0xc, 0xfa, 0x1}, {0x2, 0x9, 0xae, 0xb478}, {0x5, 0x9, 0x0, 0x3}, {0x7fff, 0xd, 0x2, 0x9}, {0x1, 0x96, 0x5, 0xfffffffe}, {0x4, 0xeb, 0x10}, {0x8, 0x4, 0x0, 0x5}, {0x9, 0x0, 0xd, 0x4}, {0x6, 0xd6, 0xe, 0x3}, {0x5, 0xc, 0xc, 0x3}, {0x0, 0x6, 0x3, 0x3}, {0xd90, 0x2, 0x0, 0x1}, {0x2, 0xfd, 0x7f, 0x400000}, {0xaa0, 0xc, 0xff}, {0x7, 0x9, 0x1, 0xa6c}, {0x8, 0x9, 0x3, 0x5}, {0x7db0, 0xf6, 0x4, 0x6}, {0x7, 0x3, 0x8, 0xfffff6d9}, {0x8e35, 0x0, 0x5, 0x3ff}, {0xcfa6, 0x9, 0x9, 0x7}, {0x4be, 0x7, 0x1, 0x3ff}, {0x16bd, 0xff, 0xa, 0x47c}, {0xd8b, 0x3, 0x6, 0xd635}, {0x5, 0x3, 0x0, 0x6}, {0x2, 0x9, 0x5, 0x49}, {0x8, 0x3, 0x31, 0x3de}, {0xaa7, 0x0, 0xff, 0xfffffc4a}, {0x400, 0x81, 0xc, 0x1}, {0x1, 0x9, 0x4, 0x81}, {0x30, 0x6, 0x9, 0x6}, {0x8, 0x81, 0xd, 0x149}, {0x7f, 0x7, 0x3, 0x59b}, {0x9, 0x1d, 0x7, 0x3}, {0xf, 0x4d, 0x1, 0x6}, {0x6, 0x3, 0x1, 0xfffffffb}], {0x8}}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) 36.566892901s ago: executing program 5 (id=532): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x6, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54000000100001040200"/20, @ANYRES32=0x0, @ANYBLOB="002000004210040020001280080001007674690014000280080001"], 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r2 = syz_io_uring_setup(0x4110, &(0x7f0000000180)={0x0, 0xbc78, 0x100, 0x3, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x42a, 0xae8}, 0x100, './file0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10b8}, 0x20008004) 36.301069086s ago: executing program 5 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000011027c0000040000000c0001800600060086dd"], 0x24}}, 0x0) 36.214183181s ago: executing program 5 (id=537): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d2000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000300000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x3d) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'pimreg\x00', 0x1000}) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getuid() preadv2(r3, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc0100001900010025bd700001000000000000000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 36.015072453s ago: executing program 5 (id=539): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) ftruncate(r0, 0x7) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$inet6(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000280)="f2bfd8ca46414963198229994df80d62f78ba67bf8e4e5c1b8bdce9b0c5b4f5a5bedbaac1bf7ccc3f1c25566d0533b0ee3dfabe29573836619d60ec75e1f85709db1a5c02e449ef88692f5e1965e77fb0d3dc8b6c3d731b75dd2c30c6b28b70122081fcec5a905a91a1372302e6aa2e70b4747ea3b85cb39f2a804e04c684b54b08e434a1b49b471bf42f27f02dddb97d6f2d87dad2ab358555bec85cffcc3b30f816f512e69dce299f768e463e29c9e4946bdf9448906dedb808a808fbc158defc63233bcbaabec72691bd1bfa443d13599ae6b9ed1cb301d4c9f21278a65a05f40cf3515140e99fa15e349dbff48d96e2dc39d9e03caad014ecd45d29e98fe1e1ffec96f75bc681441cf1b1a508a7551a443fa5cc03069f3bfebcc51f7025bffdd5a6fa2f855871263c03fb66778209af251d181ec34f615e38af90d7242424ee1865fc1ce428cf1bd3ee1e8f246b177bd379c174fc474024e13306d4525f0a56a67d1ccaa8ee33c8504cbf21feda782cd78206933217c59a824dfe5752c77a9b90581770a4153101be468805b6b6815de03566c8a519b8f276bcd73af7952ff15d47d0ccb27bff51ba14769d81b33df4798d3eb69be48eb6d7cb7c3d38173acad2748240be8ec0380335f36112eeacaef485199037454d1b474e8c26359d021f130f315568b75fcf3c455f9e082428e0347c10da9a66b8e5e76a7afb733d9aa01ce6497f8ed75ff11debd27d8f7f8988cc6369aecce361a232ce0afa859645bd282af6634344a6a0050b15ab0820d27df82e60c3f2ed9a6b20888601213329297eea337b397e1bc6f960c2d15fadeee80e14a1fe02fd4981a83864adf7338704f887dde60b2def62be860297aa71d7b4be65fb6b26b46a00a201127427a49943c7a941835f7133eae0ff43221831057559c9bf4fb715b291fe3438706cc091abb9f329a0b82d82d8409012cebab8790c7cb97553e838592b9270d7021d93d3bff155d7cf112d85c5e9daa2166bb8dbbf49862cef045db95076180c88265de790d39639a4e743397c43376c59dfb30c2fa6ede1dc8aee1d0e9789352bd9492c3fe54752aea8c4063f742da8a4b557c2068fa12ed9dd7c9f689916d793c65e6becbbf83f046d940a035f5ec84f3798efe0a3e2181326452960921773bc050e24ef71598fa1ad828ef8afce488a8eb825f56358ca60261982f8ab569abc51419fdec4950c0db48431567369ed7d555c5ddb34ae43d0ec9a69ee2f739582cd6a7fad6bb88570c397daa604ad7789f62143be50efc804c2c0cf6c9a71d677463d2f2ddb45e6a378762186700cb36ceb743c65157b7815f7f842641b5764652dc50f1f7999841e321bf0a96851a2d5dc85b0bb41f7f919e6d6c81813e83204ede6547c0750f6d0f4356f6796fe2dc34ea7bbd7c63a6edece9045b0291a7253feffa4696787ba94588a3fc7231e26c6df074d95bd140dfe83377addfae06ad0cbe012a47b01f1ed68ada492ae8c87ea8272fd5061c5886649aabf5141eb750dec39b802ffe53770ca761455b5f1b58be02dee595b82242a18667866531ab9bbb8296832dbbcc84947860a90d47dd42a2beada5c323e43d8e1263664147e6463039b0985f62b018725934a6ee9352e9db39fe867cbcc8c885e5e030b2e9aaea8cd1f4ac2a8945af182de97c8dd5d53361525252d328d43e990b207d9cee4baaaa0727934ece3518343e76b00ea2def1ed6f579cd856504bac29c2c92ba8ac5ca7a75d98864838b589b1ac1b917670a4a45e35bae45b690bdf6b6d75d9bdf7e8a83d04365daefeb170c516896404bd92d1c77fc1122dcdb92dca1a5d2380a10445ab2c74efb94e31f2c18fd64b8ad06c68997af6c2aa7f0f64b11fe2ababb14ae487a13d0f6ab7a6fb98316f288ae4544b0e8696ef0d1b1c25ed784abeefb2d9ed50c5dd3a0be30ccee1e95ec93fbcf6f038a2ff7e40a86a5c5d6ee93b7bc119a7897c786546132a17cfb2985b2dccd9c0bf37bbd680e3e27dc4f03ec866ce1239bd88f59b15b7e3a1add46a2c967152d60e314be1b6304811b05d7331f7809b477b503e9c24e8b087dc2087b43ac5200070e4dadd330c44e2dadc58a848fa0bc795692e5861ad5c852ad3221302214bbfbce343a682c984e296a875c2aedde5087651136f42c5a0924183d576a4f4c59fec04568e142f5e31f4eb573fda4b106e21b9765bab6fb1dbecd4b1e23eadffcda1b6e1936e4bed9f5e431014ceaa1e4bcde13a6bd2188f53baa899518d87e53560451da1b657a49000f43401d0b0234345551c0e6ab760a4c9e9eb7ca15b1fca622a21ae7aebcb3f458fc80dd0ecc8b5f263eab09d5f7ff536a799d204f96941d75f8395becd78c5c2c4c6b6137eab9d5b3f66b92af7f08adf094b9de4bf8d1518a21daebe5759690834399cd8312dd56d925f06ad3bc4c0725a6bbb0e392359f4201362816277c2ea4361cf9a81f659b008443d8e4c7e9d1681cbebfa32d645c61be5ea20293341655a860cbeedae1cb4680dccec32e1b2cc12364a98e13f385ac9253c43815eabb2bf20c3c14f9fccc7805324c42c639ca7a5fafa1ecb397fc6be91cdabf61cda9db6ff598e9a55a62a393c2acc24d49f4b79d48785734f7d8187c596d5ddf7fac0308257497630233a97a2cca067c869a6895839bf6381ebc307674adc23e42bbe260d6b1da5a1cbf7d619dbfdacdd8dcf1cda53dd3d54622fe825952fadc43114185244834edef1e2156fed4d65c911f632ed519a67c9b923f12e74d5461dde022ac83a4fbdaddedaf5dd2991ca253a5266fe7958ce2266786c10a0af1897222f5c96e67c28e1add56d855a75ab794774839f8f9c7441b5916cdfc42170c9438d544a32ba0d6c94cdbbb7fba203cae016d0871c7d11c3bc4eff4ac3fc3443920f3f432ecb3328ba8899654a24f3093bcc3a735a89e14f0fb1a25d8631080e3e79ff4d43f52993cee8f416f27b087b46aec0ca027bda5911896de0bff350066a47c03c83646a7bc6ce94f6085b7670397e95a6274c0f151c279025b7fbfe98bc55fec83384cfd2a3a43a6312b98dfed1ff70084b181c724281d86a8827eb4b3cd0e030a9fefb8822436a54f8adbe007fd9ae6ae0cc69833e3600b72545f1f5ca052b33bd01beab0f0f4000982c36eae6c7eda669966f880f09fca457145d0a6bc91b74ce65208414c9621caeff2e0dcec9c82f9ae0e66ab90d59024428ee713c0c3a3ab20d47119df4f82609bc11fba94dd8f22ef147228437eb6a7552fb6cd215506c5f4eabe6304ead05f8ffc1f4b6ed7afb5268ef8d1dda9cfbe6ac9cb5f37f2d0a0edb7f3b0017f5dfecd2afa525bf44ea4775cb6e59e9cedf371bae4ae0a135cc88ef29f70d7a9739ccf1d502d27d7e0bd565a3a2d68ff4d13a89ba2223f89e596776ebdcdd9c7bb5eae45f9b3f6250f8e6ffbd4f986235070e08d6689c87ffc997e66ec39d7cbe0236adfc8a96b6a567b51c4d7809a908002ad5a5b8c0af5c06b457fc8cbed6d9cc578c0d5b9b535e64f22183aa6f16768adcbc1161a90cd559c30f373a7fe622d8a203f2eada87a46e510bba82b4fdeef74b5bc45f22e61c0db2e9bed74cce7c4750a9f2ff686ef98cd51ad701358e226dfb4fdaeffed3151341ec9f26fd7a1414fc407736bf3913c9c52e70115e9c5f4db51096e323128461777a499c638a60f7719226e32a771fbda7821d34cd6df6ba005d9cf3337a0976a455e1603c15a1c9823ae68e60b128514a99b3e5450dc45a360034681212c1acd7098d5d2b6ff43ef52d92f6ee5e6cf9e248c6fa8d7ffa01e6f2f39e143eaf93ed10928b378d79288217841c175c5102447140804d0a5c7df686b467d256f329cb1f9813479ea0105ca046de3756558352c36c18b44efb90c85525cab09a1c92e9c2f3274ea97a894469bbe26119152171e08279bc5750abff8d4f2fbbbab74d6c4d94dcc51e51e7a5095b4339d151fdda1c6dfd0d4d85a18c429ebc0593a1b78e94c5e610758fbb9a313ac0b7ec797fa9b174af2ff91f6c29594be200daaee22ee6b385dbc1b90d4de31e65adec411e415de502a9bc8da4205f0362ef65b1d1cbee93ba28c6930077125845400b6c3868ec776697277f161c7da7b9a4b01e88a0f57fe334f213bc5af8f5eb568d0d1314c696aa38c76bdbeb92e386751c697ad56184c612835ee6d49698185d5829f709b97eec75066db043316165bd4c28daf16e684efae444286ecc8986e45062c88e6fc26ea23b6fdb9a16c369d6d5afbcf93d9f49b52f04e67528f0652c00930391a7118c8a84b188921ad2576a60e3ac07e0a41ff57a5a8758fb17e5e561226d6ab9c69d86ce1f7cbc4ac21cf395d70554d6a82bd4e719dc2e9a9d3a1063f894d8113e34fd87ff6b77ab93e4cc8d453d8ee0ebf49552d2c2701c44256aa448ffede9696782cab804681143414cc9f9f408003531d12603dd4d125f6bd0e9f186eca2efc8494b338e4f51015618551fae24071374e0ac3c7b5793b366f3b77ae3b61007de809440c8cdf1dc18fddaee858e5e63fa3599bfdc6e11760efd95da10fcf2955134083d5f437189cb9267cfce4cea19bb0117d0efeb2abfc116e69e7273a553ad5bbf3f7b29a3349c99a5fd39d11bcdeede977a65092d0db1c843cf9105c0382cc9af30ead968c604a4db9480132433491903ac34a01637e9b4bb62281d4760f12a51f8510e0c62ea3cd88aee8d02cd0e3c27de7b1c0328f972491929c8c1ef5c7ad078e13253654dd42df5e257cb398dde771044d5338ef4fde2aeb71e115aa84ce6fed14fbf4bffe022f1b44d81c62f86d4b15d0dc4557d129dc6d31175fe437e56c7901feccf64ff72a17f1ab188003dd806cdc08a11b94292d5c85f99b6426e001866d5a376b341a199a9c96995e39f39a18daceb5689043ff930e373610db6c23ddf3c72746673af66a5fe90adbe17c709b4719bb7c9d7ff9f37bac450b1e2812eec6c92e36472346e3e68f38888a06e7b99731e8e8b29a7b912ff68c605b64a7365f7ecb383ce31bda4f389874aaf279605807181245dcdd39d3a9210a95086b3f065017bf435dc96549685955bd66e7a671d9793463a9fa1185d50716f49ab027892df6dffcf22051367680ba48c7eb6ed0923b8914e673187896857c3118f00a25ea78af855e18eb697c2304f23a66d56cd67a53061028f5c6e131f4cfda5506ea8d0e04913eaa31baab9a0d22a9833f62bbc26e0c7f807799158e686873d437e79536ede4687cf64a94b8e4c9441c2888219c8e05889a1879232d118ad583d0a9fef2da252fe34013118a53233ba9f8bf29bde454f64355248ee58f6094b56590673f2d01ff6adc43ecd39315d1ffc858020f9d61cec17254f70d1091ce037498b4f368c66182d48706362fb9e7527e1776dfbb118a841b99789dabb53ed87d9760a3d148b2c9b1f88534e11c021759e1a25c391dbd44e09f9ea33f11a16e9a30b52342dec38d872342a3e4f07c4100ba69f9135429eb30bd39f94d454bc688f56d0285c6de3e845abbcb271c7bec3a0b896903eb4b809acfdf7b45aa11bf87c632f51e209ebf01c5e3b215b73dc216d71d0c953922c136cdc99161ba3a2796649900afa0dbdda5e45cbe6c4fd988218b107486cc1f53eed7503f3da3293121247cd18a8024a3eee09586257ec5eb64bcff56d3f4019d24576305c2488fa4abe77c1ffddb8f1e45004d1ef96cf101816e3182d3562f5bf0d5ef510a8327585d128f6d43a77b695e18fe5537143be6e", 0x1000}], 0x1, &(0x7f00000012c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x6}}], 0x18}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001340)={r1, r1}, 0xc) (async) sendmsg$nl_route(r1, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@ipv6_getmulticast={0x14, 0x3a, 0x800, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x890) (async) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000001480)) (async) r2 = openat$cgroup(r1, &(0x7f00000014c0)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000001580)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001540)={0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x50}, 0x800) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000015c0)=0x1, 0x4) (async) sendmsg$802154_dgram(r1, &(0x7f0000001740)={&(0x7f0000001600)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000001700)={&(0x7f0000001640)="ea5777d4138e926a52f773bc32596858ec41a5e9f4fd07ebf1d72cc4183d281460fd00c981c90ed362842b3a01617a296204a3d35d6847ff323123d396d1962fa23b513dd9b5a86c67fef30cc1efa2241d0b62508f738e022ad4a522dd6f6227ce8c8fb497df3bacf826447502eebb3b3df6ce6ac15ca176f30b3a08a8b9da306f163d3183c439f43eed80b2c660087625cd25236d19c94e64c5669a6a53078965856da0b2bf8e6748", 0xa9}, 0x1, 0x0, 0x0, 0x20000000}, 0x8806) (async, rerun: 64) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000001780)={0x6, {{0x2, 0x4e21, @broadcast}}}, 0x88) (async, rerun: 64) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockname$packet(r1, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001880)=0x14) r5 = add_key$keyring(&(0x7f0000001940), &(0x7f0000001980)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000018c0), &(0x7f0000001900)={'syz', 0x3}, 0x0, 0x0, r5) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000019c0)={0x0}, &(0x7f0000001a00)=0xc) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000001a40)=r6) (async, rerun: 64) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000001a80)) (rerun: 64) add_key$fscrypt_v1(&(0x7f0000001ac0), &(0x7f0000001b00)={'fscrypt:', @desc1}, &(0x7f0000001b40)={0x0, "85868d9e1e1ce009ff10e914b7e6d6671e390a6156ef99c0999c60e8cbce4d9835c53dd7d5619c84d6654b5bb7befe477a40cf4e227b141c8534f3a4be13ab8d", 0x20}, 0x48, 0x0) ioctl$KDENABIO(r1, 0x4b36) socket$key(0xf, 0x3, 0x2) (async, rerun: 64) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000001bc0)) (rerun: 64) r7 = syz_open_dev$sg(&(0x7f0000001c00), 0x1, 0x8000) ioctl$SG_GET_ACCESS_COUNT(r7, 0x2289, &(0x7f0000001c40)) (async) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r8, 0x0, 0x0, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) 34.202734337s ago: executing program 5 (id=557): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) pipe2(&(0x7f0000001cc0), 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) unshare(0x22020600) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f0000000a80)={[{@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x2a, 0x655, &(0x7f0000001980)="$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") r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x1e, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000080)=ANY=[], 0x118) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r5, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x14c}}], 0x1, 0xc040) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) acct(&(0x7f0000001000)='./file0\x00') 34.202260017s ago: executing program 34 (id=557): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) pipe2(&(0x7f0000001cc0), 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) unshare(0x22020600) r0 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_int(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f0000000a80)={[{@init_itable_val={'init_itable', 0x3d, 0x9}}]}, 0x2a, 0x655, &(0x7f0000001980)="$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") r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='dirsync\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x1e, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000080)=ANY=[], 0x118) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r5, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x14c}}], 0x1, 0xc040) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) acct(&(0x7f0000001000)='./file0\x00') 28.523426937s ago: executing program 1 (id=634): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0xffffffff00000000) 23.749475523s ago: executing program 1 (id=701): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) semget(0x0, 0x76bcb426919c1a47, 0x4a0) sendmmsg$sock(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r0, 0x1a, 0x6, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x134, 0x30, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{0x120, 0x1, [@m_mpls={0x6c, 0x14, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x78}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8809}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x1, 0x7, 0x7, 0x7f00}, 0x3}}, @TCA_MPLS_TTL={0x5, 0x7, 0xbc}]}, {0x9, 0x6, "b9a897b21f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0xb0, 0xa, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xba}]}, {0x7c, 0x6, "09d0d8b0ea14616f91f8e2385332b1bba4af5e38d2409af8e1a0368b908050ee4aef850098a10c93772e17a7704edfbc6dac7f390f02d7419938dec9dff936f63c1070711756df08b6d2191508fd54ab9120461eddc86290824e037b983c43a8d8c84a08d5f50038b5a39a8a91058f6272fcca8ae0609d46"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 23.663484519s ago: executing program 1 (id=702): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="00000900009b96b30000140012800a00e4d4f68f4b8fe2361215010076786308000a", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 23.539049546s ago: executing program 1 (id=706): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tdcxGRFX87dNRcTXvhzxzeRg3ObO7vpirVbdysuVVn2z0tzZvb5WX1ytrlY35ufn3lh4c+H1hdks90TtLPUyP/nS529/+lu/u/Hna99uV+tzH4lC9LXjJHWbXuhsi572Nto6jWAj0PvMC6OuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymvRHz+NiMunHL/U2TTD4189gfgwzu60+5+3Bn3/0nip8zr4+zeZpyc1vP9L88jPd/q5Qf3fswfWVh8Y44V7P6sMjX8r4oXJwf1Pr/9NhsR/+cDa/pVl2cEY3/j67u6w+NmPI2YG/v4kj8WqtOqblebO7vW1+uJqdbW6MT8/98bCmwuvL8xWVtZq1fzvwBjf+9jPHx7W/isD4v/2N93+97D2vzJspX3+c+/m/Q91s4VB8a+9PPD3dyqGxE/z375P5vn2/Jlefq+b3+/Fn9598bD2Lw/Z/kd9/teO2f5Xv/rd3x9zUQDgDDR3dtcXa7Xq1iGZqWMs8zRmfjF1Lqrxf2ay73Q/ufNSn/ebae+tPprSa9U5qNi+THZmsSbinDT5f5mRdksAAMApeLTTP+qaAAAAAAAAAAAAAAAAAAAAwPg6i9uJ9cfcG01TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO9d8AAAD//yLg4A8=") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d001f000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000300000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x3d) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'pimreg\x00', 0x1000}) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getuid() preadv2(r3, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc0100001900010025bd700001000000000000000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 