last executing test programs: 1m55.251623823s ago: executing program 1 (id=1307): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200012, &(0x7f0000000600), 0x1, 0x5a4, &(0x7f0000000640)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1m55.071631493s ago: executing program 1 (id=1308): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = syz_open_dev$vcsn(&(0x7f00000009c0), 0x81, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2c, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe2d0}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfde}}, @generic={0x7, 0x4, 0xd, 0x2, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x8, 0xe2, &(0x7f0000000780)=""/226, 0x41100, 0x8, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000940)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[r4, r5], &(0x7f0000000a40)=[{0x4, 0x2, 0x0, 0x7}], 0x10, 0x10000}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x740, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014990580700036010bab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e800ef52a98516237ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92d54b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb}]}, &(0x7f00000025c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r10, 0x8}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f00000004c0)=0x1) 1m54.625522207s ago: executing program 1 (id=1312): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) (async) syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbb60122d9200403afffe8000000000000000000000000000bbff020000000000000000000000000001030190780000000069454143800000000000000000000000f5ffffff00000000fc020000000000000000000000000000890000000000000098efd03a7e60b22300000000000000000000a192c56af5873458f4b7f6cac9dec36174057e181f52c0ece8f9b600931aaf970c"], 0x0) (async) pwritev2(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x1, 0x7ff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f00000000c0)={{0xff, @empty, 0x4e22, 0x2, 'ovf\x00', 0x10, 0xdffd, 0x23}, {@rand_addr=0x64010102, 0x4e20, 0x1, 0x11c, 0x5, 0x5}}, 0x44) 1m54.024103431s ago: executing program 1 (id=1316): socket$packet(0x11, 0x3, 0x300) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) syz_io_uring_setup(0x1f2, &(0x7f0000000180)={0x0, 0x6b3d, 0x80, 0x1, 0x3e5}, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x1) mkdir(0x0, 0x22) (async, rerun: 64) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[], 0x0) (async, rerun: 64) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0xd}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12140, 0x0, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) fspick(0xffffffffffffffff, 0x0, 0xf0961890b4faa8d0) (async) setuid(0xee00) r1 = socket$netlink(0x10, 0x3, 0x4) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff8c, 0x1) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08060001080006"], 0x0) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) 1m53.919227256s ago: executing program 1 (id=1318): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200012, &(0x7f0000000600), 0x1, 0x5a4, &(0x7f0000000640)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1m53.691379269s ago: executing program 1 (id=1325): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d084", 0x2}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004) 1m53.691288859s ago: executing program 32 (id=1325): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_vlan\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d084", 0x2}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004) 53.201787375s ago: executing program 5 (id=1757): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x201c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f0000000040)='./file1\x00', 0x64c37e, 0x2aa) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x5, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x800, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r7, 0x4) close(r7) syz_emit_ethernet(0x52, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @empty, @void, {@llc_tr={0x11, {@llc={0x4, 0x4e, "3aa8", "d23b2d15014dfc66e2551600fa48e31e48c37c82a408de01588a07d17b04be37c39495a048b64628808d2ddc7086166650b1e5ef27294b6592e541e5b287247c"}}}}}, &(0x7f00000006c0)={0x0, 0x0, [0xf8f, 0x46e, 0xfe5, 0xc29]}) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) setresuid(0x0, 0xee00, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7401000016000104fdfffffffeffffffe0000002000000000000000000000000fe80000000000000000000000000000f000400004e2000000000802000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000102000000033000000fc0100000000000000000000000000000400000000000000feffffffffffffff0500000000000000000000000000000003000000000000000000000000000000000000000000000002000000000000000400000000000000000000000000000000000000000000000700000000000000000000100000000003000000feffffff000000000a00000090000000000000000c000000fdffffff05001900330000002c001300ffffffff000000000000000000000000e000000100000000000000000000000000000000020000004800010078786861736836342d67656e6c72696300"/300], 0x174}}, 0x0) mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) 52.256604767s ago: executing program 5 (id=1772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x4000, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x3, 0x1}, {0xfff1, 0xffff}, {0xc, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000041}, 0xc0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x48800, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000300)={0xffffffff, 0x3, 0x5, 0x1, 0x1, "debcf274215a75e565eead84949f14c1084fc7", 0x3, 0x2d7}) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000000002535001c140200"], 0x30}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r7, &(0x7f0000000440), &(0x7f0000000040)=@udp=r5}, 0x20) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1bc}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) mount(0x0, 0x0, 0x0, 0x2390024, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 51.660784539s ago: executing program 5 (id=1781): r0 = socket(0x10, 0x3, 0xfffffffc) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000180)) r2 = socket$key(0xf, 0x3, 0x2) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ff000016000000000300000000000003000000000000000d0000001a0000000000000011"], 0x0, 0x4a, 0x0, 0x1, 0x800}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c050100000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x3f, @ipv4={'\x00', '\xff\xff', @remote}, 0x1000}}, 0x400, 0x81, 0x2, 0xa000000, 0x0, 0x4, 0x8}, &(0x7f0000000340)=0x9c) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) fcntl$setsig(r2, 0xa, 0x3e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x48) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x0, 0xbb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001e00000425bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="006000004000000008001c00cd85a8311f3858b81700423ff5f0b9dc1c0a85c161716988403b8e74ff527de98b8b52808cc151eb58d500"/69, @ANYRES32, @ANYBLOB="040014000a000100aaaaaaaaaa280000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 51.441168641s ago: executing program 5 (id=1783): r0 = syz_mount_image$msdos(&(0x7f00000006c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x246, &(0x7f00000002c0)="$eJzs3TFu01AcBvB/2rQNZaAzYrDEwlQBN7BQkBCWkII8wISlwtIiJHcxTDkGZ+BIHKNTNyNqixS3MFRu3ca/nxT5Uz45eW/Jy/Be8uHR58ODL8ef6p/fYzZLYhqxjNOIvdiIzWhM2uvGWd6O85YBANw1i0WRDj0GejS5+FRZpsVWROxcaPIfNzMoAAAAAAAAAAAA+mb/PwCMj/3/668s02K3/f72N/v/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOGc1vWD+j+PoccHAPTP+g8A42P9B4Dxsf4DwPi8fff+dZpl80WSzCJOllVe5c216V++yuZPkzN7q7tOqirfanM2f9b0Sbffbe9/fmm/HU8eN/3v7sWbrNPvxMF1Tx4AAAAAAAAAAAAAAAAAAABuif3kj875/s2m3/9X36Rzvw/QOb8/jYfTG5sGAAAAAAAAAAAAAAAAAAAA3GnHX78dFkdHH0thpOH+JdW9uMILzuI2TEfoKQz9yQQAAAAAAAAAAAAAAAAAAOOzOvQ79EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDir//+/vtB9z0lMhpksAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsNZ+BQAA///TbZE4") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x4) (async) fcntl$setown(r1, 0x8, 0xffffffffffffffff) (async) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141bc2, 0x1ea) (async) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="260000003701000201000000000000000200000000000000", @ANYRES32=r3, @ANYBLOB='\b\x00reyring\x00'], 0x26) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {r6, r7}}, './file0\x00'}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000880)={0xe8, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r9}, @nested={0x7, 0x2, 0x0, 0x1, [@generic="976b64"]}, @nested={0xc8, 0x1, 0x0, 0x1, [@nested={0xc2, 0x152, 0x0, 0x1, [@generic="923fcc35c4dd6b967ed0a641ec999af56ec85f067a2e068396e1c44e53611fb875be8f9115b1970e097fbd3119f6983c277e3de1ae277fc53468315d44ce31a2a8eb61c3a07594d07116fb7428c2debf538f5f73e898ba07ed39dc79a3d277358c9577114c450a16f590327614ee39f6d9304a28e05dfa11ed92fbd2c312d9e5", @generic="83be6ac404abfb1516f44fa1ef22b745a111740651f1f3a501e7cf850a043d3c842260f46ca0b6d52bd322c196ea1818d8169991d398", @typed={0x8, 0x6, 0x0, 0x0, @fd=r4}]}]}]}, 0xe8}], 0x1}, 0xcc000) (async, rerun: 64) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@local, @in6=@private0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) (rerun: 64) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000600)={@desc={0x1, 0x0, @desc4}, 0x8, 0x0, '\x00', @auto=[0x1d, 0x1a, 0x3e, 0x36, 0x2b, 0x28, 0x1c, 0x28]}) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r11, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (rerun: 64) 51.199268064s ago: executing program 5 (id=1784): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x740, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x800) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x1) 50.771204908s ago: executing program 5 (id=1787): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00'], 0x3c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e0000000000000000001c000280180003801000018004000300080001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x74, 0x43, 0x2, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x100040, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd}}, 0x24) (async) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") (async) openat(0xffffffffffffff9c, &(0x7f00000053c0)='./file1\x00', 0x42, 0x10) (async) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r9, 0x10, 0x6, 0x10001) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x22, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000fdffffff000000000b00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x20004, 0x0, 0x0, 0x40f00, 0x61}, 0x94) (async) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) 50.769535488s ago: executing program 33 (id=1787): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00'], 0x3c}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcffffff08000000180001801400020073797a5f74756e0000000000000000001c000280180003801000018004000300080001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x74, 0x43, 0x2, 0x804, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x100040, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffd}}, 0x24) (async) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") (async) openat(0xffffffffffffff9c, &(0x7f00000053c0)='./file1\x00', 0x42, 0x10) (async) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r9, 0x10, 0x6, 0x10001) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) r10 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x22, &(0x7f0000001dc0)=ANY=[@ANYBLOB="18000000fdffffff000000000b00000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x20004, 0x0, 0x0, 0x40f00, 0x61}, 0x94) (async) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) 23.727102975s ago: executing program 6 (id=2025): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x3, 0x2b0, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000200)={0x761, 0x7, 0x1100, 0x8000, 0xfe, "7a58beca3900001e00000000000000000200"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007fd) 23.63926949s ago: executing program 3 (id=2028): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f00000004c0)=@ethtool_perm_addr={0x4b, 0x12, "5c76276f6c86622447099377e66e2ebe40de"}}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080"], 0x24}}, 0x10048000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x6, [@struct={0x1000000a, 0xa, 0x0, 0x4, 0x0, 0x8, [{0x4, 0x1, 0x7}, {0x1, 0x0, 0x1}, {0xb, 0x0, 0x4322}, {0x10, 0x2, 0x3}, {0xd, 0x5, 0x4}, {0x6, 0x2, 0x9}, {0x1, 0x3, 0xff}, {0x9, 0x4, 0x3ff}, {0x10, 0x3, 0xfffffff9}, {0x10, 0x2, 0x1}]}]}, {0x0, [0x0, 0x30, 0x61, 0x30]}}, &(0x7f0000000380)=""/244, 0xa2, 0xf4, 0x1, 0x9, 0x10000}, 0x28) 2.301959943s ago: executing program 3 (id=2031): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xea7a4cad4f0501be, 0x823}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x10000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) 2.301317883s ago: executing program 3 (id=2032): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x5e, '\x00', r1, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x13, r3, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000000)=[{0x0, 0x10000023, {0x1, 0xff, 0x2}, {0x2, 0x1, 0x2}, 0xff, 0x1}], 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 2.301114563s ago: executing program 3 (id=2033): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES64=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xd, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0xccfbea281d28fe7, 0x1, 0x7, 0x1, 0x10}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000140)='GPL\x00', 0x100, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xe, 