23.356170076s ago: executing program 1 (id=711): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0xffffffffffffff33}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x98, 0x20, 0x8d, 0xd, 0x0, 0x2, 0x0, 0x7, 0x4, 0x0, 0x0, 0x2, 0x4}, 0xe) socket$can_raw(0x1d, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 23.142588199s ago: executing program 1 (id=715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000050004000000000a0900020073797a32000000001400078005001500130000000800124000008000050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x40000010) 23.138488969s ago: executing program 35 (id=715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000050004000000000a0900020073797a32000000001400078005001500130000000800124000008000050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x40000010) 17.295987158s ago: executing program 6 (id=802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000500040000000a000900020073797a32000000001400078005001500130000000800124000008000050005000a000000050001000600000012000300686173683a6e6574"], 0x60}}, 0x40000010) 17.138497977s ago: executing program 6 (id=806): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000ff0100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000000002400078008000500000000000800050000000000080005000000000008000500000000000400078014000780080006"], 0xd0}}, 0x0) 17.130572147s ago: executing program 6 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000003900070100000000000000fffd7c0000040000000c0001800600060086dd"], 0x24}}, 0x0) 17.049750912s ago: executing program 6 (id=811): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000002240)='./file1\x00', 0xc004, &(0x7f0000000840)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30003030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c6963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3a30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d776965f560a8f3a4499f722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f2023d4f5c7f5a4989406c0f0d0cfd37f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471c96c8e3751000000000000000000ffcfc5e6e4c6d971282916b7885de72658999e", @ANYRESHEX=0x0, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES64, @ANYBLOB="1b742fa579e3655868a62360590e954d4a3e"], 0x1, 0x2c7, &(0x7f0000000540)="$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") (async) syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000002240)='./file1\x00', 0xc004, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES8, @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRES64, @ANYBLOB="1b742fa579e3655868a62360590e954d4a3e"], 0x1, 0x2c7, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1e3102, 0x40) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f0000000200)=0x6a, 0x4) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="80bc", 0x2}, {&(0x7f0000000080)="8b6cdd75a85089e5ee45e01b015f17b32ae88579d11c0afc3b2435fd78b04fa91132070ffdfea88e479039163439384ef621262dfa40538cdf5efcc5283104efc03589ec3557a347ff955925f700f1dfb58f71d1ff4f02376de921200c5eb01d8f7d5d300ae961ee2138a087d3b4cfd0ed030283655d8f33fbda06932ac873e5b1d0ef3f1e5214bc04f33746af208d4e93cb874c02a3fea43c86533bfb0db882dce3fed2ecf34ef1a0af09a55fe9f9870662d146a16095bd5a05425dbd07b7a8003fdebbfeb243d45f796a6fb9b714e7b3550dd4", 0xd4}], 0x2, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) tkill(r2, 0x2f) (async) tkill(r2, 0x2f) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) (async) ptrace(0x10, r2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) (async) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x1, 0x0, 0x7b}, &(0x7f0000000fc0)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xfff) 16.116236866s ago: executing program 6 (id=824): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0xfffffffe, 0x61, 0x11, 0x5f}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x32) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8091}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x48044}, 0x0) 15.87468879s ago: executing program 6 (id=830): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x7040, 0x0) 15.858981921s ago: executing program 36 (id=830): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x7040, 0x0) 8.734285134s ago: executing program 7 (id=929): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) (async) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "9362"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000811}, 0x4040) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.034575504s ago: executing program 7 (id=942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "ffffffdd00", "67b8825e3412c094fcd45c560968bcf3", "6c678000", "ee979d05f7ea4b9b"}, 0x28) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x75cf2e33}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x24}, 0x4000) 8.028429505s ago: executing program 7 (id=943): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000e4000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58, 0x0, 0x1}, 0x1f) 7.926269881s ago: executing program 7 (id=945): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0003400000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000300000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x3d) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'pimreg\x00', 0x1000}) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getuid() preadv2(r3, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc0100001900010025bd700001000000000000000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 7.711827902s ago: executing program 7 (id=950): creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) write$P9_RLERROR(r0, 0x0, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") 7.500038755s ago: executing program 7 (id=957): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000001000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x3c, &(0x7f00000012c0)={0x0, 0x1d2b, 0x13500}, &(0x7f0000000200), &(0x7f0000000480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) preadv2(r2, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001380)=""/121, 0x79}], 0x2, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) fstat(r2, &(0x7f0000000380)) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x311}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000000f80)=[{0x6, 0x1, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/171, 0xab}, {&(0x7f00000006c0)=""/249, 0xf9}, {&(0x7f00000007c0)=""/82, 0x52}], &(0x7f0000000400)=[0x1, 0x4, 0x8, 0x5e400]}, {0x1, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/233, 0xe9}], &(0x7f0000000a00)=[0x32b2, 0x2]}, {0x2, 0x1, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/207, 0xcf}, {&(0x7f0000000b40)}], &(0x7f0000000bc0)=[0x8, 0x5, 0x5ff]}, {0x4, 0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000d80)=""/131, 0x83}, {&(0x7f0000000c00)=""/53, 0x35}, {&(0x7f0000000e40)=""/175, 0xaf}, {&(0x7f0000001400)=""/4096, 0x1000}], &(0x7f0000000f40)=[0x10000, 0xffffffff00000000]}], 0x4) syz_io_uring_setup(0x800009eb, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x325, 0x0, r2}, &(0x7f0000000240)=0x0, &(0x7f0000000b40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x11, r8, 0x646ea000) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000200)=0xa, 0x4) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000280)=0x6c, 0x4) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r8, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}, {{&(0x7f0000002400)=@nfc, 0x80, &(0x7f0000002680)=[{&(0x7f0000002480)=""/48, 0x30}, {&(0x7f00000024c0)=""/162, 0xa2}, {&(0x7f0000002740)=""/212, 0xd4}, {&(0x7f0000002640)=""/43, 0x2b}], 0x4, &(0x7f00000025c0)=""/114, 0x72}, 0x7}], 0x2, 0x40002000, 0x0) 7.489676496s ago: executing program 37 (id=957): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="00000001000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_io_uring_setup(0x3c, &(0x7f00000012c0)={0x0, 0x1d2b, 0x13500}, &(0x7f0000000200), &(0x7f0000000480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, r0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) preadv2(r2, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000001380)=""/121, 0x79}], 0x2, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430005003f00064c0a000000040085a168d0bf46d32345653600648d04000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e018d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) fstat(r2, &(0x7f0000000380)) syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x311}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f0000000f80)=[{0x6, 0x1, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/171, 0xab}, {&(0x7f00000006c0)=""/249, 0xf9}, {&(0x7f00000007c0)=""/82, 0x52}], &(0x7f0000000400)=[0x1, 0x4, 0x8, 0x5e400]}, {0x1, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/233, 0xe9}], &(0x7f0000000a00)=[0x32b2, 0x2]}, {0x2, 0x1, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/207, 0xcf}, {&(0x7f0000000b40)}], &(0x7f0000000bc0)=[0x8, 0x5, 0x5ff]}, {0x4, 0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000d80)=""/131, 0x83}, {&(0x7f0000000c00)=""/53, 0x35}, {&(0x7f0000000e40)=""/175, 0xaf}, {&(0x7f0000001400)=""/4096, 0x1000}], &(0x7f0000000f40)=[0x10000, 0xffffffff00000000]}], 0x4) syz_io_uring_setup(0x800009eb, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x325, 0x0, r2}, &(0x7f0000000240)=0x0, &(0x7f0000000b40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x11, r8, 0x646ea000) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f0000000200)=0xa, 0x4) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000280)=0x6c, 0x4) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r8, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}, {{&(0x7f0000002400)=@nfc, 0x80, &(0x7f0000002680)=[{&(0x7f0000002480)=""/48, 0x30}, {&(0x7f00000024c0)=""/162, 0xa2}, {&(0x7f0000002740)=""/212, 0xd4}, {&(0x7f0000002640)=""/43, 0x2b}], 0x4, &(0x7f00000025c0)=""/114, 0x72}, 0x7}], 0x2, 0x40002000, 0x0) 2.23436989s ago: executing program 4 (id=1010): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0xa, 0x148, 0x240, 0x10, 0x498, 0x2a8, 0x2a8, 0x498, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @multicast1, 0x0, 0x0, 'wg0\x00', 'rose0\x00'}, 0x0, 0x70, 0x90, 0x1000000, {0x200003ae, 0x7f00}}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x8000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x260) 2.23152288s ago: executing program 4 (id=1011): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e26, 0x0, @mcast2, 0xfffffffd}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x6, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x80, 0x7, 0x5, 0x7}}) 2.05999779s ago: executing program 0 (id=1016): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) io_setup(0x81, 0x0) io_submit(0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x604000000000000) 1.974586446s ago: executing program 0 (id=1019): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xdf}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.842471113s ago: executing program 0 (id=1021): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000003020034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58, 0x0, 0x1}, 0x1f) 1.829918124s ago: executing program 0 (id=1023): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x27, 0x1, 0xff, 0x72, 0x0, 0x7, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x8000}, 0x1a16, 0x10000, 0x5, 0x2, 0x8, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xb, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) semget$private(0x0, 0x6, 0x29b) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000500)={0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x303}, '5\x00', "fc737dcdacd74105e7409c00", 'wt\a=', "bf3721bb86a679a6"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "cc320e4a27cb5791", "23db348d0002000000000000002500", "62266bd8", "1e00040000000100"}, 0x28) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000180000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001000030400000000fedbdf2500000300", @ANYBLOB="20100000000000001800128008000100677470000c00028008000300c5ce0001", @ANYRES32=0x0, @ANYRES16=r3, @ANYRES8=r9, @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x100080d1}, 0x40080) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r7, r8, 0x4, r4}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000080)={r2, 0x1, 0x6}) 1.789894176s ago: executing program 4 (id=1024): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000080)=0x1f, 0x4) getsockopt$inet_tcp_int(r2, 0x6, 0x7, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008020007500500400012800b00010062726964676500003000028005001900020000000500170000000000080004008100000005001600010000000a0014000180c2000000000037fba38fa87df6d8a60da6a806858a836d20f0"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x84, 0x0, &(0x7f0000000380)) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1.243606198s ago: executing program 8 (id=1034): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e26, 0x0, @mcast2, 0xfffffffd}, 0x1c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x6, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x80, 0x7, 0x5, 0x7}}) 918.513067ms ago: executing program 0 (id=1035): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) syz_emit_ethernet(0x8a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0) socket$kcm(0xa, 0x7, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x30}, 0x0) 902.550458ms ago: executing program 4 (id=1036): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="3e3a1ef16be042eeb4f16ab74342b4e9b3627285d9d5bb1bd9da14580e046a9f12f4612e67c1d3fad996b88b7afbb672f5ae7f179b47fc35eea2400fa7712f02b121224a3088777245de53fdf0393828da8e0a124f7668c06bf4f005e8d9bad3aed90be0b3e404e03f4d7fe86d641dc82aae0cec1d388933f21ffbf8cc46d2e3321534ecb1c8df79306a842863d04cf04d422f30ff45cb65b9d483e662c4d534cd69ec1ed58739f26566", @ANYRES32, @ANYRES8], 0x1, 0x123d, &(0x7f0000002200)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x75) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000300000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000300000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x3d) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'pimreg\x00', 0x1000}) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getuid() preadv2(r3, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="bc0100001900010025bd700001000000000000000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 887.344909ms ago: executing program 9 (id=1037): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xe83a, 0x80, 0x20000, 0x75}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0100000000000000000004740906140002000000000000000000000000000000000114000600626f6e6430f60600000000000000000014000300"], 0x58}, 0x1, 0xffffffff00000003, 0x0, 0x60040}, 0x40) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f0000000580)=0x9, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)={@cgroup=r7, r6, 0x2f, 0x2010, 0x4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000, 0x4, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xb, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 827.691602ms ago: executing program 8 (id=1038): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0006040000000c0001800600060086dd"], 0x24}}, 0x0) 730.338557ms ago: executing program 9 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0xff08) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2, 0xffffffff}}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="12000000e5a156c08471a8fc0afbb8496a2facc67cb9b6dd8f951fd8c2ac8246ce7380aae52051b9eb91dfa64bc0357102000000000000003b6f0184935fddd643dec6edab6114ce9f711e960a10054d5c5225b23f3fd7abd3ca47fbddc40766d71ee0b38b66edd78ab8cfd92171fe6f4e403fa3e17d981e9c2979680772c4bb0f604957e356163302e50c42af5313409c636b04fb2ae085f88823a7b41aab6474a5703645f7ab28b6d0f50f8ab4", @ANYRES16=r6, @ANYBLOB="010023bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800030009000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040150) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000054}, 0x8000) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000000)=""/9, 0x9}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f0000001380)=""/151, 0x97}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000001440)=""/254, 0xfe}, {&(0x7f0000001540)=""/150, 0x96}], 0x8) semctl$SETALL(0x0, 0x0, 0x11, 0x0) 730.081417ms ago: executing program 8 (id=1040): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1000, r1}, 0x38) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 665.798541ms ago: executing program 2 (id=1041): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_nanosleep(0x6, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)="88"}, 0x48) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x278, &(0x7f0000000900)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="720ac4ff000000007110ab00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = gettid() r4 = epoll_create(0x3f5) r5 = eventfd(0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f00000008c0)={0x30, 0x1411, 0x400, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x401}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r5, &(0x7f0000000080)={r4, r5}) r7 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r7, r7, 0x800022) r8 = fcntl$getown(r1, 0x9) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) r10 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001240)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f0000001300)={'syztnl1\x00', &(0x7f0000001280)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x3, 0x1, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, @private2, 0x700, 0x7800, 0x7, 0x10000}}) sendmsg$TEAM_CMD_OPTIONS_GET(r11, &(0x7f00000017c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80100}, 0xc, &(0x7f0000001780)={&(0x7f0000001340)={0x440, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x2, 0x2, 0x4, 0x9}, {0x0, 0xb9, 0x0, 0x6000}, {0x6, 0x8, 0x1, 0x10}, {0x9, 0x5, 0x6, 0xfff}, {0x7ff, 0x80, 0xfe, 0x1000}, {0x9, 0x2, 0x2, 0x5d7d}, {0x5, 0x0, 0x0, 0x101}, {0x2, 0x7d, 0x1, 0x2}, {0xf, 0xa, 0x4, 0x7}, {0x2, 0x5, 0x3, 0x7}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa0000000}}, {0x8, 0x6, r13}}}]}}]}, 0x440}}, 0x4010) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r14, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$NL80211_CMD_GET_REG(r10, &(0x7f0000000e40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r14, @ANYBLOB="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"], 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) syz_clone3(&(0x7f00000007c0)={0x5008400, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x31}, &(0x7f0000000500)=""/48, 0x30, &(0x7f00000006c0)=""/226, &(0x7f0000000540)=[r2, r3, r7, r8], 0x4, {r9}}, 0x58) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000840)=@add_del={0x2, &(0x7f00000005c0)='pimreg0\x00'}) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 629.481373ms ago: executing program 9 (id=1042): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x619, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x10005, 0x1, 0xfffffc03, 0x3, 0x3, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x10000000002009}, 0x0, 0xffe0000000000001, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x2e) 502.569981ms ago: executing program 4 (id=1043): syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x5, 0x6, 0x0, 0x10, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x1400, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x2042, 0x0, 0x0) 430.777105ms ago: executing program 2 (id=1044): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040011}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000008, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x42) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000600)={'syztnl2\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) connect$can_bcm(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x29, 0x8, 0xb, 0x8, 0x10, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x8000, 0x6, 0x44}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x4804) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f0000000140)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}, 0x1, 0x0, 0x1800000000000000}, 0x0) close(r5) 413.774736ms ago: executing program 9 (id=1045): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="00000900009b96b30000140012800a00e4d4f68f4b8fe2361215010076786308000a", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 334.60159ms ago: executing program 2 (id=1046): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000011000300685773683a6e65742c6e65740000000005000400010000000900020073797a30000000000500050002000000050001000600000014000780080006"], 0x60}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) 332.579771ms ago: executing program 2 (id=1047): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2502000900400000001cdc0dca1d9f688403000600000000000a004e22ac1414bb00000000000000000200010000000000000a000c01000000030005000000000002004e21ac1e01010000000000000000020013"], 0x70}, 0x1, 0x7}, 0x0) 287.736474ms ago: executing program 4 (id=1048): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x6, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x80, 0x7, 0x5, 0x7}}) 238.912556ms ago: executing program 38 (id=1048): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x6, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x80, 0x7, 0x5, 0x7}}) 233.204717ms ago: executing program 2 (id=1049): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='Yockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 [ 107.584620][ T5335] __dump_stack+0x1d/0x30 [ 107.584648][ T5335] dump_stack_lvl+0x95/0xd0 [ 107.584672][ T5335] dump_stack+0x15/0x1b [ 107.584739][ T5335] should_fail_ex+0x263/0x280 [ 107.584773][ T5335] should_fail+0xb/0x20 [ 107.584849][ T5335] should_fail_usercopy+0x1a/0x20 [ 107.584880][ T5335] _copy_from_iter+0xcf/0xea0 [ 107.584942][ T3442] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.584899][ T5335] ? __alloc_skb+0x397/0x4b0 [ 107.585032][ T5335] ? __alloc_skb+0x219/0x4b0 [ 107.585063][ T5335] netlink_sendmsg+0x4ae/0x6f0 [ 107.585087][ T5335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.585108][ T5335] ____sys_sendmsg+0x5af/0x600 [ 107.585131][ T5335] ___sys_sendmsg+0x195/0x1e0 [ 107.585270][ T5335] __x64_sys_sendmsg+0xd4/0x160 [ 107.585293][ T5335] x64_sys_call+0x17ba/0x3000 [ 107.585319][ T5335] do_syscall_64+0xc0/0x2a0 [ 107.585359][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.585388][ T5335] RIP: 0033:0x7fd8fd63aeb9 [ 107.585449][ T5335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.585468][ T5335] RSP: 002b:00007fd8fc097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.585490][ T5335] RAX: ffffffffffffffda RBX: 00007fd8fd8b5fa0 RCX: 00007fd8fd63aeb9 [ 107.585642][ T5335] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 107.585657][ T5335] RBP: 00007fd8fc097090 R08: 0000000000000000 R09: 0000000000000000 [ 107.585670][ T5335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.585684][ T5335] R13: 00007fd8fd8b6038 R14: 00007fd8fd8b5fa0 R15: 00007ffdc196ff58 [ 107.585704][ T5335] [ 107.608758][ T5339] loop4: detected capacity change from 0 to 512 [ 107.712976][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.750756][ T5340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 107.800577][ T5339] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.837480][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.860462][ T5339] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.550: bad orphan inode 131083 [ 107.871818][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.905156][ T5339] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.550: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 107.933450][ T5345] loop1: detected capacity change from 0 to 512 [ 107.951425][ T5345] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.974052][ T5345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 107.983206][ T5345] netlink: 'syz.1.551': attribute type 30 has an invalid length. [ 107.996094][ T5349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.520'. [ 108.034327][ T31] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.044114][ T31] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.053664][ T31] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.063164][ T31] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.117247][ T5358] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 108.464102][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.537545][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.656011][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.715495][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.825944][ T5365] chnl_net:caif_netlink_parms(): no params data found [ 108.863169][ T12] bridge_slave_1: left allmulticast mode [ 108.868924][ T12] bridge_slave_1: left promiscuous mode [ 108.874887][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.883202][ T12] bridge_slave_0: left allmulticast mode [ 108.888878][ T12] bridge_slave_0: left promiscuous mode [ 108.895109][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.095026][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.113074][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.130811][ T12] bond0 (unregistering): Released all slaves [ 109.156750][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 109.210594][ T12] hsr_slave_0: left promiscuous mode [ 109.239336][ T12] hsr_slave_1: left promiscuous mode [ 109.250361][ T5386] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.299454][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.307078][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.336875][ T5386] EXT4-fs error (device loop6): __ext4_new_inode:1073: comm syz.6.561: reserved inode found cleared - inode=2 [ 109.354189][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.361772][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.382712][ T12] veth1_macvtap: left promiscuous mode [ 109.410036][ T12] veth0_macvtap: left promiscuous mode [ 109.425994][ T12] veth1_vlan: left promiscuous mode [ 109.486618][ T12] veth0_vlan: left promiscuous mode [ 109.512308][ T5407] netlink: 28 bytes leftover after parsing attributes in process `syz.6.563'. [ 109.521532][ T5407] netlink: 28 bytes leftover after parsing attributes in process `syz.6.563'. [ 109.688410][ T12] team0 (unregistering): Port device team_slave_1 removed [ 109.700222][ T5223] EXT4-fs unmount: 43 callbacks suppressed [ 109.700239][ T5223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.719382][ T12] team0 (unregistering): Port device team_slave_0 removed [ 109.796673][ T5380] team1: entered promiscuous mode [ 109.801979][ T5380] team1: entered allmulticast mode [ 109.827384][ T5365] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.835094][ T5365] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.874719][ T5365] bridge_slave_0: entered allmulticast mode [ 109.885884][ T5365] bridge_slave_0: entered promiscuous mode [ 109.900150][ T5365] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.907667][ T5365] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.916522][ T5365] bridge_slave_1: entered allmulticast mode [ 109.950718][ T5424] netlink: 36 bytes leftover after parsing attributes in process `syz.1.567'. [ 109.978921][ T5365] bridge_slave_1: entered promiscuous mode [ 110.038122][ T5365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.084407][ T5365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.137597][ T5365] team0: Port device team_slave_0 added [ 110.149487][ T5365] team0: Port device team_slave_1 added [ 110.209201][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.216539][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.243606][ T5365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.292177][ T5442] netlink: 'syz.6.571': attribute type 1 has an invalid length. [ 110.300310][ T5365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.307294][ T5365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.334140][ T5365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.383767][ T5442] team0: Port device gretap1 added [ 110.394188][ T5442] macvlan2: entered promiscuous mode [ 110.400196][ T5442] macvlan2: entered allmulticast mode [ 110.405872][ T5442] team0: Device macvlan2 is already an upper device of the team interface [ 110.452996][ T5365] hsr_slave_0: entered promiscuous mode [ 110.486803][ T5365] hsr_slave_1: entered promiscuous mode [ 110.509070][ T5365] debugfs: 'hsr0' already exists in 'hsr' [ 110.514936][ T5365] Cannot create hsr debugfs directory [ 110.703489][ T5365] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 110.713478][ T5465] netlink: 'syz.6.573': attribute type 1 has an invalid length. [ 110.732552][ T5365] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 110.753331][ T5467] batman_adv: batadv0: Adding interface: ip6gretap1 [ 110.760558][ T5467] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.787358][ T5467] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 110.907476][ T5365] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 110.931876][ T5365] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 110.944617][ T5481] set_capacity_and_notify: 4 callbacks suppressed [ 110.944636][ T5481] loop6: detected capacity change from 0 to 512 [ 110.963674][ T5482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=5482 comm=syz.1.576 [ 110.977035][ T5479] netlink: 'syz.1.576': attribute type 3 has an invalid length. [ 110.986838][ T5479] netlink: 'syz.1.576': attribute type 3 has an invalid length. [ 110.995713][ T5481] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.577: invalid indirect mapped block 256 (level 2) [ 111.015314][ T5481] EXT4-fs (loop6): 2 truncates cleaned up [ 111.030808][ T5481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.063588][ T5223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.170265][ T5365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.222945][ T5365] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.245374][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.252737][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.274290][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.281661][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.306370][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 111.306467][ T29] audit: type=1326 audit(1770120464.127:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.6.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8222daeb9 code=0x7ffc0000 [ 111.336460][ T29] audit: type=1326 audit(1770120464.127:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.6.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8222daeb9 code=0x7ffc0000 [ 111.382245][ T29] audit: type=1326 audit(1770120464.207:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.6.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff82229b78e code=0x7ffc0000 [ 111.396182][ T5525] xt_CT: No such helper "syz0" [ 111.406087][ T29] audit: type=1326 audit(1770120464.207:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.6.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8222daeb9 code=0x7ffc0000 [ 111.434808][ T29] audit: type=1326 audit(1770120464.207:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5522 comm="syz.6.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8222daeb9 code=0x7ffc0000 [ 111.461702][ T5532] __nla_validate_parse: 3 callbacks suppressed [ 111.461719][ T5532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.588'. [ 111.503696][ T5538] netlink: 'syz.6.589': attribute type 4 has an invalid length. [ 111.533939][ T5534] netlink: 'syz.6.589': attribute type 4 has an invalid length. [ 111.617326][ T5548] loop6: detected capacity change from 0 to 128 [ 111.636497][ T5548] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.650334][ T5548] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.654090][ T5548] EXT4-fs error (device loop6): __ext4_new_inode:1073: comm syz.6.593: reserved inode found cleared - inode=2 [ 111.654616][ T5365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.669254][ T5223] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.675263][ T5550] loop1: detected capacity change from 0 to 512 [ 111.675529][ T5550] EXT4-fs: Ignoring removed bh option [ 111.675751][ T5550] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.679521][ T5550] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 111.681751][ T5550] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 111.681902][ T5550] EXT4-fs (loop1): orphan cleanup on readonly fs [ 111.682283][ T5550] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 4 [ 111.682306][ T5550] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 111.682349][ T5550] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.591: Failed to acquire dquot type 1 [ 111.682624][ T5550] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.591: Invalid block bitmap block 0 in block_group 0 [ 111.682934][ T5550] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.591: Invalid block bitmap block 0 in block_group 0 [ 111.683091][ T5550] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.591: Invalid block bitmap block 0 in block_group 0 [ 111.683273][ T5550] Quota error (device loop1): write_blk: dquota write failed [ 111.683355][ T5550] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 111.683373][ T5550] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.591: Failed to acquire dquot type 1 [ 111.683661][ T5550] Quota error (device loop1): write_blk: dquota write failed [ 111.683675][ T5550] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.591: Failed to acquire dquot type 1 [ 111.683822][ T5550] EXT4-fs (loop1): 1 orphan inode deleted [ 111.686106][ T5550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.686404][ T5550] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.029479][ T5574] loop1: detected capacity change from 0 to 512 [ 112.051017][ T5365] veth0_vlan: entered promiscuous mode [ 112.097651][ T5574] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 112.213219][ T5365] veth1_vlan: entered promiscuous mode [ 112.227927][ T5365] veth0_macvtap: entered promiscuous mode [ 112.252473][ T5574] EXT4-fs (loop1): failed to initialize system zone (-117) [ 112.267628][ T5574] EXT4-fs (loop1): mount failed [ 112.300931][ T5365] veth1_macvtap: entered promiscuous mode [ 112.348172][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.381161][ T5365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.409496][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.434592][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.480876][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.505544][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.548227][ T3312] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 112.559325][ T3312] CPU: 1 UID: 0 PID: 3312 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 