0x7ced, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000240)=[r2, r2, r2, r2, r3], &(0x7f0000000280)=[{0x4, 0x4, 0xa, 0x8}, {0x4, 0x3, 0xc, 0x1}, {0x1, 0x2, 0xf, 0x3}, {0x3, 0x5, 0xe, 0x5}, {0x1, 0x1, 0x4, 0x7}], 0x10, 0x3}, 0x94) 2.300979903s ago: executing program 6 (id=2034): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@auto_da_alloc}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x4183}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x110}, 0x80080) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r4, 0x48, 0x8, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) (async) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e20, 0x8, @local, 0x6}], 0x2c) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x6c7e, 0x100000002, 0x1000000000000000, 0x4}) 2.300840263s ago: executing program 4 (id=2035): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x3, 0x3, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000060000000400"], 0x50) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000082697cf62d053b6f8815381a1800000010000000ff0000000800000b000000008000000003000000"], 0x80) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @scatter={0x8, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/93, 0x5d}, {&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f00000001c0)=""/99, 0x63}, {&(0x7f0000000240)=""/70, 0x46}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000400)=""/161, 0xa1}, {&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000000600)=""/70, 0x46}]}, &(0x7f0000000380)="259374c94982", 0x0, 0x4, 0x1c, 0x0, 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r4, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x200, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.300723473s ago: executing program 6 (id=2036): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000070000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000070000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) unshare(0x28000600) unshare(0x42000400) 2.300667213s ago: executing program 4 (id=2037): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xea7a4cad4f0501be, 0x823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}]}}}]}, 0x3c}, 0x1, 0xa1, 0x0, 0x4000040}, 0x800) 2.298614763s ago: executing program 4 (id=2038): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) (async) read$char_usb(r2, &(0x7f0000000340)=""/170, 0xaa) (async) timer_delete(r0) (async) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) fcntl$setlease(r4, 0x400, 0x1) r5 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r6, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) (async) openat$binfmt(0xffffffffffffff9c, r5, 0x41, 0x1ff) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r7, 0x29, 0x41, &(0x7f0000000480)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x4, &(0x7f0000000040)=0x2, 0x4) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) (async) creat(&(0x7f0000000240)='./file0\x00', 0x160) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$watch_queue(r9, &(0x7f00000001c0)=""/178, 0xb2) 2.298172233s ago: executing program 4 (id=2039): madvise(&(0x7f000060e000/0x4000)=nil, 0x4000, 0x2) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x5}, 0x1160bb, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00', {}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @mac=@broadcast, @multicast2, @private, 0xf}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r4 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT], 0x25, 0x363, &(0x7f0000000340)="$eJzs3T1onHUYAPDn+l5ySbAmg1B0Ot0EKU3EQaeEUqGYQSuHX4uHTf3InYUcHjRDLrcoxUlxEXRy66BjZ3EQcXNwtYJUxcVuhQZfubv3vu9MOlxs6e83lIfn/3/u/7wf9H0Tkn/ebMT2xbm4dOvWzVhYyEV+/ex63M7FSpyIJDr2Y6KP5yfnAYB73O00jb/TjsNnf7rUjTz7AeD+1X7+v32ynyiMz8lPK7760KzaAgBm6Ihf/784MXt5Zm0BADM09vx/Ymh45Nv8+d7PBAAA96+XX3v9hY3NiAvF4kJE9aN6qV6K5/rjG5fi3ajEVpyJ5TiI6LwodN4WWv8+f37z3Jliy+8rUWpV1EsR1Ua91HlT2Eja9YVYjeVYyerTXn3Sql9t1xcjYr/RXj+quXppLpay9X9Ziq1Yi+V4ZKw+4vzmubVi9gGlare+EdGMhe5BtPo/Hcvx01txOSpxMVq1/f73VovFs+nmUH39WqE9DwAAAAAAAAAAAAAAAAAAAAAAZuF0sWelt/9NWm3UP7wwOqE3Xmjv79MZzvYHanb2B0oL3d15riaj+wMN789TL+XjxP965AAAAAAAAAAAAAAAAAAAAHDvSGI+ypXK1k7tyu72YNAYyLz/w9ffLUZ3KJ+Vvpf0qyJLDn1Od+LAJyfRWyLtlafJ0JwsSCKiUslFLnb3y9eu9zoenFPIcqPNZ0FhbCiX9VSuVE4+/tsXu9v5GK36pxXstzNJjJ2W4SCXrT8wVH24lViIiINpVdODtUPm3EjTdFr53ufdzHq3rVrkIvJx120cIfj+5juPPl079Uw782226cOTTy2/cuOzr/7cLlei2WmhUpnfqR2k065Odi1amVav42slA/dPLjvPuQl3wuSg2c80d2pXysnPf7362Cc/jkxOJt8/6WDmg+lrfTOame8EuYiV7kn4r1bnJtz8k4M37gydscOqFocyp75cL1/f+/WPo17lgf8kbNQBAAAAAAAAAAAAAAAAAADHov9Lv3dT9exLs+sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI5f/+//DwTNscxRgjuNGB8qbO3Upi6+eKyHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAA+zfAAAA//+oN2gs") r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r5, &(0x7f0000000480)=""/61, 0x3d, 0x5) r6 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000001c0)='./file0\x00', 0x84000000) (async) ftruncate(0xffffffffffffffff, 0xc17a) (async) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) r8 = getpgid(0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2200010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) (async) statx(r4, &(0x7f00000017c0)='./file0\x00', 0x100, 0x100, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000001900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) (async) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r12], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r14 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001940), 0x200000, 0x0) r15 = socket$phonet(0x23, 0x2, 0x1) (async) r16 = accept4$vsock_stream(r6, &(0x7f00000030c0)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x800) r17 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r17, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg$unix(r5, &(0x7f0000003240)=[{{&(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000880)="44e7b2ccdbdb4b7955a389c68c25e1f2f7b92b5260cca2a8f3f304455974e4f1e9bb84b6fe1f754448ae9b20c516273add20cc5cbf21b2ee11fea483f3d63cd39ad56b143956385296c1728dd7541b29ec0c889933b6f71beb444abc572e5530983e11e14ac1fa405e491d481da709d1a7b9bdc3adfcaa05ea06a418b868ec9ef198c44d14fd4a68fdcc47d6e9924d8e9213ca7d3ab342fa7abb714840aa1461b289ca2f346ce32dd224f739b3b08c3969210e19b24cc025e2736c5550081e54d09c8be38c8f84857b4b8f9f35c6a2e9b6cf81c9bec16687ad101c2069", 0xdd}, {&(0x7f0000000980)="87c33586750fe62b351ac2bf2b5c2cfbf2830a8beec01edcc76450a77183393a362ca4aace6c05270fafc4f71ab547598094e138572961cf5c1ec5411caa93fa7e90346f14b6f5fe0957f3b2dea94159835d291f6516000f53a51101841cdc2d7e742fd424d26065ba4cebd4eee79e6ad54a887ad9decb913a1ccbff0289bfa386935c563c51644a41ce16b30b6d208751cd83ae15e86787a0f157c6ad68d3247c351749ebee114d73e521f59bae90799712c5cdd93baa9005a689a1550dee6e444dbcd64e78b5ac664ced529114", 0xce}, {&(0x7f0000000a80)="c1ea460e245117532209e14f2dfa59e3c2bc92d97e92f7c59c0893b3966b57998846ce582d57fe50debea900269c39c0e05d9c040b757f1c0c0b5cabcf81f4bdfcf9db252354edc9d25b606d65c6cf7b2c28bcf14267564a17bb2d71872d72da2a671a037f47900f267e7401ee8b80e22145f9d904877446aa479ab0e7b7b3702b7f51fb3e8c3c476bbbd3b0eddbaf98684ddad84f54095d9d2fd971bdd6294849", 0xa1}], 0x3, &(0x7f0000000e80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r7, r1, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4841}}, {{&(0x7f00000010c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001140)="16e4a895feced5f72c91d5b41328d475baff311e3ebf34c2579836b110352d838ae7076a0ca39d3cb3a0fc36277a2f486403fdf87c14d658c8de0393da682e6a7dc66c763ec7c0c23187bdb1916f57d4c3292ff6e0e9c49bfa519a1ea93bb6b3e64c67f57fa4f7b6bcd858cc7035748da6765f3d2954a931047b4400fdb407057b7b5029f50cce19cd7e9f610b0f8796b62a9c32823e089dc7d0dd7d79ff53acec144f9854a388a9337ba695e679360821c87684142d0312429bb00b897879f8c4bb305a6d0166035356e55c54fc3d96a2cf1ca34807cd", 0xd7}, {&(0x7f0000001240)="ce8c3111583b7df90fca35c3386fa4b8ba2e7ff939dc175dfccb49de740378303aff547bce394cb41cbec1a60e20961c48bef714126248738ca86c5642", 0x3d}], 0x2, &(0x7f0000001440)=[@rights={{0x20, 0x1, 0x1, [r3, r6, r0, r1]}}, @cred={{0x1c}}], 0x40, 0x4c001}}, {{&(0x7f0000001480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001500)="36321bb6b1d6735a60f5ec7dfd5f202a", 0x10}], 0x1, 0x0, 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000015c0)="49fc978cfa4b7cad54c7154f131b06476ad4f2eae7b6365d0c90146a1528f0b4113ede6b93dec7bedffe7d7ab2414cf82436ea5259966210a992a4513b6f3773e3b238e9ec29432fd3964dae313ad07a271826c21048f5d9e3211c5add2fbe46619816fd7e0421e59a0b4985463baa1391c062e79ab0f14f5e0ee472465d1789d0530eabea5016e234b8f9ddc9492ff4dd051bd7040fab2106b4895dfb9c5315996cedbe33f50bf063e5a8e968085d51deaaa52edd0c2b3644e39d73f42fba660271e23194f008e761e5571cf662e59a446992f457", 0xd5}, {&(0x7f00000016c0)="bdbf2b67c278affef1773ffb553af04d9742e6c962529843483d8d543730cfbeb651eeaa89eb", 0x26}], 0x2, &(0x7f0000001980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000024000000000040000100000001000000", @ANYRES32=r4, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r11, @ANYRES32=r6, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r0, @ANYRES32=r14, @ANYRES32=r0], 0x138, 0x40001}}, {{&(0x7f0000001ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000001b40)="047ddd63892910b0365217e08c1890a15aa6ab8650fca867a9063bf2c86d1f0238770c2ab7c73fb42dc3d2d8b3bd75668481bfef2aa121d07183606354858a69eb542bf1623efad0e0b79e44c69afe96cb47543a4fa62017fc057ebbca6c2714e6d5ed572bad41d6105d42e57e1ce9d6629cb7ef0d09aff7ac2043d79450b99f4d12921c552ef9190c83eb22211f391d1c98b4875f5e7812a0fb08d80f644ecd45ca40e50619690d01e53031264f7e345bc1170b68e7ac1f52e66d483aec3923", 0xc0}, {&(0x7f0000001c00)="f0e6bb326e2b24ec96c144d8f9acae6770550dc774b49f02a87eb8d373c649bed46a6b268e856fdcb503432170997889937cd7779dae1d8b15fce684fb3cf1f7a62cf5d996465c77c78431b930049557cbe13d1bd0254f39a528b2241994a62e911045fdba29d02875da100eda272a819286ee694651e961dacec5f25b974469b09f9b2f2fddf96f4a8c03fef6a7520cd8dcdf1b04dc360f7d1bf1b176269c56d7fa0db2e1986c", 0xa7}, {&(0x7f0000001cc0)="cf6c271b77424b52ca02547433339c7256d750661cb493d4c15a6162b41a36a6975dd168753a5dfd6826339c4f4e258bb7dbc592e8f2537e1c48e9c1eaf0f062dc6f59a9a4fc1b6ba0190d1d55055421a87faf373c18b0de61031ac28f80d47444cd5b32bf5faa6ca3e06ef555bc33", 0x6f}, {&(0x7f0000001d40)='4|', 0x2}, {&(0x7f0000001d80)="7cb6b4e140cf6118cf90ee128c84610f9472773438a89d321db59f4ba956373c6075519a629accf19dc5a78615a66af2bdce091e30b0183bf533d4679133cd6856b62c674aa4d3fcd4388a8b62d621a0066f288f07924aef74f00214d99108173f7633db1f4b13527317bb94fb56f9933ba9ad66ef5d9880cfadc3037484b69601ed905156f4169b95ab920c1cd222a7d4a2745be7d45f46e98ed2a59e28a1fa12917e2f17460ce75ae8bc5cd1260bdf35f692cbe4c3186ebc3101482593679d9cf83807eb3a9414bf894ea60de62242fa9f", 0xd2}, {&(0x7f0000001e80)="3fa5ba5c8af1552e97fb27c9ad77296b5f3a84710b7fe14cef2b26ba8d59b03a056714252ee41a6dc4dbb4d866bdedf2e077dd5385b81ecc301e9c30f5c854dc48a8707d1d5d34dccd6a6828fe7f781969d9c4829be9fb0cc1629f230c95a480cfe306ddd7e9d71cbc9651adf03c35431c47d980cd2c8015f8a422751e2ae0074d4c52b4a7ab51d420aa8c0c2cfdadfee3484e3295619b8c632485eeb613e1f8aa611038f713f785f3fd25881540f3c366241cb188ddc899cb5098d41dbdb5a190993f4dbac526b24b6433ecd15d9e2b10493a56f768f9cf20ba28e97cd8cf197920dbac4d4354a03bd6ab7a6426", 0xee}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="051fd232faaddc0b0fb2f4584cc451607e5b3efd54684aa67141cca0a8da4fcc0b8d904f49447d4ab08f97e3e8f5be4cb984", 0x32}, {&(0x7f0000002fc0)="3dc2f694dc4ccfe0fed6def8dc83e6ef2dbb1d233cd3207e6a73e3f6cb2adc683ff16b7238199e94113dee92b666e0b312", 0x31}], 0x9, &(0x7f0000003100)=[@rights={{0x2c, 0x1, 0x1, [r15, r3, 0xffffffffffffffff, r1, r7, r16, r17]}}], 0x30, 0x34}}, {{&(0x7f0000003140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003200)=[{&(0x7f00000031c0)="b74c538afa0ccd9bd80d00a70298a18454ae759d1c67454bbd03db76b0a8a93aec0e4c1231cccb58f7c96840f2deb004fb1fac1b9c", 0x35}], 0x1, 0x0, 0x0, 0x40040}}], 0x6, 0x81) close_range(r3, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0xa9525000) 2.295991213s ago: executing program 6 (id=2041): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="031200004d8a0400140012800b0001006970766c616e0000", @ANYRES32, @ANYBLOB="08001f000f000700"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0xff5e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) poll(0x0, 0x0, 0x9) syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000240)=0x1) ioctl$TIOCSSOFTCAR(r5, 0x89f2, &(0x7f0000000080)=0x59b) write(r5, &(0x7f0000000100)="c63a20053c985b5d94c147dff8605456315e4be2421115f6d2cd2089fd21ac830b22dabb2b1758c7bfa303641c4aaf9955c98afc4f9ce76c272a52ab041aa243261e81c0241ee2be32eceda110c1f771a4de248e2f3d1e1a8a044ef9cdb6529ca85f1fcc31d7787a58af965ec81179ad1496e74c84d97ee49f9947b90ec6ecdf7727463ed6acf1f103879183ac6045c3635324eda32396b65acd6fbdcc9fe324c020c02074df527c28139b20951c726ebba4e927b591d0e6135bc9933298f72d40a2ef5aa3d084dbbadc3644ef3f44b5d7813d3592b74a22e8b3e13ec27b376b382269c88294fb9fee076818280c5cd6b866238133641390db0eea70a1c1", 0xfe) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x17, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x28}, 0xfc40) 2.295720813s ago: executing program 3 (id=2043): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x10, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c00014013"], 0xf0}}, 0x0) io_setup(0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 2.294845333s ago: executing program 4 (id=2044): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_read_part_table(0x60a, &(0x7f0000002200)="$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") 2.105502114s ago: executing program 0 (id=2046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xea7a4cad4f0501be, 