112.559364][ T3312] Tainted: [W]=WARN [ 112.559373][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.559385][ T3312] Call Trace: [ 112.559399][ T3312] [ 112.559407][ T3312] __dump_stack+0x1d/0x30 [ 112.559482][ T3312] dump_stack_lvl+0x95/0xd0 [ 112.559509][ T3312] dump_stack+0x15/0x1b [ 112.559533][ T3312] dump_header+0x80/0x240 [ 112.559588][ T3312] oom_kill_process+0x295/0x350 [ 112.559617][ T3312] out_of_memory+0x97d/0xb80 [ 112.559647][ T3312] try_charge_memcg+0x62e/0xa10 [ 112.559704][ T3312] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 112.559743][ T3312] __read_swap_cache_async+0x17b/0x2d0 [ 112.559776][ T3312] swap_cluster_readahead+0x262/0x3c0 [ 112.559899][ T3312] swapin_readahead+0xde/0x840 [ 112.559956][ T3312] ? update_load_avg+0x1da/0x810 [ 112.560056][ T3312] ? __perf_event_task_sched_in+0xa65/0xad0 [ 112.560084][ T3312] ? __rcu_read_unlock+0x4e/0x70 [ 112.560118][ T3312] ? swap_cache_get_folio+0x26f/0x280 [ 112.560159][ T3312] do_swap_page+0x59b/0x2a50 [ 112.560188][ T3312] ? finish_task_switch+0x79/0x280 [ 112.560219][ T3312] ? __schedule+0x82d/0xc90 [ 112.560319][ T3312] ? __rcu_read_lock+0x36/0x50 [ 112.560351][ T3312] ? __pfx_default_wake_function+0x10/0x10 [ 112.560418][ T3312] handle_mm_fault+0xb40/0x3030 [ 112.560450][ T3312] ? vma_start_read+0x1c7/0x2c0 [ 112.560480][ T3312] do_user_addr_fault+0x62f/0x1050 [ 112.560634][ T3312] exc_page_fault+0x62/0xa0 [ 112.560716][ T3312] asm_exc_page_fault+0x26/0x30 [ 112.560736][ T3312] RIP: 0033:0x7fc1a21760d7 [ 112.560752][ T3312] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 112.560770][ T3312] RSP: 002b:00007fff25562160 EFLAGS: 00010202 [ 112.560787][ T3312] RAX: 0000000000000000 RBX: 000055556e9c0500 RCX: 00007fc1a21760d7 [ 112.560801][ T3312] RDX: 00007fff255621a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.560830][ T3312] RBP: 00007fff2556220c R08: 0000000000000000 R09: 0000000000000000 [ 112.560843][ T3312] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 112.560855][ T3312] R13: 00000000000927c0 R14: 000000000001b677 R15: 00007fff25562260 [ 112.560873][ T3312] [ 112.796881][ T3312] memory: usage 307200kB, limit 307200kB, failcnt 2437 [ 112.804076][ T3312] memory+swap: usage 307308kB, limit 9007199254740988kB, failcnt 0 [ 112.812105][ T3312] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 112.819413][ T3312] Memory cgroup stats for /syz4: [ 112.879634][ T5594] netlink: 'syz.6.600': attribute type 11 has an invalid length. [ 112.892898][ T5594] netlink: 140 bytes leftover after parsing attributes in process `syz.6.600'. [ 112.967957][ T3312] cache 0 [ 112.971244][ T3312] rss 0 [ 112.974116][ T3312] shmem 0 [ 112.977192][ T3312] mapped_file 0 [ 112.980815][ T3312] dirty 0 [ 112.984110][ T3312] writeback 0 [ 112.987538][ T3312] workingset_refault_anon 1 [ 112.992336][ T3312] workingset_refault_file 0 [ 112.997067][ T3312] swap 110592 [ 113.000701][ T3312] swapcached 4096 [ 113.004523][ T3312] pgpgin 63730 [ 113.008097][ T3312] pgpgout 63728 [ 113.011630][ T3312] pgfault 79753 [ 113.015310][ T3312] pgmajfault 94 [ 113.018969][ T3312] inactive_anon 0 [ 113.022742][ T3312] active_anon 4096 [ 113.026569][ T3312] inactive_file 0 [ 113.030349][ T3312] active_file 4096 [ 113.034262][ T3312] unevictable 0 [ 113.037744][ T3312] hierarchical_memory_limit 314572800 [ 113.043284][ T3312] hierarchical_memsw_limit 9223372036854771712 [ 113.049554][ T3312] total_cache 0 [ 113.053150][ T3312] total_rss 0 [ 113.056524][ T3312] total_shmem 0 [ 113.060012][ T3312] total_mapped_file 0 [ 113.064045][ T3312] total_dirty 0 [ 113.067516][ T3312] total_writeback 0 [ 113.071365][ T3312] total_workingset_refault_anon 1 [ 113.076415][ T3312] total_workingset_refault_file 0 [ 113.082191][ T3312] total_swap 110592 [ 113.086189][ T3312] total_swapcached 4096 [ 113.090468][ T3312] total_pgpgin 63730 [ 113.094499][ T3312] total_pgpgout 63728 [ 113.097082][ T5600] loop1: detected capacity change from 0 to 128 [ 113.098663][ T3312] total_pgfault 79753 [ 113.109135][ T3312] total_pgmajfault 94 [ 113.113157][ T3312] total_inactive_anon 0 [ 113.117356][ T3312] total_active_anon 4096 [ 113.121632][ T3312] total_inactive_file 0 [ 113.125800][ T3312] total_active_file 4096 [ 113.130264][ T3312] total_unevictable 0 [ 113.134353][ T3312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.598,pid=5579,uid=0 [ 113.138063][ T5604] loop2: detected capacity change from 0 to 512 [ 113.149966][ T3312] Memory cgroup out of memory: Killed process 5579 (syz.4.598) total-vm:96048kB, anon-rss:1332kB, file-rss:21388kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 113.206913][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.7.606'. [ 113.216017][ T5608] netlink: 4 bytes leftover after parsing attributes in process `syz.7.606'. [ 113.225172][ T5608] netlink: 'syz.7.606': attribute type 12 has an invalid length. [ 113.233445][ T5608] netlink: 'syz.7.606': attribute type 11 has an invalid length. [ 113.249732][ T5604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.264612][ T5613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.608'. [ 113.269480][ T5604] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.274125][ T5613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.608'. [ 113.299481][ T5608] loop7: detected capacity change from 0 to 1024 [ 113.312222][ T5604] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 2175 (only 1 groups) [ 113.348388][ T5608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.394517][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.431427][ T5628] loop1: detected capacity change from 0 to 128 [ 113.437769][ T5620] xt_hashlimit: size too large, truncated to 1048576 [ 113.438451][ T5365] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.537332][ T5621] xt_hashlimit: size too large, truncated to 1048576 [ 113.576545][ T5635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 113.686409][ T5647] loop7: detected capacity change from 0 to 512 [ 113.693071][ T5649] loop6: detected capacity change from 0 to 512 [ 113.700419][ T5649] ext4: Bad value for 'debug_want_extra_isize' [ 113.745481][ T5648] xt_CT: No such helper "syz0" [ 113.773939][ T5647] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -6 [ 113.817552][ T5662] netlink: 60 bytes leftover after parsing attributes in process `syz.2.623'. [ 113.863703][ T5664] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 113.870453][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 113.873630][ T5664] bridge1: entered promiscuous mode [ 113.925587][ T5670] program syz.4.627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.943346][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.953135][ C1] buffer_io_error: 4 callbacks suppressed [ 113.953151][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.968308][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 113.978361][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 113.988341][ T5673] loop6: unable to read partition table [ 114.006700][ C1] invalid error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 114.017054][ C1] invalid error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 114.027397][ T5673] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 114.043501][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 114.053345][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.059157][ T5677] netlink: 48 bytes leftover after parsing attributes in process `syz.6.629'. [ 114.063492][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.081507][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.091653][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.100097][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.109779][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.118423][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.128275][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.142405][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 114.152398][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 114.237210][ T5695] netlink: 'syz.6.636': attribute type 10 has an invalid length. [ 114.447096][ T5683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.512761][ T5683] EXT4-fs (loop4): 1 truncate cleaned up [ 114.588011][ T5681] bridge1: entered promiscuous mode [ 114.593404][ T5681] bridge1: entered allmulticast mode [ 114.626112][ T5683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.825050][ T5732] tipc: Started in network mode [ 114.830345][ T5732] tipc: Node identity 729010a4138c, cluster identity 4711 [ 114.837635][ T5732] tipc: Enabled bearer , priority 0 [ 114.881858][ T5723] tipc: Resetting bearer [ 114.911239][ T5723] tipc: Disabling bearer [ 115.085350][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.197628][ T5756] bridge1: entered promiscuous mode [ 115.203026][ T5756] bridge1: entered allmulticast mode [ 115.383188][ T5768] erspan0: entered promiscuous mode [ 115.473424][ T5771] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 115.541458][ T5771] EXT4-fs (loop4): failed to initialize system zone (-117) [ 115.558909][ T5771] EXT4-fs (loop4): mount failed [ 115.672307][ T5758] bridge1: entered promiscuous mode [ 115.678150][ T5758] bridge1: entered allmulticast mode [ 116.337792][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 116.337808][ T29] audit: type=1326 audit(1770120469.167:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5765 comm="syz.2.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1a58acaeb9 code=0x7fc00000 [ 116.435670][ T5842] netlink: 'syz.2.670': attribute type 11 has an invalid length. [ 116.470681][ T5849] __nla_validate_parse: 8 callbacks suppressed [ 116.470701][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 116.521647][ T5851] set_capacity_and_notify: 6 callbacks suppressed [ 116.521665][ T5851] loop2: detected capacity change from 0 to 512 [ 116.571727][ T5856] loop7: detected capacity change from 0 to 512 [ 116.577777][ T5851] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.608894][ T5856] ------------[ cut here ]------------ [ 116.610225][ T5851] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 116.614598][ T5856] EA inode 11 i_nlink=2 [ 116.623182][ T5856] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.7.675/5856 [ 116.638187][ T5856] Modules linked in: [ 116.642176][ T5856] CPU: 0 UID: 0 PID: 5856 Comm: syz.7.675 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 116.653654][ T5856] Tainted: [W]=WARN [ 116.657522][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.667730][ T5856] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 116.674821][ T5856] Code: e4 e5 9a ff 4c 8d 2d 2d 21 3e 05 49 8d 7e 40 e8 f4 cf b6 ff 49 8b 6e 40 4c 89 e7 e8 28 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f e1 d0 03 66 66 66 66 66 66 2e [ 116.695347][ T5856] RSP: 0018:ffffc90001b53778 EFLAGS: 00010246 [ 116.701596][ T5856] RAX: ffff88812d9d6d90 RBX: ffff88811a0bca78 RCX: ffffffff81be19f8 [ 116.709959][ T5856] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 116.718299][ T5856] RBP: 000000000000000b R08: 000188811a0bca2b R09: 0000000000000000 [ 116.727100][ T5856] R10: ffffc90001b536a8 R11: 0001c90001b536a8 R12: ffff88811a0bca28 [ 116.735318][ T5856] R13: ffffffff86fc3b10 R14: ffff88811a0bc9e0 R15: 0000000000000001 [ 116.743418][ T5856] FS: 00007f1d9aeb76c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 116.753739][ T5856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.760522][ T5856] CR2: 00007fb392a0e000 CR3: 0000000119a2c000 CR4: 00000000003506f0 [ 116.768809][ T5856] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.777369][ T5856] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 116.785487][ T5856] Call Trace: [ 116.788786][ T5856] [ 116.791792][ T5856] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 116.797949][ T5856] ? errseq_check+0x2c/0x50 [ 116.802550][ T5856] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 116.808355][ T5856] ext4_evict_inode+0xa1f/0xd40 [ 116.813455][ T5856] ? __pfx_ext4_evict_inode+0x10/0x10 [ 116.819114][ T5856] evict+0x2af/0x510 [ 116.823486][ T5856] ? __dquot_initialize+0x146/0x7c0 [ 116.823963][ T5854] bridge0: entered promiscuous mode [ 116.828968][ T5856] iput+0x4b9/0x650 [ 116.834528][ T5854] bridge0: entered allmulticast mode [ 116.838426][ T5856] ext4_process_orphan+0x1a9/0x1c0 [ 116.849389][ T5856] ext4_orphan_cleanup+0x6a8/0xa00 [ 116.854894][ T5856] ext4_fill_super+0x3476/0x3800 [ 116.860227][ T5856] ? set_blocksize+0x1a3/0x310 [ 116.865379][ T5856] ? setup_bdev_super+0x30e/0x370 [ 116.870568][ T5856] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.876036][ T5856] get_tree_bdev_flags+0x291/0x300 [ 116.881332][ T5856] ? __pfx_ext4_fill_super+0x10/0x10 [ 116.886731][ T5856] get_tree_bdev+0x1f/0x30 [ 116.891386][ T5856] ext4_get_tree+0x1c/0x30 [ 116.895891][ T5856] vfs_get_tree+0x57/0x1d0 [ 116.900624][ T5856] do_new_mount+0x288/0x700 [ 116.905207][ T5856] path_mount+0x4d0/0xbc0 [ 116.909967][ T5856] ? user_path_at+0xbf/0x130 [ 116.914939][ T5856] __se_sys_mount+0x28c/0x2e0 [ 116.919716][ T5856] __x64_sys_mount+0x67/0x80 [ 116.924992][ T5856] x64_sys_call+0x2cca/0x3000 [ 116.929716][ T5856] do_syscall_64+0xc0/0x2a0 [ 116.934419][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.935361][ T5861] netlink: 176 bytes leftover after parsing attributes in process `syz.6.676'. [ 116.940563][ T5856] RIP: 0033:0x7f1d9c45c14a [ 116.940647][ T5856] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.974749][ T5856] RSP: 002b:00007f1d9aeb6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.983409][ T5856] RAX: ffffffffffffffda RBX: 00007f1d9aeb6ee0 RCX: 00007f1d9c45c14a [ 116.991693][ T5856] RDX: 0000200000000180 RSI: 0000200000000240 RDI: 00007f1d9aeb6ea0 [ 117.000052][ T5856] RBP: 0000200000000180 R08: 00007f1d9aeb6ee0 R09: 0000000000800700 [ 117.008400][ T5856] R10: 0000000000800700 R11: 0000000000000246 R12: 0000200000000240 [ 117.016720][ T5856] R13: 00007f1d9aeb6ea0 R14: 000000000000046f R15: 0000200000000040 [ 117.024946][ T5856] [ 117.028274][ T5856] ---[ end trace 0000000000000000 ]--- [ 117.035013][ T5856] EXT4-fs (loop7): 1 orphan inode deleted [ 117.055023][ T5856] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.073204][ T5869] loop4: detected capacity change from 0 to 164 [ 117.074197][ T5860] loop6: detected capacity change from 0 to 512 [ 117.102424][ T29] audit: type=1400 audit(1770120469.917:2727): avc: denied { mounton } for pid=5867 comm="syz.4.678" path="/153/file0" dev="tmpfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 117.110733][ T5856] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿš@­LqE:†‹ á艞Õt}²0ü$‰' [ 117.126708][ T29] audit: type=1400 audit(1770120469.917:2728): avc: denied { mount } for pid=5867 comm="syz.4.678" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 117.178254][ T5874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.679'. [ 117.208142][ T5874] loop4: detected capacity change from 0 to 512 [ 117.237649][ T5877] SELinux: syz.2.681 (5877) set checkreqprot to 1. This is no longer supported. [ 117.247527][ T5365] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.263546][ T29] audit: type=1400 audit(1770120469.937:2729): avc: denied { mounton } for pid=5855 comm="syz.7.675" path="/17/file0" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.285921][ T5881] netlink: 68 bytes leftover after parsing attributes in process `syz.2.682'. [ 117.288311][ T29] audit: type=1400 audit(1770120469.937:2730): avc: denied { mount } for pid=5855 comm="syz.7.675" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 117.298873][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.682'. [ 117.321055][ T29] audit: type=1400 audit(1770120470.067:2731): avc: denied { unmount } for pid=5365 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 117.321087][ T29] audit: type=1400 audit(1770120470.067:2732): avc: denied { setcheckreqprot } for pid=5876 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 117.330863][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 117.415703][ T5860] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 117.431088][ T5860] EXT4-fs (loop6): orphan cleanup on readonly fs [ 117.499822][ T29] audit: type=1326 audit(1770120470.327:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 117.524496][ T29] audit: type=1326 audit(1770120470.327:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a58a8b78e code=0x7ffc0000 [ 117.549033][ T29] audit: type=1326 audit(1770120470.327:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 117.580538][ T5860] EXT4-fs (loop6): 1 orphan inode deleted [ 117.583528][ T5886] loop4: detected capacity change from 0 to 512 [ 117.596951][ T5890] netlink: 16 bytes leftover after parsing attributes in process `syz.7.685'. [ 117.606343][ T3442] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 117.669657][ T5886] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 117.697178][ T5886] EXT4-fs (loop4): Remounting filesystem read-only [ 117.704439][ T5886] EXT4-fs (loop4): 1 truncate cleaned up [ 117.724442][ T5860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.729817][ T5886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.913737][ T5223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.110336][ T5903] loop2: detected capacity change from 0 to 512 [ 118.196055][ T5897] bridge1: entered promiscuous mode [ 118.201720][ T5897] bridge1: entered allmulticast mode [ 118.209057][ T5903] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 118.249147][ T5903] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.286168][ T5903] EXT4-fs (loop2): 1 orphan inode deleted [ 118.294515][ T52] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 118.415807][ T5903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.489371][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.585017][ T5927] bond4: option tlb_dynamic_lb: invalid value (2) [ 118.625987][ T5927] bond4 (unregistering): Released all slaves [ 118.668217][ T5929] loop2: detected capacity change from 0 to 1024 [ 118.714182][ T5929] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.799974][ T5929] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 118.816790][ T5929] EXT4-fs (loop2): orphan cleanup on readonly fs [ 118.879984][ T5929] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.697: Invalid inode table block 0 in block_group 0 [ 118.927608][ T5929] EXT4-fs (loop2): Remounting filesystem read-only [ 118.943347][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.967415][ T5934] loop6: detected capacity change from 0 to 128 [ 118.982730][ T5929] EXT4-fs (loop2): 1 truncate cleaned up [ 118.995250][ T5929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.023569][ T5934] bio_check_eod: 18 callbacks suppressed [ 119.023651][ T5934] syz.6.699: attempt to access beyond end of device [ 119.023651][ T5934] loop6: rw=2049, sector=129, nr_sectors = 112 limit=128 [ 119.063396][ T5940] netlink: 'syz.1.702': attribute type 1 has an invalid length. [ 119.095563][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.702'. [ 119.109848][ T5943] loop4: detected capacity change from 0 to 1024 [ 119.125851][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.135697][ T5946] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 119.147445][ T5946] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (24509!=33349) [ 119.175164][ T5943] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.199122][ T5946] EXT4-fs (loop7): failed to initialize system zone (-117) [ 119.206851][ T5946] EXT4-fs (loop7): mount failed [ 119.209528][ T5954] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 119.254801][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.275392][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.708'. [ 119.290099][ T5956] syzkaller1: entered promiscuous mode [ 119.295748][ T5956] syzkaller1: entered allmulticast mode [ 119.369821][ T3310] VFS: Lookup of '.. ' in vfat loop1 would have caused loop [ 119.381509][ T3310] VFS: Lookup of '.. ' in vfat loop1 would have caused loop [ 119.424489][ T5194] team0: Port device syz_tun removed [ 119.467141][ T5968] netlink: 'syz.7.713': attribute type 11 has an invalid length. [ 119.475347][ T5968] netlink: 140 bytes leftover after parsing attributes in process `syz.7.713'. [ 119.517520][ T5970] journal_path: Non-blockdev passed as './file1' [ 119.524156][ T5970] EXT4-fs: error: could not find journal device path [ 119.543480][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.556688][ T5972] netlink: 'syz.7.716': attribute type 1 has an invalid length. [ 119.651988][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.771463][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.831444][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.869655][ T6004] netlink: 'syz.2.725': attribute type 10 has an invalid length. [ 119.924072][ T6008] ipvlan0: entered promiscuous mode [ 119.996312][ T37] bridge_slave_1: left allmulticast mode [ 120.002145][ T37] bridge_slave_1: left promiscuous mode [ 120.007915][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.055769][ T6020] EXT4-fs: Ignoring removed bh option [ 120.061521][ T6020] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.098956][ T37] bridge_slave_0: left allmulticast mode [ 120.104888][ T37] bridge_slave_0: left promiscuous mode [ 120.110797][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.129161][ T6020] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 120.190411][ T6020] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 120.211276][ T6028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.229034][ T6020] EXT4-fs (loop7): orphan cleanup on readonly fs [ 120.236148][ T6020] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.731: Failed to acquire dquot type 1 [ 120.238107][ T37] bond1 (unregistering): (slave gretap1): Releasing active interface [ 120.248343][ T6020] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.731: Invalid block bitmap block 0 in block_group 0 [ 120.278543][ T6020] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.731: Invalid block bitmap block 0 in block_group 0 [ 120.294373][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.334336][ T6020] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.731: Invalid block bitmap block 0 in block_group 0 [ 120.375414][ T6020] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.731: Failed to acquire dquot type 1 [ 120.388740][ T6020] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.731: Failed to acquire dquot type 1 [ 120.400569][ T6020] EXT4-fs (loop7): 1 orphan inode deleted [ 120.418001][ T6020] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.432237][ T6020] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.446884][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.464581][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.483262][ T37] bond0 (unregistering): Released all slaves [ 120.500981][ T37] bond1 (unregistering): Released all slaves [ 120.508403][ T6058] Cannot find add_set index 0 as target [ 120.510393][ T37] bond2 (unregistering): Released all slaves [ 120.525544][ T37] bond3 (unregistering): Released all slaves [ 120.606565][ T6065] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 120.617023][ T6068] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.639237][ T6068] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.683992][ T37] hsr_slave_0: left promiscuous mode [ 120.705553][ T37] hsr_slave_1: left promiscuous mode [ 120.733037][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.746694][ T6073] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.741: reserved inode found cleared - inode=2 [ 120.788562][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.920148][ T37] team0 (unregistering): Port device team_slave_1 removed [ 120.950389][ T37] team0 (unregistering): Port device team_slave_0 removed [ 121.134137][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 121.188355][ T6071] bridge2: entered promiscuous mode [ 121.193873][ T6071] bridge2: entered allmulticast mode [ 121.323894][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.331962][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.350173][ T5977] bridge_slave_0: entered allmulticast mode [ 121.357046][ T5977] bridge_slave_0: entered promiscuous mode [ 121.364543][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.372789][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.380601][ T5977] bridge_slave_1: entered allmulticast mode [ 121.387681][ T5977] bridge_slave_1: entered promiscuous mode [ 121.416727][ T37] IPVS: stop unused estimator thread 0... [ 121.425221][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.454530][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.467308][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 121.467323][ T29] audit: type=1326 audit(1770120474.307:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8222daeb9 code=0x7ffc0000 [ 121.547600][ T29] audit: type=1326 audit(1770120474.367:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8222daeb9 code=0x7ffc0000 [ 121.574246][ T5977] team0: Port device team_slave_0 added [ 121.620030][ T5977] team0: Port device team_slave_1 added [ 121.627874][ T29] audit: type=1326 audit(1770120474.417:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7ff8222daeb9 code=0x7ffc0000 [ 121.652953][ T29] audit: type=1326 audit(1770120474.417:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8222daeb9 code=0x7ffc0000 [ 121.656257][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.679935][ T29] audit: type=1326 audit(1770120474.417:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6077 comm="syz.6.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8222daeb9 code=0x7ffc0000 [ 121.687318][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.687400][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.770176][ T6068] syz.4.741 (6068) used greatest stack depth: 7272 bytes left [ 121.811208][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.818404][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.845848][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.883734][ T6117] set_capacity_and_notify: 7 callbacks suppressed [ 121.883752][ T6117] loop2: detected capacity change from 0 to 512 [ 121.900370][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.984241][ T6117] EXT4-fs: Ignoring removed i_version option [ 122.034599][ T5977] hsr_slave_0: entered promiscuous mode [ 122.051317][ T6117] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.074324][ T5977] hsr_slave_1: entered promiscuous mode [ 122.089942][ T29] audit: type=1400 audit(1770120474.917:2809): avc: denied { read } for pid=6132 comm="syz.6.754" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 122.100282][ T5977] debugfs: 'hsr0' already exists in 'hsr' [ 122.113781][ T29] audit: type=1400 audit(1770120474.917:2810): avc: denied { open } for pid=6132 comm="syz.6.754" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 122.120022][ T5977] Cannot create hsr debugfs directory [ 122.153533][ T6117] EXT4-fs (loop2): 1 truncate cleaned up [ 122.164898][ T6134] __nla_validate_parse: 8 callbacks suppressed [ 122.164993][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.6.754'. [ 122.182652][ T6117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.215532][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.6.754'. [ 122.251140][ T6131] loop4: detected capacity change from 0 to 512 [ 122.252993][ T6134] loop6: detected capacity change from 0 to 512 [ 122.266066][ T29] audit: type=1400 audit(1770120474.987:2811): avc: denied { ioctl } for pid=6132 comm="syz.6.754" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 122.294120][ T6134] EXT4-fs: Ignoring removed i_version option [ 122.395474][ T6134] EXT4-fs (loop6): orphan cleanup on readonly fs [ 122.422685][ T6131] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 122.450306][ T6134] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.754: EA inode hash validation failed [ 122.468947][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.471199][ T6131] EXT4-fs (loop4): orphan cleanup on readonly fs [ 122.509941][ T6134] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 122.525546][ T29] audit: type=1326 audit(1770120475.347:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.7.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9c45aeb9 code=0x7ffc0000 [ 122.534044][ T5977] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 122.549693][ T29] audit: type=1326 audit(1770120475.347:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6154 comm="syz.7.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9c45aeb9 code=0x7ffc0000 [ 122.556793][ T6134] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.754: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 122.604205][ T6134] EXT4-fs (loop6): Remounting filesystem read-only [ 122.611462][ T6134] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.754: ea_inode dec ref err=-117 [ 122.643231][ T5977] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 122.662976][ T5977] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 122.677805][ T6131] EXT4-fs (loop4): 1 orphan inode deleted [ 122.706374][ T6134] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 122.708120][ T5977] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 122.715774][ T52] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 122.737528][ T6134] EXT4-fs (loop6): 1 orphan inode deleted [ 122.757160][ T6134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 122.797107][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 122.806394][ T6131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.958865][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.990092][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.003439][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.014093][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.021267][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.035838][ T5223] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.061804][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.069221][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.104013][ T6186] netlink: 'syz.2.759': attribute type 27 has an invalid length. [ 123.151653][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.159629][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.169136][ T6191] loop4: detected capacity change from 0 to 256 [ 123.371430][ T6186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.383525][ T6186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.490013][ T6206] netlink: 'syz.4.765': attribute type 10 has an invalid length. [ 123.492562][ T6186] vlan2: left promiscuous mode [ 123.502855][ T6186] bond1: left promiscuous mode [ 123.507687][ T6186] geneve2: left promiscuous mode [ 123.521135][ T6186] bond3: left promiscuous mode [ 123.527726][ T6186] bridge1: left promiscuous mode [ 123.532768][ T6186] bridge1: left allmulticast mode [ 123.628434][ T3442] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.663838][ T3442] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.683511][ T3442] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.702057][ T3442] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.778377][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.799693][ T6225] loop7: detected capacity change from 0 to 512 [ 123.845919][ T6225] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.892253][ T6225] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 123.965222][ T6225] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.768: bg 0: block 248: padding at end of block bitmap is not set [ 124.016152][ T6225] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.768: Failed to acquire dquot type 1 [ 124.060719][ T6225] EXT4-fs (loop7): 1 truncate cleaned up [ 124.092000][ T6225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 124.151542][ T6272] netlink: 'syz.2.776': attribute type 1 has an invalid length. [ 124.160307][ T6272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 124.211813][ T5977] veth0_vlan: entered promiscuous mode [ 124.222908][ T5977] veth1_vlan: entered promiscuous mode [ 124.272985][ T5977] veth0_macvtap: entered promiscuous mode [ 124.291085][ T5365] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 124.293371][ T5977] veth1_macvtap: entered promiscuous mode [ 124.347253][ T6285] netlink: 48 bytes leftover after parsing attributes in process `syz.2.778'. [ 124.365428][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.365472][ T6289] loop6: detected capacity change from 0 to 256 [ 124.418540][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.448703][ T6289] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 124.467831][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.483267][ T6289] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65300 sclass=netlink_tcpdiag_socket pid=6289 comm=syz.6.779 [ 124.487845][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.526255][ T6302] loop7: detected capacity change from 0 to 512 [ 124.545016][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.606566][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.662221][ T6312] netlink: 'syz.7.784': attribute type 10 has an invalid length. [ 124.749225][ T12] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 124.755859][ T6312] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 124.825948][ T6324] netlink: 'syz.6.785': attribute type 27 has an invalid length. [ 124.880406][ T6324] C: renamed from team_slave_0 (while UP) [ 124.991675][ T6337] netlink: 'syz.4.788': attribute type 1 has an invalid length. [ 125.012367][ T6338] loop8: detected capacity change from 0 to 128 [ 125.048572][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.788'. [ 125.137082][ T6344] netlink: 'syz.8.791': attribute type 11 has an invalid length. [ 125.200558][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.6.794'. [ 125.225553][ T6356] loop8: detected capacity change from 0 to 512 [ 125.264384][ T6356] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.795: invalid indirect mapped block 256 (level 2) [ 125.279341][ T6356] EXT4-fs (loop8): 2 truncates cleaned up [ 125.285817][ T6359] netlink: 300 bytes leftover after parsing attributes in process `syz.7.790'. [ 125.307578][ T6363] netlink: 'syz.6.798': attribute type 10 has an invalid length. [ 125.323313][ T6356] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.358632][ T6366] netlink: 16 bytes leftover after parsing attributes in process `syz.4.799'. [ 125.443504][ T5977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.557772][ T6384] netlink: 68 bytes leftover after parsing attributes in process `syz.6.806'. [ 125.634503][ T6398] loop7: detected capacity change from 0 to 1024 [ 125.663382][ T6355] bridge3: entered promiscuous mode [ 125.669293][ T6355] bridge3: entered allmulticast mode [ 125.689735][ T6400] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.755078][ T6398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.903032][ T5365] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.997084][ T6424] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.818: invalid indirect mapped block 256 (level 2) [ 126.046262][ T6424] EXT4-fs (loop7): 2 truncates cleaned up [ 126.068007][ T6424] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.128628][ T5365] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.264722][ T6429] netlink: 'syz.7.820': attribute type 18 has an invalid length. [ 126.490234][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 126.490252][ T29] audit: type=1400 audit(1770120479.327:3101): avc: denied { create } for pid=6430 comm="syz.7.