0x823}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x10000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) 1.748792793s ago: executing program 0 (id=2047): recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/4096, 0x1000, 0x40000001, &(0x7f0000001000)=@ax25={{0x3, @null, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default]}, 0x80) (async) r0 = syz_io_uring_complete(0x0, 0x0) io_uring_enter(r0, 0x6d99, 0xedfd, 0x2, &(0x7f0000001080)={[0xdd]}, 0x8) (async) r1 = io_uring_setup(0x2e6b, &(0x7f00000010c0)={0x0, 0xab1c, 0x10, 0x1, 0x3dd, 0x0, r0}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = syz_socket_connect_nvme_tcp() ioctl$NILFS_IOCTL_GET_CPINFO(r2, 0x80186e82, &(0x7f0000001300)={&(0x7f0000001140)=[{0x0, 0x0, 0x8, 0x97b, 0x0, 0xcb, 0xfffffffffffffff7, 0xfffffffffffffffa}, {0x2, 0x0, 0x2, 0x2, 0x9, 0x9, 0x34d4, 0xc3000000000000}, {0x5306946288847b61, 0x0, 0x1, 0x7, 0x1, 0x10001, 0x7, 0x8}, {0x1, 0x0, 0x5, 0xd, 0x0, 0x2, 0x7, 0x8000000000000000}, {0x0, 0x0, 0x4, 0x4000000, 0xffffffffffffffff, 0x1, 0xc, 0x5}, {0x1, 0x0, 0x5, 0x0, 0x9, 0xfd, 0x9, 0x1ff}, {0x0, 0x0, 0x9, 0x1, 0x7, 0x33, 0x8, 0x8001}], 0x7, 0x38, 0x1, 0xb775}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000001380)={0x0, 0xfaed, 0x8000, 0x2, 0x38e, 0x0, r3}, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001440)={'veth0_to_batadv\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001500)={r3, 0x58, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000015c0)={0xffffffffffffffff, 0x58, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001680)={'syztnl1\x00', &(0x7f0000001600)={'syztnl2\x00', 0x0, 0x29, 0xff, 0x80, 0x97, 0x41, @loopback, @dev={0xfe, 0x80, '\x00', 0x27}, 0x7, 0x10, 0xf7, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001740)={'ip6tnl0\x00', &(0x7f00000016c0)={'syztnl1\x00', 0x0, 0x4, 0xb5, 0x8, 0x800, 0x55, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x20, 0x80, 0x10cb, 0x7fff}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001840)={'tunl0\x00', &(0x7f0000001780)={'erspan0\x00', 0x0, 0x1, 0x1, 0x8, 0x5, {{0x1a, 0x4, 0x2, 0x13, 0x68, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast1, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x27}}, {@multicast1, 0xfffffff2}, {@private=0xa010102, 0x8aa}, {@empty, 0x3}, {@empty, 0x8}]}, @ssrr={0x89, 0x27, 0xff, [@local, @loopback, @multicast1, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b80)={r3, 0xe0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f00000018c0)=[0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd8, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000019c0), &(0x7f0000001a00), 0x8, 0xfb, 0x8, 0x8, &(0x7f0000001a40)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001e80)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e40)={&(0x7f0000001bc0)={0x268, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}]}}, {{0x8, 0x1, r7}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xc37b, 0x2, 0x2, 0x235c5421}, {0x8, 0xfe, 0x3, 0x9}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1c}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}]}, 0x268}, 0x1, 0x0, 0x0, 0x24008081}, 0x4044011) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001ec0)={'wlan1\x00'}) (async) sendmsg$rds(r0, &(0x7f0000002480)={&(0x7f0000001f00)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000002400)=[{&(0x7f0000001f40)=""/115, 0x73}, {&(0x7f0000001fc0)=""/175, 0xaf}, {&(0x7f0000002080)=""/208, 0xd0}, {&(0x7f0000002180)=""/51, 0x33}, {&(0x7f00000021c0)=""/191, 0xbf}, {&(0x7f0000002280)=""/74, 0x4a}, {&(0x7f0000002300)=""/76, 0x4c}, {&(0x7f0000002380)=""/83, 0x53}], 0x8, 0x0, 0x0, 0x40885}, 0x1) (async) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fsetxattr$trusted_overlay_redirect(r11, &(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x8, 0x2) write$qrtrtun(r0, &(0x7f0000002540)="6b7e832dc030fc74867b0e082bec56755eed35915d026a70149e974dd29be198301339cb0c17ed376673b7b45b0a414b2fe760c4997aaad6dbbd982fa7d54a8edc06b5232aa5cf2448f074d21253ecc4e27c94828968f5ab8417be8973cd51540ac31b4adb062ec506bb3c5ca6fd4b56620be2f12b45d7fc0c468d90334ebf3814de08805f40de40c4db5ab7cabdb452f260259b62ed71f9980a34b73a28db3377de7a04a5ba1b9acd0147d686fdcc713e5481f91dcfa91d454c758fb43e27", 0xbf) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r12, 0x11a, 0x1, &(0x7f0000002600)=@ccm_128={{0x303}, "fd371035e5292614", "0b3e1b628aa5165b4a9b4f7dcdd92796", "c274dc41", "d127efd29cc0e567"}, 0x28) (async) r13 = syz_open_dev$vcsn(&(0x7f0000002640), 0x7ff, 0x40) setsockopt$inet6_int(r13, 0x29, 0xd0, &(0x7f0000002680)=0x10, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000026c0)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r14, 0x8903, &(0x7f0000002700)) r15 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r15, 0x89f8, &(0x7f00000027c0)={'ip_vti0\x00', &(0x7f0000002740)={'erspan0\x00', r10, 0x1, 0x700, 0x3ff, 0x4, {{0x12, 0x4, 0x0, 0x7, 0x48, 0x65, 0x0, 0x0, 0x29, 0x0, @broadcast, @private=0xa010101, {[@cipso={0x86, 0x27, 0x3, [{0x6, 0x6, "65ad29fb"}, {0x2, 0xc, "972e0609d0c7b7a2359a"}, {0x7, 0xb, "9ecf423f3b4b92a26b"}, {0x1, 0x4, "06b6"}]}, @timestamp_prespec={0x44, 0xc, 0x71, 0x3, 0x2, [{@private=0xa010102, 0xcf5}]}]}}}}}) 1.426839341s ago: executing program 0 (id=2048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xea7a4cad4f0501be, 0x823}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x10000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) (fail_nth: 1) 1.197038914s ago: executing program 0 (id=2049): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x98, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x3, 0x2b0, &(0x7f0000000280)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x19) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000007c0)=0xf) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x94) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0xd, @mcast1, 0x401}}}, 0x90) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000080)={&(0x7f0000000100)=""/120, 0x78}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="780000001000ffff27a87000fedb000000000000", @ANYRES32=0x0, @ANYBLOB="170c0000000000005000128009000100766c616e0000000040000280340003800c00010001000000008000000c000100f1ffffff0c0000000c00010001000000050000000c0001000100000040000000060001000400000008000500", @ANYRES32=r6, @ANYBLOB], 0x78}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r8, r8, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1.037494493s ago: executing program 6 (id=2051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xea7a4cad4f0501be, 0x823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}]}}}]}, 0x3c}, 0x1, 0x2000, 0x0, 0x4000040}, 0x800) 907.17196ms ago: executing program 6 (id=2052): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_pts(0xffffffffffffffff, 0x802) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000004c0)={0x4, 0x9, 0x2, 0x6, 0x12, "2b519082beab39e23135fa2699cbf8aa7fefe3"}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0a000000060000000400"], 0x50) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000300), 0x4) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') chroot(&(0x7f0000000100)='./file0\x00') splice(r3, 0x0, r5, 0x0, 0x80, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) 906.491279ms ago: executing program 0 (id=2053): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x4}) write$sndseq(r0, &(0x7f00000004c0)=[{0x84, 0x77, 0x1, 0x0, @time={0xffffffff, 0x1}, {}, {}, @raw32={[0x7]}}, {0x3, 0xc, 0x80, 0x10, @time={0x5c, 0xffff}, {0x6, 0x7}, {0x0, 0x9}, @ext={0x0, 0x0}}, {0x40, 0x0, 0x7, 0x8e, @time={0x10000, 0x803}, {0xff, 0x3}, {0x2, 0x4}, @queue={0x2, {0x108, 0x8}}}, {0x9, 0xcc, 0x88, 0x2, @tick=0x8001, {0xe, 0x5}, {0x9, 0xf6}, @time=@time={0x10, 0x31ee}}], 0x70) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c80)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x11, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'veth1_to_batadv\x00', {0x2, 0x0, @empty}}) 794.505296ms ago: executing program 0 (id=2054): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffd83) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setaffinity(r1, 0xfffffffffffffff8, &(0x7f00000002c0)=0x2ff5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280), 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000040000000000000000000ddbc2be09d22d224fb0770b87bbbaf5a581a52e1e3f3a2e16049f07d9935c02c7e023fc6266a76759605a000eb421ae9e40e529bd7d5b0fa73314b43a9a720ab8280afd4e4591b5da7040f74d925cd4dec20c80e2ec8c3ae74aee42e5c697dc0a7f2513d30d968e2a0061b283a6b456a4f66bf2dd5eaecf33b2883cf32a079b53c0feddeb4059fda3c91c6be1265b4a55d04fcc7cb4229059a116665d55e4bea0b491f4b96fd67917ab673a83783a748f92943d70d5abfaf303a6627194339517e3d20000040021000c009e00000001000000000000"], 0x398}}, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40240, 0x104) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000000000000000407000000", @ANYRES32=r6, @ANYBLOB="000096040a000200aaaaaaaaaa240000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001014000800bd7000ffdbdf2508004a0000000000080003000212000008004b081300000008004c000000000008004c000000000008004a0000009900"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4048040) iopl(0x3) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x109100, 0x0) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000240)={0x5, &(0x7f00000001c0)=[{0x7, 0x9e, 0x3}, {0xb4, 0x1, 0x1, 0x4}, {0x5, 0xc, 0x4, 0x9}, {0x2, 0xb, 0x1, 0x1}, {0xbe, 0x4, 0x8}]}) ioperm(0x0, 0xfffffffffffffffb, 0x1) 715.56819ms ago: executing program 34 (id=2054): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffd83) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setaffinity(r1, 0xfffffffffffffff8, &(0x7f00000002c0)=0x2ff5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280), 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000040000000000000000000ddbc2be09d22d224fb0770b87bbbaf5a581a52e1e3f3a2e16049f07d9935c02c7e023fc6266a76759605a000eb421ae9e40e529bd7d5b0fa73314b43a9a720ab8280afd4e4591b5da7040f74d925cd4dec20c80e2ec8c3ae74aee42e5c697dc0a7f2513d30d968e2a0061b283a6b456a4f66bf2dd5eaecf33b2883cf32a079b53c0feddeb4059fda3c91c6be1265b4a55d04fcc7cb4229059a116665d55e4bea0b491f4b96fd67917ab673a83783a748f92943d70d5abfaf303a6627194339517e3d20000040021000c009e00000001000000000000"], 0x398}}, 0x800) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40240, 0x104) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000000000000000407000000", @ANYRES32=r6, @ANYBLOB="000096040a000200aaaaaaaaaa240000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001014000800bd7000ffdbdf2508004a0000000000080003000212000008004b081300000008004c000000000008004c000000000008004a0000009900"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4048040) iopl(0x3) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x109100, 0x0) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000240)={0x5, &(0x7f00000001c0)=[{0x7, 0x9e, 0x3}, {0xb4, 0x1, 0x1, 0x4}, {0x5, 0xc, 0x4, 0x9}, {0x2, 0xb, 0x1, 0x1}, {0xbe, 0x4, 0x8}]}) ioperm(0x0, 0xfffffffffffffffb, 0x1) 654.692633ms ago: executing program 4 (id=2057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x7b, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x0, 0xffffffffffffffff, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e0000000400000004000000030000", @ANYBLOB], 0x48) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x7, 0xfffffffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x68) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bond_slave_1\x00', @random="65ec74a69085"}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 559.289979ms ago: executing program 2 (id=2058): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000200000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000) capset(0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 514.522262ms ago: executing program 2 (id=2059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xea7a4cad4f0501be, 0x823}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x10000}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) (fail_nth: 2) 206.210038ms ago: executing program 2 (id=2060): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x406, r0) write$tun(r1, 0x0, 0xa2) io_setup(0x0, &(0x7f0000000000)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mprotect(&(0x7f0000ef4000/0x3000)=nil, 0x3000, 0xa) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) fcntl$dupfd(r0, 0x406, r0) (async) write$tun(r1, 0x0, 0xa2) (async) io_setup(0x0, &(0x7f0000000000)) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) mprotect(&(0x7f0000ef4000/0x3000)=nil, 0x3000, 0xa) (async) 177.62715ms ago: executing program 3 (id=2061): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x18, 0x61, 0x10, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) io_setup(0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 119.174013ms ago: executing program 2 (id=2062): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="b58208b37a58446284048f26b79953e521b27c3a5dbc8e7fcd644e2caaa1acc91237f4447b548c7caab7ede0f978d175cd8108db49a660493d3511a7f6d67dba109d4f769a1cddfc97c554c8d7c38ecae48c95955fb02bcd2da02935ab9658f576b9d2526dd40f73035883f2f7d388f9cb004bcef6c90d011afc4849d7d7ee3abdf4dfa36378701a61a8f83187960881d90cf42cae6384fa916f5df9e11d2546c01011f28c9be1a2a5aa2139ef29be6d87c8d93fce5239580e58fe24d4304f196fa0d43d7aeb4dc3da644ba32b1e61734c4211811d81d78f283d637a78b107898d59c7048fa04ea6e0ebe491f42f2f32bd531eeb8e2659d2e098d82fde6dba5614d96565c673f893729377685a896ee02018f5d0f83d7f921f9712c8702d305c8c91cbfe1493e8598d611be62863fa02b88e886240514fc8d2d62f72dac126481ef08ca8eaf6de", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$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") (async) r0 = open(&(0x7f0000000180)='./file1\x00', 0x66842, 0x21) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00010000160001000000000000000000fe880000000000000000000000000101fc01000000000000000000000000000100b64a5673c5e9f4130080000c002000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000aa0002000032"], 0x100}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@flushsa={0x14, 0x1c, 0x1, 0x70bd27, 0x25dfdbfc, {0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x500}, 0x20) (async) kexec_load(0xfff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000040)="19ecb9e351195aff97790c4d45db0f36ae57ea66260ae94cf50ef7e2e1", 0x1d, 0x7, 0x6}], 0x2a0000) (async) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1a00, 0x0, 0x3) 64.811386ms ago: executing program 2 (id=2063): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32) futex(&(0x7f0000000000)=0x2, 0x8e, 0x1, 0x0, 0x0, 0x2) (rerun: 32) 0s ago: executing program 2 (id=2064): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x98, &(0x7f0000000140)=ANY=[], 0x3, 0x2b0, &(0x7f0000000280)="$eJzs3T9vI0UYB+B3E3vtg8IuqBASK0FBdbpcS+MI5aQIVyAXQAEn7k5CsYV0J0XijzBX0dJQ8gmQkOj4EjQU9Ei0SHRccdKi9e7GTlg72QgnwD1Pk8ns/Gbe3YwTpfD4g5dmR/eyePD481+j309iZxSjeJLEMHai9mWcMvo6AID/sid5Hn/kpTa5JCL62ysLANiilb//Ny4U+GHrJQEAW/b2O+++uT8eH7yVZf24M/vqeFL8Z198La/vP4iPYhr341YM4mlEfqJs38nzfN7JCsN4dTY/nhTJ2fs/VfPv/x6xyO/FIIaLrtP5w/HBXlZayc+LOp6r1h8V+dsxiBca1j8cH9xuyMckjddeWan/Zgzi5w/j45jGvUURy/wXe1n2Rv7Nn5+9V5RX5JP58aS3GLeU717xjwYAAAAAAAAAAAAAAAAAAAAAgP+xm9XZOb1YnN9TdFXn7+w+Lb7pRlYbnj6fp8wn9URnzgea5/Ftfb7OrSzL8mrgMt+JFzvRuZ67BgAAAAAAAAAAAAAAAAAAgH+XR598enR3Or3/8B9p1KcB1G/rv+w8o5Wel6NhzDBOenrLJXeqZTfMHLv1mCRiYxnFjK2K756/+prGjXWp775v++j654/pXqLClo16dx3dTZqfYS/qnn69SX5cHZPGBddK113KW22/tPFS2voFkj6/aMw3jIlkU2Gv/1Y+uaonOXsX6eKpNsa7VaN8LTTtjVb7+e+/KxKndQAAAAAAAAAAAAAAAAAAwFYt3/TbcPHxmtAvh+WH/Mdwy9UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNVYfv5/i8a8Cl9gcBoPH13zLQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAM+CsAAP//yylfnw==") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000380)={[{@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@errors_remount}, {@nomblk_io_submit}]}, 0xfe, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010057f8ffffffb702000008000000b7030000000000008500000006000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000180)='./file0\x00', 0x800000, &(0x7f00000004c0)=ANY=[], 0x3c, 0x2e4, &(0x7f0000000c40)="$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") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="08020000", @ANYRES16=r4, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x40080}, 0x10) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x81) kernel console output (not intermixed with test programs): r (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 185.463591][ T9147] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.1542: Failed to acquire dquot type 0 [ 185.475125][ T9147] loop2: lost filesystem error report for type 5 error -117 [ 185.478544][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 185.492271][ C1] EXT4-fs (loop2): initial error at time 1775212545: ext4_acquire_dquot:7026 [ 185.501076][ C1] EXT4-fs (loop2): last error at time 1775212545: ext4_acquire_dquot:7026 [ 185.508790][ T9147] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 185.558845][ T9147] EXT4-fs (loop2): 1 truncate cleaned up [ 185.565075][ T9147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.639122][ T9147] FAULT_INJECTION: forcing a failure. [ 185.639122][ T9147] name failslab, interval 1, probability 0, space 0, times 0 [ 185.651823][ T9147] CPU: 0 UID: 0 PID: 9147 Comm: syz.2.1542 Tainted: G W syzkaller #0 PREEMPT(full) [ 185.651865][ T9147] Tainted: [W]=WARN [ 185.651873][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 185.651909][ T9147] Call Trace: [ 185.651917][ T9147] [ 185.651965][ T9147] __dump_stack+0x1d/0x30 [ 185.651988][ T9147] dump_stack_lvl+0x95/0xd0 [ 185.652006][ T9147] dump_stack+0x15/0x1b [ 185.652026][ T9147] should_fail_ex+0x263/0x280 [ 185.652050][ T9147] should_failslab+0x8c/0xb0 [ 185.652157][ T9147] kmem_cache_alloc_noprof+0x66/0x400 [ 185.652177][ T9147] ? __es_insert_extent+0x508/0xee0 [ 185.652206][ T9147] __es_insert_extent+0x508/0xee0 [ 185.652235][ T9147] ? panic_on_this_cpu+0x2d/0x40 [ 185.652325][ T9147] ? _prb_read_valid+0x8f5/0x950 [ 185.652402][ T9147] ext4_es_cache_extent+0x37e/0x5d0 [ 185.652557][ T9147] ext4_find_extent+0x341/0x790 [ 185.652584][ T9147] ext4_ext_map_blocks+0x10d/0x2ff0 [ 185.652610][ T9147] ? xas_load+0x413/0x430 [ 185.652660][ T9147] ? xa_load+0xb1/0xe0 [ 185.652687][ T9147] ? obj_cgroup_charge_account+0x122/0x1a0 [ 185.652718][ T9147] ext4_map_query_blocks+0xb2/0x550 [ 185.652746][ T9147] ? ext4_es_lookup_extent+0x3ae/0x570 [ 185.652796][ T9147] ext4_map_blocks+0x306/0x970 [ 185.652826][ T9147] ext4_getblk+0x128/0x530 [ 185.652863][ T9147] ext4_bread_batch+0x5c/0x320 [ 185.652896][ T9147] __ext4_find_entry+0x852/0xdf0 [ 185.653004][ T9147] ? __kmalloc_noprof+0x23f/0x4e0 [ 185.653023][ T9147] ? __d_alloc+0x95/0x340 [ 185.653096][ T9147] ext4_lookup+0xcd/0x3a0 [ 185.653166][ T9147] lookup_one_qstr_excl+0xcb/0x250 [ 185.653195][ T9147] filename_create+0x155/0x220 [ 185.653216][ T9147] filename_mknodat+0x13e/0x450 [ 185.653240][ T9147] __se_sys_mknod+0x37/0xf0 [ 185.653350][ T9147] __x64_sys_mknod+0x43/0x50 [ 185.653371][ T9147] x64_sys_call+0x2acd/0x3020 [ 185.653395][ T9147] do_syscall_64+0x12c/0x370 [ 185.653443][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.653537][ T9147] RIP: 0033:0x7fc352f7c819 [ 185.653552][ T9147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.653567][ T9147] RSP: 002b:00007fc3519d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 185.653585][ T9147] RAX: ffffffffffffffda RBX: 00007fc3531f5fa0 RCX: 00007fc352f7c819 [ 185.653598][ T9147] RDX: 0000000000000705 RSI: 0000000000000000 RDI: 0000200000000000 [ 185.653611][ T9147] RBP: 00007fc3519d7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.653657][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.653670][ T9147] R13: 00007fc3531f6038 R14: 00007fc3531f5fa0 R15: 00007ffdb696ba08 [ 185.653780][ T9147] [ 185.925638][ T9147] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 185.936587][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1546'. [ 185.948162][ T9157] bond0: entered promiscuous mode [ 185.953809][ T9157] bond_slave_0: entered promiscuous mode [ 185.959688][ T9157] bond_slave_1: entered promiscuous mode [ 185.966007][ T9157] gretap0: entered promiscuous mode [ 185.971910][ T9157] hsr1: entered promiscuous mode [ 185.978025][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1546'. [ 185.992791][ T9147] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 186.026468][ T9147] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.1542: Failed to acquire dquot type 0 [ 186.058299][ T28] audit: type=1326 audit(1775212546.359:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac58c819 code=0x7ffc0000 [ 186.125010][ T28] audit: type=1326 audit(1775212546.359:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac58c819 code=0x7ffc0000 [ 186.175883][ T28] audit: type=1326 audit(1775212546.359:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac58c819 code=0x7ffc0000 [ 186.199632][ T28] audit: type=1326 audit(1775212546.359:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f85ac58c819 code=0x7ffc0000 [ 186.199815][ T9166] loop4: detected capacity change from 0 to 512 [ 186.223093][ T28] audit: type=1326 audit(1775212546.359:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac58c819 code=0x7ffc0000 [ 186.381952][ T28] audit: type=1326 audit(1775212546.359:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.5.1547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ac58c819 code=0x7ffc0000 [ 186.413754][ T9171] loop5: detected capacity change from 0 to 7 [ 186.421736][ T9171] loop5: unable to read partition table [ 186.428515][ T9171] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 187.200085][ T9171] loop5: unable to read partition table [ 187.216673][ T3000] loop5: unable to read partition table [ 187.227555][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.285655][ T9173] loop5: detected capacity change from 0 to 512 [ 187.324972][ T9173] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 187.359851][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 187.391284][ T9173] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 187.418560][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 187.425016][ C0] EXT4-fs (loop5): initial error at time 1775212547: ext4_mb_generate_buddy:1317 [ 187.434166][ C0] EXT4-fs (loop5): last error at time 1775212547: ext4_mb_generate_buddy:1317 [ 187.471460][ T9185] No such timeout policy "syz1" [ 187.477226][ T9173] EXT4-fs (loop5): 1 truncate cleaned up [ 187.477669][ T9173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.492021][ T9185] loop2: detected capacity change from 0 to 256 [ 187.581538][ T8185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.653976][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 187.711638][ T9195] loop4: detected capacity change from 0 to 128 [ 187.756764][ T9197] loop2: detected capacity change from 0 to 1024 [ 187.764786][ T9197] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.1560: Failed to acquire dquot type 0 [ 187.764833][ T9197] loop2: lost filesystem error report for type 5 error -117 [ 187.765496][ T9197] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 187.768601][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 187.768616][ C0] EXT4-fs (loop2): initial error at time 1775212548: ext4_acquire_dquot:7026 [ 187.768634][ C0] EXT4-fs (loop2): last error at time 1775212548: mb_free_blocks:2049: inode 13: block 160 [ 187.770670][ T9197] EXT4-fs (loop2): 1 truncate cleaned up [ 187.771071][ T9197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.771585][ T9197] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0 [ 187.773035][ T9199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1556'. [ 187.803565][ T9197] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.1560: Failed to acquire dquot type 0 [ 187.849176][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.221468][ T9216] loop5: detected capacity change from 0 to 128 [ 188.229586][ T9216] EXT4-fs: Ignoring removed nobh option [ 188.256126][ T9218] No such timeout policy "syz1" [ 188.263160][ T9216] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.329240][ T9216] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.383204][ T8185] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.445184][ T9231] loop5: detected capacity change from 0 to 1024 [ 188.475767][ T9231] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.1571: Failed to acquire dquot type 0 [ 188.487135][ T9231] loop5: lost filesystem error report for type 5 error -117 [ 188.488569][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 188.502335][ C1] EXT4-fs (loop5): initial error at time 1775212548: ext4_acquire_dquot:7026 [ 188.508815][ T9231] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 188.511177][ C1] EXT4-fs (loop5): last error at time 1775212548: ext4_acquire_dquot:7026 [ 188.541973][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'. [ 188.548859][ T9231] EXT4-fs (loop5): 1 truncate cleaned up [ 188.556913][ T9231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.570263][ T9231] EXT4-fs error (device loop5): ext4_acquire_dquot:7026: comm syz.5.1571: Failed to acquire dquot type 0 [ 188.612725][ T8185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.633302][ T9227] netlink: 'syz.2.1570': attribute type 20 has an invalid length. [ 188.649381][ T9227] netlink: 'syz.2.1570': attribute type 21 has an invalid length. [ 188.782669][ T9255] loop4: detected capacity change from 0 to 128 [ 188.809052][ T9260] 8021q: VLANs not supported on ip6_vti0 [ 188.849061][ T9260] netlink: 'syz.5.1576': attribute type 27 has an invalid length. [ 188.856155][ T9220] tipc: Failed to remove unknown binding: 66,0,0/0:2336281938/2336281939 [ 188.867849][ T9220] tipc: Failed to remove unknown binding: 66,0,0/0:2336281938/2336281939 [ 188.914026][ T9260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.922074][ T9260] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.936168][ T9274] Timeout policy `syz1' can only be used by L3 protocol number 613 [ 188.950307][ T9274] loop4: detected capacity change from 0 to 256 [ 188.988698][ T9260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.049140][ T9279] loop4: detected capacity change from 0 to 128 [ 189.075527][ T9279] EXT4-fs: Ignoring removed nobh option [ 189.091380][ T9279] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.135061][ T9279] ext4 filesystem being mounted at /289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.206546][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.240690][ T9288] __nla_validate_parse: 1 callbacks suppressed [ 189.240736][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 189.255938][ T9277] loop0: detected capacity change from 0 to 512 [ 189.269940][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1584'. [ 189.302147][ T9281] FAULT_INJECTION: forcing a failure. [ 189.302147][ T9281] name failslab, interval 1, probability 0, space 0, times 0 [ 189.335324][ T9277] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 189.338609][ T9281] CPU: 1 UID: 0 PID: 9281 Comm: syz.2.1582 Tainted: G W syzkaller #0 PREEMPT(full) [ 189.338710][ T9281] Tainted: [W]=WARN [ 