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 126.554584][ T6437] netlink: 'syz.8.823': attribute type 10 has an invalid length. [ 126.566198][ T6439] netlink: 'syz.7.822': attribute type 10 has an invalid length. [ 126.594972][ T5223] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 126.603217][ T5223] FAT-fs (loop6): Filesystem has been set read-only [ 126.611183][ T5223] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 126.724754][ T6446] sctp: [Deprecated]: syz.7.827 (pid 6446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.724754][ T6446] Use struct sctp_sack_info instead [ 126.800850][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.882699][ T29] audit: type=1400 audit(1770120479.717:3102): avc: denied { read } for pid=6450 comm="syz.4.829" path="socket:[15875]" dev="sockfs" ino=15875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.913718][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.023508][ T6460] netlink: 'syz.7.832': attribute type 1 has an invalid length. [ 127.155080][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.223639][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.227826][ T29] audit: type=1400 audit(1770120479.767:3103): avc: denied { write } for pid=6450 comm="syz.4.829" path="socket:[15876]" dev="sockfs" ino=15876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 127.259766][ T29] audit: type=1326 audit(1770120479.887:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.2.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 127.284547][ T29] audit: type=1326 audit(1770120479.887:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.2.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 127.309039][ T29] audit: type=1326 audit(1770120479.887:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.2.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 127.333607][ T29] audit: type=1326 audit(1770120479.887:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.2.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 127.357493][ T29] audit: type=1326 audit(1770120479.887:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.2.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 127.382463][ T29] audit: type=1326 audit(1770120479.887:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6440 comm="syz.2.825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 127.464712][ T6468] -1: renamed from syzkaller0 [ 127.606077][ T37] bridge_slave_1: left allmulticast mode [ 127.611965][ T37] bridge_slave_1: left promiscuous mode [ 127.617777][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.644937][ T37] bridge_slave_0: left allmulticast mode [ 127.650942][ T37] bridge_slave_0: left promiscuous mode [ 127.657226][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.661141][ T6488] __nla_validate_parse: 4 callbacks suppressed [ 127.661159][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.8.838'. [ 127.751369][ T37] batman_adv: batadv0: Removing interface: ip6gretap1 [ 127.828540][ T37] team0: Port device gretap1 removed [ 127.852432][ T6478] syz.7.837 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 127.863914][ T6478] CPU: 1 UID: 0 PID: 6478 Comm: syz.7.837 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.863955][ T6478] Tainted: [W]=WARN [ 127.863962][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.864028][ T6478] Call Trace: [ 127.864036][ T6478] [ 127.864045][ T6478] __dump_stack+0x1d/0x30 [ 127.864073][ T6478] dump_stack_lvl+0x95/0xd0 [ 127.864098][ T6478] dump_stack+0x15/0x1b [ 127.864138][ T6478] dump_header+0x80/0x240 [ 127.864190][ T6478] oom_kill_process+0x295/0x350 [ 127.864217][ T6478] out_of_memory+0x97d/0xb80 [ 127.864259][ T6478] try_charge_memcg+0x62e/0xa10 [ 127.864295][ T6478] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 127.864331][ T6478] __read_swap_cache_async+0x17b/0x2d0 [ 127.864379][ T6478] swap_cluster_readahead+0x262/0x3c0 [ 127.864421][ T6478] swapin_readahead+0xde/0x840 [ 127.864459][ T6478] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 127.864497][ T6478] ? lruvec_stat_mod_folio+0xd2/0x110 [ 127.864528][ T6478] ? __rcu_read_unlock+0x4e/0x70 [ 127.864631][ T6478] ? swap_cache_get_folio+0x26f/0x280 [ 127.864806][ T6478] do_swap_page+0x59b/0x2a50 [ 127.864840][ T6478] ? __rcu_read_lock+0x36/0x50 [ 127.864899][ T6478] ? __pfx_default_wake_function+0x10/0x10 [ 127.864934][ T6478] handle_mm_fault+0xb40/0x3030 [ 127.865047][ T6478] ? vma_start_read+0x1c7/0x2c0 [ 127.865081][ T6478] do_user_addr_fault+0x62f/0x1050 [ 127.865188][ T6478] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 127.865212][ T6478] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 127.865243][ T6478] ? irqentry_exit+0x3c/0x510 [ 127.865279][ T6478] exc_page_fault+0x62/0xa0 [ 127.865306][ T6478] asm_exc_page_fault+0x26/0x30 [ 127.865402][ T6478] RIP: 0033:0x7f1d9c45b9f6 [ 127.865504][ T6478] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 127.865527][ T6478] RSP: 002b:00007ffc0d68a330 EFLAGS: 00010246 [ 127.865551][ T6478] RAX: 000000000001f353 RBX: 00007f1d9c6d5fa0 RCX: 000000000001f018 [ 127.865568][ T6478] RDX: 000000000000033b RSI: 0000000000000000 RDI: 00000000000003e8 [ 127.865585][ T6478] RBP: 00007f1d9c6d7da0 R08: 00000000314dddfc R09: 7fffffffffffffff [ 127.865603][ T6478] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000001f50c [ 127.865655][ T6478] R13: 00007f1d9c6d609c R14: 000000000001f2a3 R15: 00007f1d9c6d6090 [ 127.865694][ T6478] [ 127.865717][ T6478] memory: usage 307200kB, limit 307200kB, failcnt 81 [ 128.121871][ T6478] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 128.130148][ T6478] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 128.137742][ T6478] Memory cgroup stats for /syz7: [ 128.138073][ T6478] cache 0 [ 128.146686][ T6478] rss 4096 [ 128.149996][ T6478] shmem 0 [ 128.152973][ T6478] mapped_file 0 [ 128.156449][ T6478] dirty 0 [ 128.159438][ T6478] writeback 0 [ 128.163001][ T6478] workingset_refault_anon 38 [ 128.167697][ T6478] workingset_refault_file 0 [ 128.173182][ T6478] swap 188416 [ 128.176650][ T6478] swapcached 8192 [ 128.180925][ T6478] pgpgin 33606 [ 128.184466][ T6478] pgpgout 33603 [ 128.188017][ T6478] pgfault 19625 [ 128.191623][ T6478] pgmajfault 25 [ 128.195188][ T6478] inactive_anon 0 [ 128.199184][ T6478] active_anon 8192 [ 128.203317][ T6478] inactive_file 0 [ 128.207317][ T6478] active_file 4096 [ 128.211183][ T6478] unevictable 0 [ 128.214749][ T6478] hierarchical_memory_limit 314572800 [ 128.220478][ T6478] hierarchical_memsw_limit 9223372036854771712 [ 128.226662][ T6478] total_cache 0 [ 128.230379][ T6478] total_rss 4096 [ 128.233939][ T6478] total_shmem 0 [ 128.237519][ T6478] total_mapped_file 0 [ 128.241611][ T6478] total_dirty 0 [ 128.245105][ T6478] total_writeback 0 [ 128.249179][ T6478] total_workingset_refault_anon 38 [ 128.254722][ T6478] total_workingset_refault_file 0 [ 128.260349][ T6478] total_swap 188416 [ 128.264601][ T6478] total_swapcached 8192 [ 128.268798][ T6478] total_pgpgin 33606 [ 128.272809][ T6478] total_pgpgout 33603 [ 128.276830][ T6478] total_pgfault 19625 [ 128.281602][ T6478] total_pgmajfault 25 [ 128.285801][ T6478] total_inactive_anon 0 [ 128.290216][ T6478] total_active_anon 8192 [ 128.294723][ T6478] total_inactive_file 0 [ 128.299107][ T6478] total_active_file 4096 [ 128.303701][ T6478] total_unevictable 0 [ 128.307999][ T6478] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.837,pid=6478,uid=0 [ 128.323205][ T6478] Memory cgroup out of memory: Killed process 6478 (syz.7.837) total-vm:94132kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 128.380736][ T29] audit: type=1326 audit(1770120481.217:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6512 comm="syz.4.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a21baeb9 code=0x7ffc0000 [ 128.407606][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.418800][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.431100][ T37] bond0 (unregistering): Released all slaves [ 128.439392][ T37] bond1 (unregistering): Released all slaves [ 128.448878][ T37] bond2 (unregistering): Released all slaves [ 128.468301][ T6504] erspan0: entered promiscuous mode [ 128.474138][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.2.840'. [ 128.631572][ T6454] chnl_net:caif_netlink_parms(): no params data found [ 128.855015][ T6454] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.862560][ T6454] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.920624][ T6454] bridge_slave_0: entered allmulticast mode [ 128.945846][ T6454] bridge_slave_0: entered promiscuous mode [ 128.971611][ T6454] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.979585][ T6454] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.013290][ T6454] bridge_slave_1: entered allmulticast mode [ 129.020448][ T6454] bridge_slave_1: entered promiscuous mode [ 129.076107][ T6566] set_capacity_and_notify: 3 callbacks suppressed [ 129.076127][ T6566] loop8: detected capacity change from 0 to 1024 [ 129.101926][ T6566] EXT4-fs: inline encryption not supported [ 129.117346][ T6454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.128714][ T6454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.140475][ T6566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.188303][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.858'. [ 129.205158][ T6454] team0: Port device team_slave_0 added [ 129.220253][ T6454] team0: Port device team_slave_1 added [ 129.232025][ T6566] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.857: Allocating blocks 113-513 which overlap fs metadata [ 129.251242][ T6566] EXT4-fs (loop8): Remounting filesystem read-only [ 129.259658][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.266968][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.293885][ T6454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.315686][ T5977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.335818][ T6454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.343211][ T6454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.370804][ T6454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.442695][ T6454] hsr_slave_0: entered promiscuous mode [ 129.449036][ T6454] hsr_slave_1: entered promiscuous mode [ 129.509551][ T6454] debugfs: 'hsr0' already exists in 'hsr' [ 129.515525][ T6454] Cannot create hsr debugfs directory [ 129.529984][ T6597] loop4: detected capacity change from 0 to 512 [ 129.537913][ T6585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.550506][ T6597] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 129.562245][ T6597] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24509!=33349) [ 129.600418][ T6597] EXT4-fs (loop4): failed to initialize system zone (-117) [ 129.610010][ T6597] EXT4-fs (loop4): mount failed [ 129.687393][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 129.690525][ T6606] SELinux: Context system_u:object is not valid (left unmapped). [ 129.717253][ T6608] loop7: detected capacity change from 0 to 1024 [ 129.725705][ T6608] journal_path: Lookup failure for './file0' [ 129.732017][ T6608] EXT4-fs: error: could not find journal device path [ 129.775530][ T6454] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 129.809535][ T6454] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 129.843715][ T6454] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 129.860028][ T6454] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 129.922597][ T6454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.951656][ T6454] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.967634][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.975198][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.033258][ T37] hsr_slave_0: left promiscuous mode [ 130.061751][ T37] hsr_slave_1: left promiscuous mode [ 130.067931][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.075783][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.097178][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.105226][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.144187][ T37] veth1_macvtap: left promiscuous mode [ 130.155666][ T6645] netlink: 'syz.4.871': attribute type 5 has an invalid length. [ 130.159364][ T37] veth0_macvtap: left promiscuous mode [ 130.191906][ T37] veth1_vlan: left promiscuous mode [ 130.197510][ T37] veth0_vlan: left promiscuous mode [ 130.302549][ T37] team0 (unregistering): Port device team_slave_1 removed [ 130.320919][ T37] team0 (unregistering): Port device C removed [ 130.378522][ T6656] loop8: detected capacity change from 0 to 1024 [ 130.416230][ T6656] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.457345][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.464788][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.546526][ T6454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.557610][ T6454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.571230][ T5977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.620440][ T6669] loop8: detected capacity change from 0 to 512 [ 130.630176][ T6669] journal_path: Non-blockdev passed as './file1' [ 130.636907][ T6669] EXT4-fs: error: could not find journal device path [ 130.651380][ T6667] loop4: detected capacity change from 0 to 1024 [ 130.725536][ T6667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.831455][ T6454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.872514][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.037239][ T6694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.881'. [ 131.116389][ T6699] geneve2: entered promiscuous mode [ 131.131940][ T3442] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 52421 - 0 [ 131.152494][ T3442] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 52421 - 0 [ 131.193582][ T6454] veth0_vlan: entered promiscuous mode [ 131.228222][ T6454] veth1_vlan: entered promiscuous mode [ 131.239195][ T3442] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 52421 - 0 [ 131.249539][ T3442] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 52421 - 0 [ 131.272491][ T6454] veth0_macvtap: entered promiscuous mode [ 131.282267][ T6669] loop8: detected capacity change from 0 to 32768 [ 131.302350][ T6454] veth1_macvtap: entered promiscuous mode [ 131.332259][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.356329][ T6454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.364425][ T6669] loop8: p1 p3 < p5 p6 > [ 131.369496][ T6669] loop8: partition table partially beyond EOD, truncated [ 131.378863][ T31] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.414135][ T31] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.439425][ T31] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.467584][ T31] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.488636][ T6711] netlink: 'syz.2.885': attribute type 4 has an invalid length. [ 131.520781][ T6711] netlink: 'syz.2.885': attribute type 4 has an invalid length. [ 131.639978][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 131.640000][ T29] audit: type=1400 audit(1770120484.467:3187): avc: denied { setattr } for pid=6721 comm="syz.9.888" name="SCO" dev="sockfs" ino=17629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 131.691689][ T3928] udevd[3928]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 131.721986][ T3929] udevd[3929]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 131.731396][ T3934] udevd[3934]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 131.733028][ T5387] udevd[5387]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 131.949050][ T6738] loop9: detected capacity change from 0 to 2048 [ 131.967067][ T6738] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 131.980222][ T6740] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 132.089556][ T6744] loop9: detected capacity change from 0 to 512 [ 132.319621][ T29] audit: type=1326 audit(1770120484.937:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 132.344692][ T29] audit: type=1326 audit(1770120484.937:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 132.369640][ T29] audit: type=1326 audit(1770120484.937:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 132.394088][ T29] audit: type=1326 audit(1770120484.937:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 132.418597][ T29] audit: type=1326 audit(1770120484.937:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 132.444023][ T29] audit: type=1326 audit(1770120484.937:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 132.468137][ T29] audit: type=1326 audit(1770120484.937:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 132.492870][ T29] audit: type=1326 audit(1770120484.937:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6741 comm="syz.2.895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a58acaeb9 code=0x7ffc0000 [ 132.559856][ T6744] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #17: comm syz.9.888: iget: immutable or append flags not allowed on symlinks [ 132.645297][ T6744] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.888: couldn't read orphan inode 17 (err -117) [ 132.679121][ T6748] netlink: 48 bytes leftover after parsing attributes in process `syz.8.897'. [ 132.722669][ T6744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.893078][ T6768] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 132.961304][ T6775] loop8: detected capacity change from 0 to 128 [ 132.984693][ T6775] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.042781][ T6775] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 133.043257][ T6454] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.156620][ T6785] netlink: 'syz.2.914': attribute type 5 has an invalid length. [ 133.246830][ T6775] EXT4-fs (loop8): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 133.260252][ T6789] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.913: invalid indirect mapped block 256 (level 2) [ 133.283214][ T6792] EXT4-fs (loop8): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 133.315610][ T6789] EXT4-fs (loop9): 2 truncates cleaned up [ 133.345910][ T6789] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.392019][ T6795] msdos: Unknown parameter '' [ 133.415956][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 133.432972][ T6792] EXT4-fs error (device loop8): __ext4_new_inode:1073: comm syz.8.909: reserved inode found cleared - inode=2 [ 133.454379][ T29] audit: type=1400 audit(1770120486.287:3196): avc: denied { read } for pid=6788 comm="syz.9.913" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 133.507078][ T5977] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.519385][ T6454] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.538901][ T6801] xt_CT: No such helper "syz0" [ 133.639843][ T6813] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.924: invalid indirect mapped block 256 (level 2) [ 133.850002][ T6813] EXT4-fs (loop4): 2 truncates cleaned up [ 133.856695][ T6813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.859134][ T6824] netlink: 16 bytes leftover after parsing attributes in process `syz.7.926'. [ 133.899632][ T6821] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 133.925477][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.947865][ T6821] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.999308][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 134.023356][ T6819] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.925: Failed to acquire dquot type 0 [ 134.076077][ T5977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 134.238244][ T6853] set_capacity_and_notify: 4 callbacks suppressed [ 134.238265][ T6853] loop8: detected capacity change from 0 to 128 [ 134.271997][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.8.935'. [ 134.273123][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.937'. [ 134.285801][ T6853] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 134.299400][ T6853] FAT-fs (loop8): Filesystem has been set read-only [ 134.629738][ T6867] netlink: 68 bytes leftover after parsing attributes in process `syz.4.933'. [ 134.716114][ T6867] netlink: 68 bytes leftover after parsing attributes in process `syz.4.933'. [ 134.758228][ T6875] program syz.9.944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.850371][ T6883] program syz.4.947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.899515][ T6879] loop7: detected capacity change from 0 to 8192 [ 134.907876][ T6887] loop4: detected capacity change from 0 to 512 [ 134.956060][ T6887] EXT4-fs (loop4): 1 orphan inode deleted [ 134.999459][ T5365] VFS: Lookup of '.. ' in vfat loop7 would have caused loop [ 135.008152][ T6887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.026384][ T6891] tipc: Enabling of bearer rejected, failed to enable media [ 135.026816][ T5365] VFS: Lookup of '.. ' in vfat loop7 would have caused loop [ 135.064420][ T5365] bond0: (slave syz_tun): Releasing backup interface [ 135.080795][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.108407][ T6899] netlink: 'syz.4.953': attribute type 10 has an invalid length. [ 135.125405][ T2126] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.157260][ T2126] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.178900][ T6903] netlink: 68 bytes leftover after parsing attributes in process `syz.4.956'. [ 135.206835][ T2126] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.241067][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 135.314117][ T2126] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.473412][ T2126] bridge_slave_1: left allmulticast mode [ 135.479488][ T2126] bridge_slave_1: left promiscuous mode [ 135.486342][ T2126] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.526072][ T2126] bridge_slave_0: left allmulticast mode [ 135.532286][ T2126] bridge_slave_0: left promiscuous mode [ 135.538407][ T2126] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.955262][ T2126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.981691][ T2126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.002607][ T2126] bond0 (unregistering): Released all slaves [ 136.021872][ T2126] bond1 (unregistering): Released all slaves [ 136.041228][ T2126] bond2 (unregistering): Released all slaves [ 136.106325][ T2126] tipc: Left network mode [ 136.119835][ T6959] loop8: detected capacity change from 0 to 128 [ 136.156237][ T2126] hsr_slave_0: left promiscuous mode [ 136.163399][ T2126] hsr_slave_1: left promiscuous mode [ 136.179575][ T6959] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.180108][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.201932][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.220433][ T6959] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.262643][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.271083][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.288011][ T2126] veth1_macvtap: left promiscuous mode [ 136.300229][ T2126] veth0_macvtap: left promiscuous mode [ 136.310407][ T6959] EXT4-fs (loop8): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 136.320387][ T6959] EXT4-fs (loop8): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 136.339629][ T6959] EXT4-fs error (device loop8): __ext4_new_inode:1073: comm syz.8.969: reserved inode found cleared - inode=2 [ 136.354322][ T2126] veth1_vlan: left promiscuous mode [ 136.362866][ T2126] veth0_vlan: left promiscuous mode [ 136.449307][ T6973] loop8: detected capacity change from 0 to 128 [ 136.570717][ T2126] team0 (unregistering): Port device team_slave_1 removed [ 136.591802][ T2126] team0 (unregistering): Port device team_slave_0 removed [ 136.637054][ T6978] loop8: detected capacity change from 0 to 1024 [ 136.681497][ T6978] EXT4-fs: inline encryption not supported [ 136.704554][ T6978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.764427][ T6978] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.971: Allocating blocks 385-513 which overlap fs metadata [ 136.776213][ T6944] syz.9.967 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 136.790956][ T6944] CPU: 0 UID: 0 PID: 6944 Comm: syz.9.967 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.791019][ T6944] Tainted: [W]=WARN [ 136.791057][ T6944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.791070][ T6944] Call Trace: [ 136.791138][ T6944] [ 136.791148][ T6944] __dump_stack+0x1d/0x30 [ 136.791199][ T6944] dump_stack_lvl+0x95/0xd0 [ 136.791227][ T6944] dump_stack+0x15/0x1b [ 136.791253][ T6944] dump_header+0x80/0x240 [ 136.791318][ T6944] oom_kill_process+0x295/0x350 [ 136.791348][ T6944] out_of_memory+0x97d/0xb80 [ 136.791377][ T6944] try_charge_memcg+0x62e/0xa10 [ 136.791408][ T6944] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 136.791468][ T6944] __read_swap_cache_async+0x17b/0x2d0 [ 136.791555][ T6944] swap_cluster_readahead+0x262/0x3c0 [ 136.791594][ T6944] swapin_readahead+0xde/0x840 [ 136.791624][ T6944] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 136.791719][ T6944] ? lruvec_stat_mod_folio+0xd2/0x110 [ 136.791746][ T6944] ? __rcu_read_unlock+0x4e/0x70 [ 136.791855][ T6944] ? swap_cache_get_folio+0x26f/0x280 [ 136.791889][ T6944] do_swap_page+0x59b/0x2a50 [ 136.791927][ T6944] ? update_curr+0xb0/0x150 [ 136.792025][ T6944] ? enqueue_task_fair+0x35b/0x960 [ 136.792061][ T6944] ? __rcu_read_lock+0x36/0x50 [ 136.792095][ T6944] ? __pfx_default_wake_function+0x10/0x10 [ 136.792155][ T6944] handle_mm_fault+0xb40/0x3030 [ 136.792266][ T6944] ? vma_start_read+0x1c7/0x2c0 [ 136.792300][ T6944] do_user_addr_fault+0x62f/0x1050 [ 136.792335][ T6944] ? arch_exit_work+0x30/0x40 [ 136.792370][ T6944] ? irqentry_exit+0x3c/0x510 [ 136.792400][ T6944] exc_page_fault+0x62/0xa0 [ 136.792477][ T6944] asm_exc_page_fault+0x26/0x30 [ 136.792502][ T6944] RIP: 0033:0x7f41590db4b9 [ 136.792519][ T6944] Code: f0 0f 83 c0 00 00 00 48 89 75 00 49 89 4c 24 f8 48 8b 4d 08 48 8b 55 00 eb 91 0f 1f 80 00 00 00 00 4c 89 ea 4c 89 e6 48 89 df 02 ff ff ff 48 89 d8 48 29 e8 48 3d 80 00 00 00 0f 8e 7d 00 00 [ 136.792544][ T6944] RSP: 002b:00007ffe596c1700 EFLAGS: 00010212 [ 136.792565][ T6944] RAX: 00007f4158d09d28 RBX: 00007f4158d09d30 RCX: ffffffff817e67e0 [ 136.792582][ T6944] RDX: 0000000000000021 RSI: 00007f4158d44960 RDI: 00007f4158d09d30 [ 136.792597][ T6944] RBP: 00007f4158c6f008 R08: 00007f4159470000 R09: 00007f4159486038 [ 136.792615][ T6944] R10: 0000000000000001 R11: 0000000000000002 R12: 00007f4158d44960 [ 136.792629][ T6944] R13: 0000000000000021 R14: 000000000001ab2b R15: 0000000000000001 [ 136.792663][ T6944] ? walk_update_folio+0x80/0x570 [ 136.792746][ T6944] [ 136.792754][ T6944] memory: usage 307200kB, limit 307200kB, failcnt 150 [ 136.824622][ T6913] chnl_net:caif_netlink_parms(): no params data found [ 136.826162][ T6944] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 137.081291][ T6944] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 137.089058][ T6944] Memory cgroup stats for /syz9: [ 137.150373][ T6944] cache 0 [ 137.158992][ T6944] rss 0 [ 137.161983][ T6944] shmem 0 [ 137.165004][ T6944] mapped_file 0 [ 137.168506][ T6944] dirty 0 [ 137.171995][ T6944] writeback 0 [ 137.175562][ T6944] workingset_refault_anon 25 [ 137.180530][ T6944] workingset_refault_file 0 [ 137.185220][ T6944] swap 192512 [ 137.189038][ T6944] swapcached 4096 [ 137.193572][ T6944] pgpgin 748 [ 137.197046][ T6944] pgpgout 747 [ 137.201393][ T6944] pgfault 1270 [ 137.205225][ T6944] pgmajfault 19 [ 137.209040][ T6944] inactive_anon 0 [ 137.212883][ T6944] active_anon 4096 [ 137.217016][ T6944] inactive_file 0 [ 137.222401][ T6944] active_file 0 [ 137.226592][ T6944] unevictable 0 [ 137.230436][ T6944] hierarchical_memory_limit 314572800 [ 137.236262][ T6944] hierarchical_memsw_limit 9223372036854771712 [ 137.242972][ T6944] total_cache 0 [ 137.246540][ T6944] total_rss 0 [ 137.250022][ T6913] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.250352][ T6944] total_shmem 0 [ 137.257933][ T6913] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.261694][ T6944] total_mapped_file 0 [ 137.261710][ T6944] total_dirty 0 [ 137.272532][ T6913] bridge_slave_0: entered allmulticast mode [ 137.275899][ T6944] total_writeback 0 [ 137.281157][ T6913] bridge_slave_0: entered promiscuous mode [ 137.287571][ T6944] total_workingset_refault_anon 25 [ 137.287588][ T6944] total_workingset_refault_file 0 [ 137.287598][ T6944] total_swap 192512 [ 137.287606][ T6944] total_swapcached 4096 [ 137.287638][ T6944] total_pgpgin 748 [ 137.287645][ T6944] total_pgpgout 747 [ 137.287653][ T6944] total_pgfault 1270 [ 137.287661][ T6944] total_pgmajfault 19 [ 137.287668][ T6944] total_inactive_anon 0 [ 137.300744][ T6913] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.305014][ T6944] total_active_anon 4096 [ 137.305035][ T6944] total_inactive_file 0 [ 137.305044][ T6944] total_active_file 0 [ 137.305053][ T6944] total_unevictable 0 [ 137.311121][ T6913] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.318456][ T6913] bridge_slave_1: entered allmulticast mode [ 137.319622][ T6944] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 137.346876][ T6913] bridge_slave_1: entered promiscuous mode [ 137.350977][ T6944] ,cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.967,pid=6944,uid=0 [ 137.408893][ T6944] Memory cgroup out of memory: Killed process 6944 (syz.9.967) total-vm:96180kB, anon-rss:1332kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 137.449975][ T6977] EXT4-fs (loop8): pa ffff888107a823f0: logic 16, phys. 129, len 24 [ 137.452053][ T6913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.458285][ T6977] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 137.551308][ T6913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.651548][ T6913] team0: Port device team_slave_0 added [ 137.679468][ T6913] team0: Port device team_slave_1 added [ 137.701932][ T7023] loop9: detected capacity change from 0 to 512 [ 137.772834][ T7023] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.976: invalid indirect mapped block 256 (level 2) [ 137.797078][ T7023] EXT4-fs (loop9): 2 truncates cleaned up [ 137.803220][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.811065][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.840668][ T6913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.975876][ T6913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.983279][ T6913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.010767][ T6913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.066147][ T6913] hsr_slave_0: entered promiscuous mode [ 138.075610][ T6913] hsr_slave_1: entered promiscuous mode [ 138.090210][ T6913] debugfs: 'hsr0' already exists in 'hsr' [ 138.096354][ T6913] Cannot create hsr debugfs directory [ 138.115612][ T7035] loop9: detected capacity change from 0 to 4096 [ 138.252417][ T7052] tipc: Enabling of bearer rejected, media not registered [ 138.275598][ T7052] loop9: detected capacity change from 0 to 1024 [ 138.337804][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 138.337824][ T29] audit: type=1400 audit(1770120491.167:3369): avc: denied { write } for pid=7066 comm="syz.2.982" lport=42465 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 138.372545][ T7067] __nla_validate_parse: 3 callbacks suppressed [ 138.372565][ T7067] netlink: 164 bytes leftover after parsing attributes in process `syz.2.982'. [ 138.373057][ T29] audit: type=1400 audit(1770120491.207:3370): avc: denied { setopt } for pid=7066 comm="syz.2.982" lport=42465 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 138.483309][ T7074] netlink: 68 bytes leftover after parsing attributes in process `syz.4.984'. [ 138.500096][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 138.549997][ T29] audit: type=1400 audit(1770120491.377:3371): avc: denied { getopt } for pid=7077 comm="syz.2.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.573478][ T29] audit: type=1400 audit(1770120491.377:3372): avc: denied { accept } for pid=7077 comm="syz.2.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.675153][ T6913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 138.715495][ T6913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 138.740292][ T7103] SELinux: truncated policydb string identifier [ 138.757639][ T6913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 138.761983][ T7103] SELinux: failed to load policy [ 138.791483][ T6913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.819291][ T29] audit: type=1326 audit(1770120491.647:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a21baeb9 code=0x7ffc0000 [ 138.845496][ T29] audit: type=1326 audit(1770120491.647:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc1a21baeb9 code=0x7ffc0000 [ 138.923368][ T7117] loop8: detected capacity change from 0 to 128 [ 138.959929][ T29] audit: type=1326 audit(1770120491.737:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a21baeb9 code=0x7ffc0000 [ 138.985358][ T29] audit: type=1326 audit(1770120491.737:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a21baeb9 code=0x7ffc0000 [ 139.010130][ T29] audit: type=1326 audit(1770120491.737:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc1a21baeb9 code=0x7ffc0000 [ 139.034356][ T29] audit: type=1326 audit(1770120491.737:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7106 comm="syz.4.993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a21baeb9 code=0x7ffc0000 [ 139.050873][ T7125] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 139.063792][ T6913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.125203][ T6913] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.137965][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.146406][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.159497][ T7121] FAULT_INJECTION: forcing a failure. [ 139.159497][ T7121] name failslab, interval 1, probability 0, space 0, times 0 [ 139.173227][ T7121] CPU: 0 UID: 0 PID: 7121 Comm: syz.4.997 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 139.173265][ T7121] Tainted: [W]=WARN [ 139.173274][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.173289][ T7121] Call Trace: [ 139.173339][ T7121] [ 139.173349][ T7121] __dump_stack+0x1d/0x30 [ 139.173381][ T7121] dump_stack_lvl+0x95/0xd0 [ 139.173407][ T7121] dump_stack+0x15/0x1b [ 139.173427][ T7121] should_fail_ex+0x263/0x280 [ 139.173501][ T7121] should_failslab+0x8c/0xb0 [ 139.173529][ T7121] kmem_cache_alloc_noprof+0x68/0x490 [ 139.173557][ T7121] ? security_file_alloc+0x32/0xf0 [ 139.173581][ T7121] security_file_alloc+0x32/0xf0 [ 139.173701][ T7121] init_file+0x5c/0x1c0 [ 139.173732][ T7121] alloc_empty_file+0x8b/0x200 [ 139.173757][ T7121] path_openat+0x62/0x23c0 [ 139.173797][ T7121] ? _parse_integer_limit+0x170/0x190 [ 139.173873][ T7121] ? _parse_integer+0x27/0x40 [ 139.173905][ T7121] ? kstrtoull+0x111/0x140 [ 139.173991][ T7121] ? kstrtouint+0x76/0xc0 [ 139.174025][ T7121] do_filp_open+0x15d/0x280 [ 139.174068][ T7121] do_sys_openat2+0xa6/0x150 [ 139.174152][ T7121] __x64_sys_openat+0xf2/0x120 [ 139.174190][ T7121] x64_sys_call+0x2b07/0x3000 [ 139.174239][ T7121] do_syscall_64+0xc0/0x2a0 [ 139.174389][ T7121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.174416][ T7121] RIP: 0033:0x7fc1a21baeb9 [ 139.174436][ T7121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.174460][ T7121] RSP: 002b:00007fc1a0c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 139.174529][ T7121] RAX: ffffffffffffffda RBX: 00007fc1a2435fa0 RCX: 00007fc1a21baeb9 [ 139.174547][ T7121] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 139.174579][ T7121] RBP: 00007fc1a0c17090 R08: 0000000000000000 R09: 0000000000000000 [ 139.174592][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.174606][ T7121] R13: 00007fc1a2436038 R14: 00007fc1a2435fa0 R15: 00007fff25561e68 [ 139.174650][ T7121] [ 139.408274][ T6913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.419160][ T6913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.458457][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.466024][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.554512][ T7157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7157 comm=syz.4.1001 [ 139.656022][ T6913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.698456][ T7161] set_capacity_and_notify: 1 callbacks suppressed [ 139.698473][ T7161] loop9: detected capacity change from 0 to 8192 [ 139.776942][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.799589][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.799742][ T3928] loop9: p1 p2 p3 p4 [ 139.824927][ T7157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1001'. [ 139.839255][ T7157] pimreg: entered allmulticast mode [ 139.845956][ T7157] pimreg: left allmulticast mode [ 139.850091][ T3928] loop9: p1 size 461056 extends beyond EOD, truncated [ 139.882944][ T3928] loop9: p2 size 8388608 extends beyond EOD, truncated [ 139.923485][ T6913] veth0_vlan: entered promiscuous mode [ 139.935804][ T3928] loop9: p3 start 4279894019 is beyond EOD, truncated [ 139.945081][ T3928] loop9: p4 start 33554432 is beyond EOD, truncated [ 139.978628][ T6913] veth1_vlan: entered promiscuous mode [ 139.994947][ T7161] loop9: p1 p2 p3 p4 [ 140.003540][ T6913] veth0_macvtap: entered promiscuous mode [ 140.010183][ T7161] loop9: p1 size 461056 extends beyond EOD, truncated [ 140.020191][ T6913] veth1_macvtap: entered promiscuous mode [ 140.033706][ T7161] loop9: p2 size 8388608 extends beyond EOD, truncated [ 140.055845][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.069119][ T7161] loop9: p3 start 4279894019 is beyond EOD, truncated [ 140.078240][ T7161] loop9: p4 start 33554432 is beyond EOD, truncated [ 140.090726][ T6913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.127339][ T3494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.186656][ T3494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.214774][ T3494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.237173][ T3494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.248726][ T3934] udevd[3934]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 140.260441][ T3928] udevd[3928]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 140.304704][ T7201] loop9: detected capacity change from 0 to 2048 [ 140.347580][ T3934] udevd[3934]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 140.362000][ T3928] udevd[3928]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 140.387191][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.8.999'. [ 140.404566][ T7201] EXT4-fs mount: 9 callbacks suppressed [ 140.404583][ T7201] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.481782][ T7201] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.567252][ T7201] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1007: bg 0: block 345: padding at end of block bitmap is not set [ 140.604181][ T7226] bond1: entered promiscuous mode [ 140.613726][ T7201] EXT4-fs (loop9): Remounting filesystem read-only [ 140.638777][ T7226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.688974][ T6454] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.699275][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 140.751967][ T7226] bridge1: entered promiscuous mode [ 140.799995][ T5011] SELinux: failure in sel_netif_sid_slow(), invalid network interface (75) [ 140.872396][ T7261] netlink: 'syz.2.1022': attribute type 10 has an invalid length. [ 141.009306][ T7276] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1025'. [ 141.104547][ T7283] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.174227][ T7291] tipc: Started in network mode [ 141.179821][ T7291] tipc: Node identity e0000001, cluster identity 4711 [ 141.187284][ T7291] tipc: Enabling of bearer rejected, failed to enable media [ 141.216054][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 141.299446][ T7295] loop8: detected capacity change from 0 to 2048 [ 141.324460][ T7295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.382671][ T5977] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.445220][ T7323] loop9: detected capacity change from 0 to 512 [ 141.472192][ T7323] EXT4-fs: Ignoring removed bh option [ 141.479070][ T7323] EXT4-fs: Ignoring removed mblk_io_submit option [ 141.495744][ T7323] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 141.529908][ T7323] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 141.552003][ T7323] EXT4-fs (loop9): orphan cleanup on readonly fs [ 141.580163][ T7323] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.1032: Failed to acquire dquot type 1 [ 141.596494][ T7323] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1032: Invalid block bitmap block 0 in block_group 0 [ 141.614709][ T7323] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1032: Invalid block bitmap block 0 in block_group 0 [ 141.632181][ T7323] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.1032: Invalid block bitmap block 0 in block_group 0 [ 141.647562][ T7323] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.1032: Failed to acquire dquot type 1 [ 141.660012][ T7323] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.1032: Failed to acquire dquot type 1 [ 141.676178][ T7323] EXT4-fs (loop9): 1 orphan inode deleted [ 141.691924][ T7323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.715640][ T7323] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.904564][ T7371] openvswitch: netlink: Missing key (keys=40, expected=100) [ 141.910210][ T7361] loop4: detected capacity change from 0 to 8192 [ 141.979669][ T7376] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1039'. [ 142.109572][ T7404] loop9: detected capacity change from 0 to 1024 [ 142.166286][ T3312] VFS: Lookup of '.. ' in vfat loop4 would have caused loop [ 142.166761][ T7404] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.183405][ T3312] VFS: Lookup of '.. ' in vfat loop4 would have caused loop [ 142.300394][ T6454] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.350276][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1045'. [ 142.432522][ T2126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.443311][ T2126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.454342][ T2126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52421 - 0 [ 142.553111][ T2126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.564222][ T2126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.575395][ T2126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52421 - 0 [ 142.642353][ T7463] loop9: detected capacity change from 0 to 128 [ 142.675045][ T7463] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.720924][ T7463] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.764777][ T3929] ================================================================== [ 142.773775][ T3929] BUG: KCSAN: data-race in __d_drop / fast_dput [ 142.780603][ T3929] [ 142.782953][ T3929] write to 0xffff888107a3f910 of 8 bytes by task 3000 on cpu 0: [ 142.791555][ T3929] __d_drop+0x14d/0x240 [ 142.795732][ T3929] __dentry_kill+0x122/0x460 [ 142.800794][ T3929] finish_dput+0x2b/0x200 [ 142.805812][ T3929] dput+0x52/0x60 [ 142.809640][ T3929] lookup_one_qstr_excl+0x15a/0x250 [ 142.815121][ T3929] do_unlinkat+0x149/0x4b0 [ 142.820208][ T3929] __x64_sys_unlink+0x2e/0x40 [ 142.825950][ T3929] x64_sys_call+0x2f48/0x3000 [ 142.830842][ T3929] do_syscall_64+0xc0/0x2a0 [ 142.836426][ T3929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.843047][ T3929] [ 142.845551][ T3929] read to 0xffff888107a3f910 of 8 bytes by task 3929 on cpu 1: [ 142.853201][ T3929] fast_dput+0x5f/0x2c0 [ 142.857394][ T3929] dput+0x24/0x60 [ 142.861323][ T3929] do_unlinkat+0x217/0x4b0 [ 142.866085][ T3929] __x64_sys_unlink+0x2e/0x40 [ 142.870871][ T3929] x64_sys_call+0x2f48/0x3000 [ 142.875748][ T3929] do_syscall_64+0xc0/0x2a0 [ 142.880562][ T3929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.886916][ T3929] [ 142.889449][ T3929] value changed: 0xffff888237637818 -> 0x0000000000000000 [ 142.897020][ T3929] [ 142.899518][ T3929] Reported by Kernel Concurrency Sanitizer on: [ 142.905775][ T3929] CPU: 1 UID: 0 PID: 3929 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.917190][ T3929] Tainted: [W]=WARN [ 142.921179][ T3929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.931816][ T3929] ================================================================== [ 142.949142][ T2126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.959821][ T2126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 142.970723][ T2126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52421 - 0 [ 143.021121][ T7463] EXT4-fs (loop9): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 143.095112][ T2126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.105713][ T2126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.116317][ T2126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52421 - 0 [ 143.310674][ T7463] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.452305][ T2126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.463074][ T2126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.473696][ T2126] bond0 (unregistering): Released all slaves [ 143.482610][ T2126] bond1 (unregistering): Released all slaves [ 143.492511][ T2126] bond2 (unregistering): Released all slaves [ 143.507392][ T7447] bond0: (slave syz_tun): Releasing backup interface [ 143.535157][ T2126] hsr_slave_0: left promiscuous mode [ 143.541410][ T2126] hsr_slave_1: left promiscuous mode [ 143.547619][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.555632][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.563854][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.571494][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.582394][ T2126] veth1_vlan: left promiscuous mode [ 143.587816][ T2126] veth0_vlan: left promiscuous mode [ 143.647953][ T2126] team0 (unregistering): Port device team_slave_1 removed [ 143.658727][ T2126] team0 (unregistering): Port device team_slave_0 removed [ 143.999204][ T2126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.063957][ T2126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.112903][ T2126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.164872][ T2126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.458647][ T2126] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.505939][ T2126] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.542898][ T2126] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.593396][ T2126] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.657341][ T2126] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.699045][ T2126] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.752521][ T2126] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.802849][ T2126] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.876935][ T2126] bridge_slave_1: left allmulticast mode [ 144.883438][ T2126] bridge_slave_1: left promiscuous mode [ 144.889764][ T2126] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.898662][ T2126] bridge_slave_0: left allmulticast mode [ 144.904675][ T2126] bridge_slave_0: left promiscuous mode [ 144.910835][ T2126] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.920765][ T2126] bridge_slave_1: left allmulticast mode [ 144.926865][ T2126] bridge_slave_1: left promiscuous mode [ 144.932829][ T2126] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.941798][ T2126] bridge_slave_0: left allmulticast mode [ 144.947832][ T2126] bridge_slave_0: left promiscuous mode [ 144.953823][ T2126] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.964189][ T2126] bridge_slave_1: left allmulticast mode [ 144.970258][ T2126] bridge_slave_1: left promiscuous mode [ 144.976738][ T2126] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.985798][ T2126] bridge_slave_0: left allmulticast mode [ 144.991870][ T2126] bridge_slave_0: left promiscuous mode [ 144.998461][ T2126] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.007734][ T2126] bridge_slave_1: left allmulticast mode [ 145.013894][ T2126] bridge_slave_1: left promiscuous mode [ 145.020114][ T2126] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.028248][ T2126] bridge_slave_0: left allmulticast mode [ 145.034121][ T2126] bridge_slave_0: left promiscuous mode [ 145.040919][ T2126] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.182720][ T2126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.193349][ T2126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.203441][ T2126] bond0 (unregistering): Released all slaves [ 145.225835][ T2126] bond1 (unregistering): (slave geneve2): Releasing active interface [ 145.422809][ T2126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.433469][ T2126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.442996][ T2126] bond0 (unregistering): Released all slaves [ 145.452031][ T2126] bond1 (unregistering): Released all slaves [ 145.460156][ T2126] bond2 (unregistering): Released all slaves [ 145.468557][ T2126] bond3 (unregistering): Released all slaves [ 145.532042][ T2126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.543065][ T2126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.553436][ T2126] bond0 (unregistering): Released all slaves [ 145.671938][ T2126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.682232][ T2126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.692041][ T2126] bond0 (unregistering): Released all slaves [ 145.700082][ T2126] bond1 (unregistering): Released all slaves [ 145.757406][ T2126] tipc: Left network mode [ 145.766475][ T2126] hsr_slave_0: left promiscuous mode [ 145.775536][ T2126] hsr_slave_1: left promiscuous mode [ 145.781742][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.789237][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.797259][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.805149][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.815958][ T2126] hsr_slave_0: left promiscuous mode [ 145.822604][ T2126] hsr_slave_1: left promiscuous mode [ 145.828799][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.837044][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.847177][ T2126] hsr_slave_0: left promiscuous mode [ 145.853090][ T2126] hsr_slave_1: left promiscuous mode [ 145.859018][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.867174][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.874965][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.883100][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.892520][ T2126] hsr_slave_0: left promiscuous mode [ 145.899143][ T2126] hsr_slave_1: left promiscuous mode [ 145.905623][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.913948][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.922590][ T2126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.930834][ T2126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.945531][ T2126] veth1_macvtap: left promiscuous mode [ 145.951944][ T2126] veth0_macvtap: left promiscuous mode [ 145.957919][ T2126] veth1_vlan: left promiscuous mode [ 145.963580][ T2126] veth0_vlan: left promiscuous mode [ 145.969496][ T2126] veth1_macvtap: left promiscuous mode [ 145.975358][ T2126] veth0_macvtap: left promiscuous mode [ 145.981646][ T2126] veth1_vlan: left promiscuous mode [ 145.987276][ T2126] veth0_vlan: left promiscuous mode [ 145.994806][ T2126] veth1_vlan: left promiscuous mode [ 146.000747][ T2126] veth0_vlan: left promiscuous mode [ 146.131330][ T2126] team0 (unregistering): Port device team_slave_1 removed [ 146.141776][ T2126] team0 (unregistering): Port device team_slave_0 removed [ 146.202257][ T2126] team0 (unregistering): Port device team_slave_1 removed [ 146.213499][ T2126] team0 (unregistering): Port device team_slave_0 removed [ 146.267935][ T2126] team0 (unregistering): Port device team_slave_1 removed [ 146.278702][ T2126] team0 (unregistering): Port device team_slave_0 removed [ 146.331912][ T2126] team0 (unregistering): Port device team_slave_1 removed [ 146.342836][ T2126] team0 (unregistering): Port device team_slave_0 removed