189.338718][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 189.338730][ T9281] Call Trace: [ 189.338737][ T9281] [ 189.338744][ T9281] __dump_stack+0x1d/0x30 [ 189.338830][ T9281] dump_stack_lvl+0x95/0xd0 [ 189.338853][ T9281] dump_stack+0x15/0x1b [ 189.338874][ T9281] should_fail_ex+0x263/0x280 [ 189.338901][ T9281] ? do_signalfd4+0xe5/0x320 [ 189.339011][ T9281] should_failslab+0x8c/0xb0 [ 189.339033][ T9281] __kmalloc_cache_noprof+0x5f/0x410 [ 189.339121][ T9281] do_signalfd4+0xe5/0x320 [ 189.339142][ T9281] __x64_sys_signalfd4+0xce/0x100 [ 189.339164][ T9281] x64_sys_call+0x2c85/0x3020 [ 189.339257][ T9281] do_syscall_64+0x12c/0x370 [ 189.339284][ T9281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.339458][ T9281] RIP: 0033:0x7fc352f7c819 [ 189.339475][ T9281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.339493][ T9281] RSP: 002b:00007fc3519d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 189.339567][ T9281] RAX: ffffffffffffffda RBX: 00007fc3531f5fa0 RCX: 00007fc352f7c819 [ 189.339581][ T9281] RDX: 0000000000000008 RSI: 0000200000000140 RDI: ffffffffffffffff [ 189.339595][ T9281] RBP: 00007fc3519d7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.339609][ T9281] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 189.339622][ T9281] R13: 00007fc3531f6038 R14: 00007fc3531f5fa0 R15: 00007ffdb696ba08 [ 189.339654][ T9281] [ 189.483268][ T9288] vxlan0: entered promiscuous mode [ 189.483408][ T9288] vxlan0: entered allmulticast mode [ 189.536236][ T9277] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 189.548056][ T9277] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1580: Corrupt directory, running e2fsck is recommended [ 189.578754][ T12] netdevsim netdevsim4 ì: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.586761][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.601669][ T9296] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1586'. [ 189.618466][ T9277] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 189.629761][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.649180][ T9277] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.1580: corrupted in-inode xattr: e_name out of bounds [ 189.654180][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.675088][ T9277] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 189.676293][ T9277] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1580: couldn't read orphan inode 15 (err -117) [ 189.685972][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 189.686069][ C1] EXT4-fs (loop0): initial error at time 1775212549: ext4_iget_extra_inode:5040: inode 15 [ 189.686222][ C1] EXT4-fs (loop0): last error at time 1775212549: ext4_iget_extra_inode:5040: inode 15 [ 189.731181][ T9298] SELinux: failed to load policy [ 189.756775][ T9304] loop2: detected capacity change from 0 to 512 [ 189.868677][ T9277] loop0: lost filesystem error report for type 5 error -117 [ 189.870627][ T9277] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.894038][ T9304] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #12: comm syz.2.1590: corrupted in-inode xattr: bad e_name length [ 189.919253][ T9304] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 189.919839][ T9304] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1590: couldn't read orphan inode 12 (err -117) [ 189.929021][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 189.929041][ C1] EXT4-fs (loop2): initial error at time 1775212550: ext4_iget_extra_inode:5040: inode 12 [ 189.929070][ C1] EXT4-fs (loop2): last error at time 1775212550: ext4_iget_extra_inode:5040: inode 12 [ 190.014969][ T9277] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.344406][ T9304] loop2: lost filesystem error report for type 5 error -117 [ 190.347097][ T9304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.519987][ T9304] EXT4-fs (loop2): shut down requested (2) [ 190.638942][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1590'. [ 190.647926][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1590'. [ 190.778860][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.923542][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 190.983038][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 191.620964][ T28] kauditd_printk_skb: 348 callbacks suppressed [ 191.620977][ T28] audit: type=1400 audit(1775212551.939:2286): avc: denied { append } for pid=9346 comm="syz.2.1602" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 191.908729][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1607'. [ 191.917727][ T9365] netlink: 580 bytes leftover after parsing attributes in process `syz.5.1607'. [ 191.927004][ T9365] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1607'. [ 192.216152][ T9378] loop5: detected capacity change from 0 to 164 [ 192.231956][ T9378] Unable to read rock-ridge attributes [ 192.238132][ T9378] Unable to read rock-ridge attributes [ 192.623978][ T9384] loop2: detected capacity change from 0 to 7 [ 192.663865][ T9384] loop2: [ 192.939106][ T28] audit: type=1400 audit(1775212553.249:2287): avc: denied { setopt } for pid=9386 comm="syz.2.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.170816][ T28] audit: type=1400 audit(1775212553.279:2288): avc: denied { getopt } for pid=9386 comm="syz.2.1615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 193.268617][ T28] audit: type=1400 audit(1775212553.289:2289): avc: denied { mount } for pid=9386 comm="syz.2.1615" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 193.324817][ T9406] loop2: detected capacity change from 0 to 1024 [ 193.453869][ T9406] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 194.038324][ T9411] FAULT_INJECTION: forcing a failure. [ 194.038324][ T9411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 194.051885][ T9411] CPU: 1 UID: 0 PID: 9411 Comm: syz.0.1624 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.051939][ T9411] Tainted: [W]=WARN [ 194.051946][ T9411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.051957][ T9411] Call Trace: [ 194.051985][ T9411] [ 194.051992][ T9411] __dump_stack+0x1d/0x30 [ 194.052019][ T9411] dump_stack_lvl+0x95/0xd0 [ 194.052044][ T9411] dump_stack+0x15/0x1b [ 194.052141][ T9411] should_fail_ex+0x263/0x280 [ 194.052170][ T9411] should_fail_alloc_page+0xf2/0x100 [ 194.052195][ T9411] __alloc_frozen_pages_noprof+0x108/0x360 [ 194.052259][ T9411] alloc_pages_mpol+0xb3/0x260 [ 194.052322][ T9411] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 194.052354][ T9411] do_wp_page+0xf62/0x2590 [ 194.052384][ T9411] ? __rcu_read_lock+0x36/0x50 [ 194.052516][ T9411] handle_mm_fault+0x8cb/0x3020 [ 194.052544][ T9411] ? vma_start_read+0x1c7/0x2c0 [ 194.052574][ T9411] do_user_addr_fault+0x62f/0x1050 [ 194.052646][ T9411] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 194.052669][ T9411] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 194.052689][ T9411] ? trace_page_fault_user+0x1f/0xe0 [ 194.052716][ T9411] exc_page_fault+0x62/0xa0 [ 194.052777][ T9411] asm_exc_page_fault+0x26/0x30 [ 194.052799][ T9411] RIP: 0033:0x7f7a0b3d3ae3 [ 194.052817][ T9411] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 194.052834][ T9411] RSP: 002b:00007f7a09f2c470 EFLAGS: 00010202 [ 194.052853][ T9411] RAX: 0000000000006400 RBX: 00007f7a09f2c530 RCX: 00007f7a01b0d000 [ 194.052888][ T9411] RDX: 00007f7a09f2c6d0 RSI: 0000000000000015 RDI: 00007f7a09f2c5d0 [ 194.052900][ T9411] RBP: 00000000000000ee R08: 0000000000000006 R09: 0000000000000011 [ 194.052911][ T9411] R10: 0000000000000016 R11: 00007f7a09f2c530 R12: 0000000000000001 [ 194.052922][ T9411] R13: 00007f7a0b5d2600 R14: 0000000000000073 R15: 00007f7a09f2c5d0 [ 194.052942][ T9411] [ 194.053143][ T9411] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 194.264064][ T9411] loop0: detected capacity change from 0 to 128 [ 194.341497][ T9411] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 194.349833][ T9411] FAT-fs (loop0): Filesystem has been set read-only [ 194.376305][ T28] audit: type=1400 audit(1775212553.479:2290): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 194.456361][ T9406] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 194.618835][ T9406] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.1623: Failed to acquire dquot type 0 [ 194.638669][ T28] audit: type=1400 audit(1775212553.529:2291): avc: denied { bind } for pid=9397 comm="syz.0.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 195.593511][ T9413] loop5: detected capacity change from 0 to 512 [ 195.629008][ T9406] loop2: lost filesystem error report for type 5 error -117 [ 195.629861][ T9406] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 195.651709][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 195.651725][ C0] EXT4-fs (loop2): initial error at time 1775212555: ext4_acquire_dquot:7026 [ 195.651753][ C0] EXT4-fs (loop2): last error at time 1775212555: ext4_acquire_dquot:7026 [ 195.773738][ T9421] loop0: detected capacity change from 0 to 128 [ 195.891674][ T9413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.935277][ T9427] netlink: 'syz.0.1628': attribute type 29 has an invalid length. [ 195.977296][ T9427] netlink: 'syz.0.1628': attribute type 3 has an invalid length. [ 195.990246][ T9413] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.019025][ T9427] __nla_validate_parse: 5 callbacks suppressed [ 196.019039][ T9427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1628'. [ 196.041723][ T9406] EXT4-fs (loop2): 1 truncate cleaned up [ 196.077455][ T9406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.137140][ T28] audit: type=1400 audit(1775212556.449:2292): avc: denied { audit_read } for pid=9412 comm="syz.5.1625" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.214714][ T9406] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 196.244791][ T8185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.264137][ T9406] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.1623: Failed to acquire dquot type 0 [ 196.288710][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1623'. [ 196.330540][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.736670][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 196.736686][ T28] audit: type=1400 audit(1775212557.049:2294): avc: denied { setopt } for pid=9432 comm="syz.2.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 196.772741][ T9433] netlink: 'syz.2.1631': attribute type 16 has an invalid length. [ 196.783197][ T6095] Bluetooth: hci0: Frame reassembly failed (-84) [ 196.791074][ T9434] loop5: detected capacity change from 0 to 128 [ 196.808339][ T9433] netlink: 'syz.2.1631': attribute type 17 has an invalid length. [ 196.817434][ T9434] EXT4-fs: Ignoring removed nobh option [ 196.854975][ T9434] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.878788][ T9434] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 196.903338][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.926696][ T8185] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.937008][ T9433] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.969088][ T9433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.018472][ T9445] loop0: detected capacity change from 0 to 512 [ 197.048441][ T9445] journal_path: Non-blockdev passed as './file2' [ 197.069205][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1633'. [ 197.080890][ T9447] hub 8-0:1.0: USB hub found [ 197.085809][ T9447] hub 8-0:1.0: 8 ports detected [ 197.166280][ T9445] EXT4-fs: error: could not find journal device path [ 197.184230][ T9437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9437 comm=syz.3.1632 [ 197.220994][ T9445] 9p: Unknown uid 00000000004294967295 [ 197.564123][ T9453] loop0: detected capacity change from 0 to 1024 [ 197.571204][ T9453] EXT4-fs: Ignoring removed orlov option [ 197.658514][ T9453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.879098][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.961238][ T28] audit: type=1400 audit(1775212558.279:2295): avc: denied { mount } for pid=9459 comm="syz.5.1638" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 198.154556][ T9464] loop4: detected capacity change from 0 to 512 [ 198.192698][ T9464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.309500][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1642'. [ 198.327152][ T9471] netlink: 'syz.5.1642': attribute type 30 has an invalid length. [ 198.341914][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1642'. [ 198.548039][ T9478] loop0: detected capacity change from 0 to 128 [ 198.577540][ T9478] EXT4-fs: Ignoring removed nobh option [ 198.602637][ T9478] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.648805][ T9478] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 198.739987][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.818676][ T3537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 199.140465][ T9485] loop2: detected capacity change from 0 to 1024 [ 199.179040][ T9488] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1648'. [ 199.188906][ T9485] EXT4-fs: Ignoring removed orlov option [ 199.224429][ T9489] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.235753][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.246664][ T9485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.271544][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 199.327325][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.362779][ T9489] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.373000][ T9491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1650'. [ 199.414638][ T9505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1651'. [ 199.450406][ T9489] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.490418][ T9511] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 199.498234][ T9511] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 199.506025][ T9511] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 199.513858][ T9511] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 199.521673][ T9511] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 199.529453][ T9511] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 199.537270][ T9511] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 199.545099][ T9511] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 199.552951][ T9511] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 199.569416][ T9513] No such timeout policy "syz1" [ 199.588187][ T9489] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.643823][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1659'. [ 200.768524][ T8138] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.833703][ T8138] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.888464][ T8138] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.911957][ T8138] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.992252][ T9534] loop2: detected capacity change from 0 to 1024 [ 201.004628][ T9534] EXT4-fs: Ignoring removed orlov option [ 201.033941][ T28] audit: type=1400 audit(1775212561.339:2296): avc: denied { append } for pid=9535 comm="syz.0.1664" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 201.034635][ T9539] loop0: detected capacity change from 0 to 1024 [ 201.109529][ T9534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.146116][ T9539] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 201.169745][ T9552] loop4: detected capacity change from 0 to 128 [ 201.212760][ T9534] FAULT_INJECTION: forcing a failure. [ 201.212760][ T9534] name failslab, interval 1, probability 0, space 0, times 0 [ 201.231397][ T9552] EXT4-fs: Ignoring removed nobh option [ 201.267514][ T9534] CPU: 0 UID: 0 PID: 9534 Comm: syz.2.1663 Tainted: G W syzkaller #0 PREEMPT(full) [ 201.267595][ T9534] Tainted: [W]=WARN [ 201.267602][ T9534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 201.267613][ T9534] Call Trace: [ 201.267620][ T9534] [ 201.267628][ T9534] __dump_stack+0x1d/0x30 [ 201.267653][ T9534] dump_stack_lvl+0x95/0xd0 [ 201.267674][ T9534] dump_stack+0x15/0x1b [ 201.267746][ T9534] should_fail_ex+0x263/0x280 [ 201.267771][ T9534] ? __iomap_dio_rw+0x194/0x14c0 [ 201.267794][ T9534] should_failslab+0x8c/0xb0 [ 201.267879][ T9534] __kmalloc_cache_noprof+0x5f/0x410 [ 201.267917][ T9534] __iomap_dio_rw+0x194/0x14c0 [ 201.267943][ T9534] ? __brelse+0x32/0x60 [ 201.267969][ T9534] ? ext4_mark_iloc_dirty+0xd4e/0xdb0 [ 201.267993][ T9534] ? __ext4_journal_get_write_access+0x1d1/0x350 [ 201.268058][ T9534] iomap_dio_rw+0x40/0x90 [ 201.268085][ T9534] ext4_file_write_iter+0xcaa/0xfa0 [ 201.268115][ T9534] do_iter_readv_writev+0x4fd/0x5a0 [ 201.268142][ T9534] vfs_writev+0x2e1/0x900 [ 201.268230][ T9534] __se_sys_pwritev2+0xfc/0x1c0 [ 201.268308][ T9534] __x64_sys_pwritev2+0x67/0x80 [ 201.268331][ T9534] x64_sys_call+0xe07/0x3020 [ 201.268354][ T9534] do_syscall_64+0x12c/0x370 [ 201.268377][ T9534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.268401][ T9534] RIP: 0033:0x7fc352f7c819 [ 201.268416][ T9534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.268432][ T9534] RSP: 002b:00007fc3519d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 201.268450][ T9534] RAX: ffffffffffffffda RBX: 00007fc3531f5fa0 RCX: 00007fc352f7c819 [ 201.268463][ T9534] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 201.268476][ T9534] RBP: 00007fc3519d7090 R08: 0000000000000000 R09: 0000000000000003 [ 201.268537][ T9534] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 201.268548][ T9534] R13: 00007fc3531f6038 R14: 00007fc3531f5fa0 R15: 00007ffdb696ba08 [ 201.268567][ T9534] [ 201.482589][ T9552] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.516761][ T28] audit: type=1326 audit(1775212561.649:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 201.537383][ T9552] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.540570][ T28] audit: type=1326 audit(1775212561.649:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 201.574121][ T28] audit: type=1326 audit(1775212561.649:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 201.597994][ T28] audit: type=1326 audit(1775212561.789:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 201.623906][ T28] audit: type=1326 audit(1775212561.789:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 201.648614][ T28] audit: type=1326 audit(1775212561.969:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 201.658139][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.698057][ T28] audit: type=1326 audit(1775212561.969:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 201.725588][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 201.791931][ T28] audit: type=1326 audit(1775212561.969:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 201.861368][ T28] audit: type=1326 audit(1775212561.969:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 201.913333][ T9581] __nla_validate_parse: 3 callbacks suppressed [ 201.913350][ T9581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1672'. [ 201.928500][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'. [ 201.956089][ T28] audit: type=1326 audit(1775212561.969:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 201.983043][ T28] audit: type=1326 audit(1775212561.969:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 202.919867][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'. [ 202.922684][ T28] audit: type=1326 audit(1775212561.969:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 202.961248][ T28] audit: type=1326 audit(1775212561.969:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 203.054988][ T28] audit: type=1326 audit(1775212561.969:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 203.079323][ T9599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9599 comm=syz.4.1675 [ 203.125595][ T28] audit: type=1326 audit(1775212561.969:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 203.170271][ T28] audit: type=1326 audit(1775212561.969:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 203.193863][ T28] audit: type=1326 audit(1775212561.969:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9557 comm="syz.0.1668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a0b51c819 code=0x7ffc0000 [ 203.293549][ T9613] loop2: detected capacity change from 0 to 512 [ 203.329231][ T9613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 203.390380][ T9613] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 203.494885][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 203.514226][ T9635] bond3: (slave syz_tun): Releasing backup interface [ 203.561551][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1687'. [ 203.570684][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1687'. [ 203.602585][ T9660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.620746][ T9660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.659607][ T9658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.692723][ T9658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.751405][ T9647] net_ratelimit: 45 callbacks suppressed [ 203.751465][ T9647] openvswitch: netlink: Missing key (keys=40, expected=80) [ 204.270574][ T9680] loop5: detected capacity change from 0 to 1024 [ 204.295664][ T9680] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 204.562015][ T9706] netlink: 'syz.5.1695': attribute type 9 has an invalid length. [ 204.683944][ T9723] loop5: detected capacity change from 0 to 256 [ 204.749248][ T9723] sg_write: data in/out 466900/56 bytes for SCSI command 0x0-- guessing data in; [ 204.749248][ T9723] program syz.5.1697 not setting count and/or reply_len properly [ 204.782665][ T9730] netlink: 'syz.4.1699': attribute type 39 has an invalid length. [ 204.817920][ T9730] hsr_slave_1 (unregistering): left promiscuous mode [ 204.937231][ T9739] loop5: detected capacity change from 0 to 512 [ 204.947769][ T9740] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1699'. [ 204.973905][ T9740] loop4: detected capacity change from 0 to 4096 [ 204.992423][ T9740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.034908][ T9740] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.060854][ T9739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.190005][ T9749] netlink: 'syz.3.1704': attribute type 3 has an invalid length. [ 205.207643][ T9749] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1704'. [ 205.219616][ T9751] loop2: detected capacity change from 0 to 128 [ 205.234424][ T9751] EXT4-fs: Invalid want_extra_isize 0 [ 205.443662][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 205.462813][ T9761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1709'. [ 205.609696][ T9763] syzkaller0: entered promiscuous mode [ 205.621454][ T9763] syzkaller0: entered allmulticast mode [ 205.665858][ T9738] syz.5.1702 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 205.693756][ T9738] CPU: 1 UID: 0 PID: 9738 Comm: syz.5.1702 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.693873][ T9738] Tainted: [W]=WARN [ 205.693950][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.693963][ T9738] Call Trace: [ 205.693971][ T9738] [ 205.693980][ T9738] __dump_stack+0x1d/0x30 [ 205.694007][ T9738] dump_stack_lvl+0x95/0xd0 [ 205.694117][ T9738] dump_stack+0x15/0x1b [ 205.694140][ T9738] dump_header+0x80/0x240 [ 205.694202][ T9738] oom_kill_process+0x295/0x350 [ 205.694226][ T9738] out_of_memory+0x97d/0xb80 [ 205.694251][ T9738] try_charge_memcg+0x62e/0xa10 [ 205.694289][ T9738] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 205.694400][ T9738] __swap_cache_prepare_and_add+0x67/0x460 [ 205.694430][ T9738] ? alloc_pages_mpol+0x217/0x260 [ 205.694461][ T9738] swap_cache_alloc_folio+0xa2/0x120 [ 205.694520][ T9738] swap_cluster_readahead+0x26e/0x3d0 [ 205.694628][ T9738] swapin_readahead+0xde/0x840 [ 205.694664][ T9738] ? _raw_spin_unlock+0x9/0x30 [ 205.694692][ T9738] ? swap_put_entries_cluster+0x385/0x3a0 [ 205.694721][ T9738] ? swap_put_entries_cluster+0x101/0x3a0 [ 205.694789][ T9738] ? __rcu_read_unlock+0x4e/0x70 [ 205.694818][ T9738] ? swap_cache_get_folio+0x26f/0x280 [ 205.694866][ T9738] do_swap_page+0x2fe/0x21e0 [ 205.694962][ T9738] ? css_rstat_updated+0xbb/0x280 [ 205.694982][ T9738] ? __rcu_read_lock+0x36/0x50 [ 205.695083][ T9738] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 205.695110][ T9738] handle_mm_fault+0xb46/0x3020 [ 205.695137][ T9738] ? vma_start_read+0x1c7/0x2c0 [ 205.695242][ T9738] do_user_addr_fault+0x62f/0x1050 [ 205.695270][ T9738] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 205.695310][ T9738] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 205.695334][ T9738] ? trace_page_fault_user+0x1f/0xe0 [ 205.695371][ T9738] exc_page_fault+0x62/0xa0 [ 205.695393][ T9738] asm_exc_page_fault+0x26/0x30 [ 205.695469][ T9738] RIP: 0033:0x7f85ac58d336 [ 205.695485][ T9738] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 205.695501][ T9738] RSP: 002b:00007ffd6ebbcc90 EFLAGS: 00010246 [ 205.695519][ T9738] RAX: 0000000000032341 RBX: 00007f85ac805fa0 RCX: 00000000000320c8 [ 205.695586][ T9738] RDX: 0000000000000279 RSI: 0000000000000000 RDI: 00000000000003e8 [ 205.695597][ T9738] RBP: 00007f85ac807da0 R08: 0000000025c03846 R09: 7fffffffffffffff [ 205.695610][ T9738] R10: 3fffffffffffffff R11: 0000000000000246 R12: 00000000000323ba [ 205.695622][ T9738] R13: 00007f85ac805fac R14: 000000000003215e R15: 00007ffd6ebbcdc0 [ 205.695641][ T9738] [ 205.695649][ T9738] memory: usage 307200kB, limit 307200kB, failcnt 221 [ 205.968590][ T9738] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 205.976631][ T9738] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 205.986321][ T9738] Memory cgroup stats for /syz5: [ 205.986706][ T9738] cache 16384 [ 206.002749][ T9738] rss 0 [ 206.008757][ T9738] shmem 0 [ 206.015377][ T9738] mapped_file 0 [ 206.019880][ T9738] dirty 0 [ 206.026460][ T9738] writeback 4096 [ 206.030051][ T9738] workingset_refault_anon 25 [ 206.034711][ T9738] workingset_refault_file 0 [ 206.039335][ T9738] swap 450560 [ 206.042694][ T9738] swapcached 565248 [ 206.046488][ T9738] pgpgin 72781 [ 206.049907][ T9738] pgpgout 72774 [ 206.053366][ T9738] pgfault 52313 [ 206.056898][ T9738] pgmajfault 12 [ 206.060419][ T9738] inactive_anon 12288 [ 206.064460][ T9738] active_anon 0 [ 206.068032][ T9738] inactive_file 16384 [ 206.073783][ T9738] active_file 0 [ 206.078345][ T9738] unevictable 0 [ 206.090821][ T9738] hierarchical_memory_limit 314572800 [ 206.102065][ T9738] hierarchical_memsw_limit 9223372036854771712 [ 206.121324][ T9738] total_cache 16384 [ 206.125191][ T9738] total_rss 0 [ 206.138576][ T9738] total_shmem 0 [ 206.151380][ T9738] total_mapped_file 0 [ 206.155385][ T9738] total_dirty 0 [ 206.155509][ T9785] loop0: detected capacity change from 0 to 128 [ 206.168650][ T9738] total_writeback 4096 [ 206.173934][ T9785] EXT4-fs: Ignoring removed nobh option [ 206.188852][ T9738] total_workingset_refault_anon 25 [ 206.198221][ T9738] total_workingset_refault_file 0 [ 206.198506][ T9785] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.203617][ T9738] total_swap 450560 [ 206.220017][ T9738] total_swapcached 565248 [ 206.224436][ T9738] total_pgpgin 72781 [ 206.228384][ T9738] total_pgpgout 72774 [ 206.232618][ T9785] ext4 filesystem being mounted at /354/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.246055][ T9738] total_pgfault 52313 [ 206.250339][ T9738] total_pgmajfault 12 [ 206.254381][ T9738] total_inactive_anon 12288 [ 206.259505][ T9738] total_active_anon 0 [ 206.263659][ T9738] total_inactive_file 16384 [ 206.268245][ T9738] total_active_file 0 [ 206.272705][ T9738] total_unevictable 0 [ 206.276767][ T9738] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1702,pid=9738,uid=0 [ 206.291987][ T9738] Memory cgroup out of memory: Killed process 9738 (syz.5.1702) total-vm:159568kB, anon-rss:1224kB, file-rss:22240kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 206.299983][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.344210][ T9794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=259 sclass=netlink_tcpdiag_socket pid=9794 comm=syz.3.1722 [ 206.386287][ T9794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9794 comm=syz.3.1722 [ 206.399993][ T9794] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=9794 comm=syz.3.1722 [ 206.400467][ T8185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.445882][ T9796] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.530274][ T9808] xt_hashlimit: max too large, truncated to 1048576 [ 206.538372][ T9796] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.610292][ T9796] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.636775][ T9821] loop4: detected capacity change from 0 to 1024 [ 206.652364][ T9821] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 64 [ 206.707474][ T9823] loop2: detected capacity change from 0 to 1024 [ 206.716579][ T9826] loop5: detected capacity change from 0 to 512 [ 206.728477][ T9796] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.745508][ T9826] EXT4-fs: Ignoring removed nobh option [ 206.775711][ T9826] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 206.802959][ T9821] loop4: detected capacity change from 0 to 8192 [ 206.803500][ T9826] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.1734: attempt to clear invalid blocks 1 len 1 [ 206.824667][ T9826] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 206.826657][ T9826] EXT4-fs (loop5): Remounting filesystem read-only [ 206.829187][ T8155] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.835857][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 206.856909][ C1] EXT4-fs (loop5): initial error at time 1775212567: ext4_clear_blocks:876: inode 13 [ 206.866430][ C1] EXT4-fs (loop5): last error at time 1775212567: ext4_clear_blocks:876: inode 13 [ 206.895629][ T8220] loop4: p1 p3 p4 [ 206.901242][ T9826] EXT4-fs (loop5): 1 truncate cleaned up [ 206.901930][ T8220] loop4: p1 start 16777216 is beyond EOD, truncated [ 206.918121][ T9826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.918724][ T8220] loop4: p4 start 16777223 is beyond EOD, [ 206.936504][ T8155] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.938644][ T8220] truncated [ 206.948651][ T8155] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.964317][ T9826] EXT4-fs (loop5): shut down requested (0) [ 206.971743][ T8155] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.980575][ T9821] loop4: p1 p3 p4 [ 206.984525][ T9821] loop4: p1 start 16777216 is beyond EOD, truncated [ 206.994485][ T9821] loop4: p4 start 16777223 is beyond EOD, truncated [ 207.013223][ T8185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.053581][ T9843] EXT4-fs: Ignoring removed nobh option [ 207.066740][ T9843] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 208.099898][ T9855] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 208.101269][ T8220] udevd[8220]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 208.107804][ T9855] FAT-fs (loop4): Filesystem has been set read-only [ 208.659218][ T9857] __nla_validate_parse: 6 callbacks suppressed [ 208.659246][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 208.736910][ T9860] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1742'. [ 208.752957][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1743'. [ 209.080802][ T8220] udevd[8220]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 209.238265][ T9875] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.285176][ T9875] EXT4-fs (loop2): 1 truncate cleaned up [ 209.302399][ T9875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.417301][ T9869] vlan3: entered allmulticast mode [ 209.427008][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 209.427024][ T28] audit: type=1400 audit(1775212569.739:2367): avc: denied { ioctl } for pid=9878 comm="syz.4.1748" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x5515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 209.512205][ T9887] set_capacity_and_notify: 3 callbacks suppressed [ 209.512223][ T9887] loop4: detected capacity change from 0 to 512 [ 209.526497][ T9887] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 209.628778][ T9887] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 209.640919][ T9890] loop0: detected capacity change from 0 to 512 [ 209.737619][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.765835][ T9907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1756'. [ 209.774846][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1756'. [ 210.606755][ T9934] loop4: detected capacity change from 0 to 128 [ 210.627444][ T9934] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 210.635340][ T9934] FAT-fs (loop4): Filesystem has been set read-only [ 210.722204][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 210.810312][ T9952] loop2: detected capacity change from 0 to 128 [ 210.863873][ T9952] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.932508][ T9952] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.974188][ T28] audit: type=1400 audit(1775212571.289:2368): avc: denied { create } for pid=9951 comm="syz.2.1766" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 211.013369][ T9977] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9977 comm=syz.0.1770 [ 211.113854][ T28] audit: type=1400 audit(1775212571.419:2369): avc: denied { setopt } for pid=9951 comm="syz.2.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 211.146357][ T9984] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1772'. [ 211.173761][ T28] audit: type=1400 audit(1775212571.419:2370): avc: denied { setattr } for pid=9951 comm="syz.2.1766" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 211.216156][ T9990] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9990 comm=syz.0.1773 [ 211.239766][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.294185][ T9997] loop2: detected capacity change from 0 to 512 [ 211.330953][ T9997] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 211.349351][T10004] tipc: Failed to obtain node identity [ 211.355203][T10004] tipc: Enabling of bearer rejected, failed to enable media [ 211.370703][ T9997] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 211.389264][ T9997] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1775: bg 0: block 248: padding at end of block bitmap is not set [ 211.403792][T10009] sit0: left promiscuous mode [ 211.408900][T10009] bridge0: left promiscuous mode [ 211.414084][ T9997] loop2: lost filesystem error report for type 5 error -117 [ 211.415264][ T9997] Quota error (device loop2): write_blk: dquota write failed [ 211.422619][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 211.422637][ C1] EXT4-fs (loop2): last error at time 1775212571: ext4_validate_block_bitmap:441 [ 211.445940][T10009] bond2: left promiscuous mode [ 211.450976][T10009] bridge3: left promiscuous mode [ 211.456230][T10009] vxlan0: left promiscuous mode [ 211.462136][T10009] hsr1: left promiscuous mode [ 211.468482][ T9997] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 211.486387][ T9997] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.1775: Failed to acquire dquot type 1 [ 211.497941][ T9997] loop2: lost filesystem error report for type 5 error -28 [ 211.498804][ T9997] EXT4-fs (loop2): 1 truncate cleaned up [ 211.512372][ T9997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 211.532833][T10011] loop0: detected capacity change from 0 to 512 [ 211.540154][T10011] EXT4-fs: Ignoring removed bh option [ 211.545677][T10011] EXT4-fs: inline encryption not supported [ 211.552734][T10011] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 211.602893][T10011] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 211.628464][T10011] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1778: bg 0: block 248: padding at end of block bitmap is not set [ 211.647816][T10015] loop4: detected capacity change from 0 to 512 [ 211.654407][T10011] loop0: lost filesystem error report for type 5 error -117 [ 211.655140][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 211.662477][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 211.662506][ C1] EXT4-fs (loop0): last error at time 1775212571: ext4_validate_block_bitmap:441 [ 211.687629][T10011] Quota error (device loop0): write_blk: dquota write failed [ 211.697648][T10011] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 211.702599][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1781'. [ 211.708622][T10011] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.1778: Failed to acquire dquot type 1 [ 211.721915][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1781'. [ 211.737506][T10011] loop0: lost filesystem error report for type 5 error -28 [ 211.738309][T10011] EXT4-fs (loop0): 1 truncate cleaned up [ 211.738384][T10015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.746355][T10011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 211.777709][T10015] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.796757][T10021] loop2: detected capacity change from 0 to 512 [ 211.809564][T10021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.822376][T10021] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.909392][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 211.926357][ T8138] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 211.935466][T10028] loop5: detected capacity change from 0 to 512 [ 211.942924][ T8138] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:19: Failed to release dquot type 1 [ 212.120130][ T8185] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 212.128717][ T28] audit: type=1400 audit(1775212572.399:2371): avc: denied { watch } for pid=10027 comm="syz.5.1783" path="/71/file0" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 212.408399][ T8138] loop0: lost filesystem error report for type 5 error -117 [ 212.411282][ T8185] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 212.510886][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.561205][T10042] loop0: detected capacity change from 0 to 1024 [ 212.569957][T10040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10040 comm=syz.3.1786 [ 212.593160][T10042] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 212.614612][T10042] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 2: comm syz.0.1782: lblock 2 mapped to illegal pblock 2 (length 1) [ 212.629536][T10042] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 212.629651][T10042] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 48: comm syz.0.1782: lblock 0 mapped to illegal pblock 48 (length 1) [ 212.638724][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 212.638748][ C0] EXT4-fs (loop0): initial error at time 1775212572: ext4_map_blocks:786: inode 3: block 2 [ 212.638791][ C0] EXT4-fs (loop0): last error at time 1775212572: ext4_map_blocks:786: inode 3: block 2 [ 212.679265][T10042] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 212.684852][T10042] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.1782: Failed to acquire dquot type 0 [ 212.708605][T10042] loop0: lost filesystem error report for type 5 error -117 [ 212.714274][T10042] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 212.745126][T10042] loop0: lost filesystem error report for type 5 error -117 [ 212.747456][T10042] EXT4-fs error (device loop0): ext4_evict_inode:265: inode #11: comm syz.0.1782: mark_inode_dirty error [ 212.747551][T10054] FAT-fs (loop4): Directory bread(block 1285) failed [ 212.759945][T10042] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 212.785237][T10042] EXT4-fs warning (device loop0): ext4_evict_inode:268: couldn't mark inode dirty (err -117) [ 212.804518][T10054] FAT-fs (loop4): Directory bread(block 1286) failed [ 212.814383][T10042] EXT4-fs (loop0): 1 orphan inode deleted [ 212.827318][T10054] FAT-fs (loop4): Directory bread(block 1287) failed [ 212.828673][T10042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.834155][ T8160] EXT4-fs error (device loop0): ext4_map_blocks:786: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1) [ 212.865566][T10041] EXT4-fs error (device loop0): __ext4_get_inode_loc:4797: comm syz.0.1782: Invalid inode table block 1 in block_group 0 [ 212.865936][T10054] FAT-fs (loop4): Directory bread(block 1288) failed [ 212.885248][ T8160] EXT4-fs error (device loop0): ext4_release_dquot:7062: comm kworker/u8:40: Failed to release dquot type 0 [ 212.929097][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.948893][ T3311] EXT4-fs error (device loop0): __ext4_get_inode_loc:4797: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 212.960003][T10054] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 212.968942][ T8138] bridge_slave_1: left allmulticast mode [ 212.974984][ T8138] bridge_slave_1: left promiscuous mode [ 212.980619][ T3311] loop0: lost filesystem error report for type 5 error -117 [ 212.980794][ T3311] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6291: Corrupt filesystem [ 212.988868][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.002450][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.014575][ T3311] loop0: lost filesystem error report for type 5 error -117 [ 213.014649][ T3311] EXT4-fs error (device loop0): ext4_quota_off:7310: inode #3: comm syz-executor: mark_inode_dirty error [ 213.050007][ T8138] bridge_slave_0: left allmulticast mode [ 213.055730][ T8138] bridge_slave_0: left promiscuous mode [ 213.070805][ T3311] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 213.077337][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.126319][T10078] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.149014][T10078] ext4 filesystem being mounted at /373/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.181010][ T8404] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 213.284658][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.345877][T10067] FAT-fs (loop4): Directory bread(block 1285) failed [ 213.352800][T10067] FAT-fs (loop4): Directory bread(block 1286) failed [ 213.361125][T10067] FAT-fs (loop4): Directory bread(block 1287) failed [ 213.368095][T10067] FAT-fs (loop4): Directory bread(block 1288) failed [ 213.375323][T10067] FAT-fs (loop4): Directory bread(block 1285) failed [ 213.390586][ T8138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.401202][ T8138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.412314][ T8138] bond0 (unregistering): Released all slaves [ 213.422296][ T8138] bond1 (unregistering): Released all slaves [ 213.434909][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1791'. [ 213.611711][ T8138] hsr_slave_0: left promiscuous mode [ 213.617843][ T8138] hsr_slave_1: left promiscuous mode [ 213.632587][ T8138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.680168][ T8138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.753617][T10098] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 213.809530][T10098] EXT4-fs (loop2): 1 truncate cleaned up [ 213.815663][T10098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.993854][ T8138] team0 (unregistering): Port device team_slave_1 removed [ 214.006111][ T8138] team0 (unregistering): Port device team_slave_0 removed [ 214.239765][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.289966][T10113] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10113 comm=syz.2.1798 [ 214.370186][T10115] FAULT_INJECTION: forcing a failure. [ 214.370186][T10115] name failslab, interval 1, probability 0, space 0, times 0 [ 214.430260][T10122] __nla_validate_parse: 29 callbacks suppressed [ 214.430275][T10122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 214.446322][T10115] CPU: 1 UID: 0 PID: 10115 Comm: syz.0.1799 Tainted: G W syzkaller #0 PREEMPT(full) [ 214.446372][T10115] Tainted: [W]=WARN [ 214.446384][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.446395][T10115] Call Trace: [ 214.446401][T10115] [ 214.446407][T10115] __dump_stack+0x1d/0x30 [ 214.446436][T10115] dump_stack_lvl+0x95/0xd0 [ 214.446460][T10115] dump_stack+0x15/0x1b [ 214.446527][T10115] should_fail_ex+0x263/0x280 [ 214.446604][T10115] should_failslab+0x8c/0xb0 [ 214.446623][T10115] __kvmalloc_node_noprof+0x155/0x650 [ 214.446672][T10115] ? traverse+0xa2/0x3a0 [ 214.446735][T10115] traverse+0xa2/0x3a0 [ 214.446812][T10115] seq_read_iter+0x85f/0x940 [ 214.446895][T10115] ? _raw_spin_unlock+0x9/0x30 [ 214.446922][T10115] ? alloc_pages_bulk_noprof+0x386/0x530 [ 214.447028][T10115] copy_splice_read+0x471/0x6c0 [ 214.447057][T10115] ? __pfx_copy_splice_read+0x10/0x10 [ 214.447085][T10115] splice_direct_to_actor+0x26e/0x670 [ 214.447109][T10115] ? __pfx_direct_splice_actor+0x10/0x10 [ 214.447131][T10115] do_splice_direct+0x119/0x1a0 [ 214.447151][T10115] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 214.447253][T10115] do_sendfile+0x382/0x650 [ 214.447294][T10115] __x64_sys_sendfile64+0xb8/0x150 [ 214.447320][T10115] x64_sys_call+0x2dc4/0x3020 [ 214.447347][T10115] do_syscall_64+0x12c/0x370 [ 214.447440][T10115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.447464][T10115] RIP: 0033:0x7f7a0b51c819 [ 214.447481][T10115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.447572][T10115] RSP: 002b:00007f7a09f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 214.447594][T10115] RAX: ffffffffffffffda RBX: 00007f7a0b795fa0 RCX: 00007f7a0b51c819 [ 214.447606][T10115] RDX: 0000200000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 214.447619][T10115] RBP: 00007f7a09f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.447633][T10115] R10: 00000002000007ff R11: 0000000000000246 R12: 0000000000000001 [ 214.447648][T10115] R13: 00007f7a0b796038 R14: 00007f7a0b795fa0 R15: 00007ffc74696108 [ 214.447683][T10115] [ 214.759694][T10051] chnl_net:caif_netlink_parms(): no params data found [ 214.810274][T10133] set_capacity_and_notify: 4 callbacks suppressed [ 214.810293][T10133] loop2: detected capacity change from 0 to 1764 [ 214.839451][T10138] netlink: 'syz.4.1804': attribute type 3 has an invalid length. [ 214.860098][T10133] iso9660: Unknown parameter '}tf8' [ 214.879951][T10133] syzkaller0: entered promiscuous mode [ 214.890669][T10133] syzkaller0: entered allmulticast mode [ 214.915996][T10051] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.923265][T10051] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.943541][T10051] bridge_slave_0: entered allmulticast mode [ 214.951268][T10051] bridge_slave_0: entered promiscuous mode [ 214.967443][T10154] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1807'. [ 214.969488][T10051] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.983680][T10051] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.991569][T10051] bridge_slave_1: entered allmulticast mode [ 215.000792][T10051] bridge_slave_1: entered promiscuous mode [ 215.009924][ T8138] IPVS: stop unused estimator thread 0... [ 215.033757][T10051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.051725][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 215.051739][ T28] audit: type=1400 audit(1775212575.369:2373): avc: denied { setattr } for pid=10153 comm="syz.3.1807" name="NETLINK" dev="sockfs" ino=25545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 215.091595][T10051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.109787][T10160] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10160 comm=syz.0.1809 [ 215.151436][T10167] loop0: detected capacity change from 0 to 256 [ 215.162405][T10156] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 215.180333][T10167] FAULT_INJECTION: forcing a failure. [ 215.180333][T10167] name failslab, interval 1, probability 0, space 0, times 0 [ 215.200699][T10167] CPU: 0 UID: 0 PID: 10167 Comm: syz.0.1810 Tainted: G W syzkaller #0 PREEMPT(full) [ 215.200728][T10167] Tainted: [W]=WARN [ 215.200735][T10167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 215.200786][T10167] Call Trace: [ 215.200792][T10167] [ 215.200799][T10167] __dump_stack+0x1d/0x30 [ 215.200896][T10167] dump_stack_lvl+0x95/0xd0 [ 215.200973][T10167] dump_stack+0x15/0x1b [ 215.200994][T10167] should_fail_ex+0x263/0x280 [ 215.201040][T10167] ? cgroup_show_path+0x6a/0x2b0 [ 215.201067][T10167] should_failslab+0x8c/0xb0 [ 215.201168][T10167] __kmalloc_cache_noprof+0x5f/0x410 [ 215.201194][T10167] ? __pfx_cgroup_show_path+0x10/0x10 [ 215.201281][T10167] cgroup_show_path+0x6a/0x2b0 [ 215.201310][T10167] ? kernfs_sop_show_path+0xa4/0xf0 [ 215.201334][T10167] ? __pfx_cgroup_show_path+0x10/0x10 [ 215.201373][T10167] kernfs_sop_show_path+0xb6/0xf0 [ 215.201396][T10167] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 215.201419][T10167] show_path+0x5a/0x80 [ 215.201444][T10167] show_mountinfo+0xe5/0x690 [ 215.201484][T10167] m_show+0x3e/0x50 [ 215.201512][T10167] traverse+0x149/0x3a0 [ 215.201543][T10167] seq_read_iter+0x85f/0x940 [ 215.201578][T10167] ? _raw_spin_unlock+0x9/0x30 [ 215.201604][T10167] ? alloc_pages_bulk_noprof+0x386/0x530 [ 215.201686][T10167] copy_splice_read+0x471/0x6c0 [ 215.201714][T10167] ? __pfx_copy_splice_read+0x10/0x10 [ 215.201735][T10167] splice_direct_to_actor+0x26e/0x670 [ 215.201760][T10167] ? __pfx_direct_splice_actor+0x10/0x10 [ 215.201853][T10167] do_splice_direct+0x119/0x1a0 [ 215.201876][T10167] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 215.201920][T10167] do_sendfile+0x382/0x650 [ 215.201977][T10167] __x64_sys_sendfile64+0xb8/0x150 [ 215.202074][T10167] x64_sys_call+0x2dc4/0x3020 [ 215.202098][T10167] do_syscall_64+0x12c/0x370 [ 215.202130][T10167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.202177][T10167] RIP: 0033:0x7f7a0b51c819 [ 215.202193][T10167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.202208][T10167] RSP: 002b:00007f7a09f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 215.202252][T10167] RAX: ffffffffffffffda RBX: 00007f7a0b795fa0 RCX: 00007f7a0b51c819 [ 215.202267][T10167] RDX: 0000200000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 215.202281][T10167] RBP: 00007f7a09f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.202294][T10167] R10: 00000002000007ff R11: 0000000000000246 R12: 0000000000000001 [ 215.202345][T10167] R13: 00007f7a0b796038 R14: 00007f7a0b795fa0 R15: 00007ffc74696108 [ 215.202364][T10167] [ 215.624756][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 215.638548][T10180] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1811'. [ 215.654971][T10051] team0: Port device team_slave_0 added [ 215.675403][T10180] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1811'. [ 215.688296][T10051] team0: Port device team_slave_1 added [ 215.733361][T10051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.740967][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.776598][T10051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.802519][T10051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.810303][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.811893][T10199] loop4: detected capacity change from 0 to 128 [ 215.836629][T10051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.843319][T10200] loop2: detected capacity change from 0 to 1024 [ 215.862923][T10200] EXT4-fs: Ignoring removed orlov option [ 215.863220][T10202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10202 comm=syz.0.1819 [ 215.872293][T10199] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52) [ 215.893674][T10199] FAT-fs (loop4): Filesystem has been set read-only [ 215.927967][T10200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.929165][T10051] hsr_slave_0: entered promiscuous mode [ 215.943157][T10203] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52) [ 215.947356][T10051] hsr_slave_1: entered promiscuous mode [ 215.961448][T10051] debugfs: 'hsr0' already exists in 'hsr' [ 215.967225][T10051] Cannot create hsr debugfs directory [ 215.995062][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.005603][T10211] loop0: detected capacity change from 0 to 256 [ 216.041306][ T3319] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 52) [ 216.051103][T10211] FAULT_INJECTION: forcing a failure. [ 216.051103][T10211] name failslab, interval 1, probability 0, space 0, times 0 [ 216.073725][T10211] CPU: 1 UID: 0 PID: 10211 Comm: syz.0.1821 Tainted: G W syzkaller #0 PREEMPT(full) [ 216.073798][T10211] Tainted: [W]=WARN [ 216.073804][T10211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.073865][T10211] Call Trace: [ 216.073872][T10211] [ 216.073880][T10211] __dump_stack+0x1d/0x30 [ 216.073948][T10211] dump_stack_lvl+0x95/0xd0 [ 216.073972][T10211] dump_stack+0x15/0x1b [ 216.073994][T10211] should_fail_ex+0x263/0x280 [ 216.074136][T10211] ? cgroup_show_path+0x6a/0x2b0 [ 216.074192][T10211] should_failslab+0x8c/0xb0 [ 216.074340][T10211] __kmalloc_cache_noprof+0x5f/0x410 [ 216.074367][T10211] ? __pfx_cgroup_show_path+0x10/0x10 [ 216.074442][T10211] cgroup_show_path+0x6a/0x2b0 [ 216.074471][T10211] ? kernfs_sop_show_path+0xa4/0xf0 [ 216.074515][T10211] ? __pfx_cgroup_show_path+0x10/0x10 [ 216.074554][T10211] kernfs_sop_show_path+0xb6/0xf0 [ 216.074580][T10211] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 216.074604][T10211] show_path+0x5a/0x80 [ 216.074674][T10211] show_mountinfo+0xe5/0x690 [ 216.074711][T10211] m_show+0x3e/0x50 [ 216.074766][T10211] traverse+0x149/0x3a0 [ 216.074883][T10211] seq_read_iter+0x85f/0x940 [ 216.075002][T10211] ? _raw_spin_unlock+0x9/0x30 [ 216.075030][T10211] ? alloc_pages_bulk_noprof+0x386/0x530 [ 216.075061][T10211] copy_splice_read+0x471/0x6c0 [ 216.075088][T10211] ? __pfx_copy_splice_read+0x10/0x10 [ 216.075160][T10211] splice_direct_to_actor+0x26e/0x670 [ 216.075223][T10211] ? __pfx_direct_splice_actor+0x10/0x10 [ 216.075251][T10211] do_splice_direct+0x119/0x1a0 [ 216.075273][T10211] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 216.075301][T10211] do_sendfile+0x382/0x650 [ 216.075410][T10211] __x64_sys_sendfile64+0xb8/0x150 [ 216.075431][T10211] x64_sys_call+0x2dc4/0x3020 [ 216.075453][T10211] do_syscall_64+0x12c/0x370 [ 216.075500][T10211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.075518][T10211] RIP: 0033:0x7f7a0b51c819 [ 216.075617][T10211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.075707][T10211] RSP: 002b:00007f7a09f6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 216.075725][T10211] RAX: ffffffffffffffda RBX: 00007f7a0b795fa0 RCX: 00007f7a0b51c819 [ 216.075737][T10211] RDX: 0000200000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 216.075749][T10211] RBP: 00007f7a09f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.075761][T10211] R10: 00000002000007ff R11: 0000000000000246 R12: 0000000000000001 [ 216.075773][T10211] R13: 00007f7a0b796038 R14: 00007f7a0b795fa0 R15: 00007ffc74696108 [ 216.075789][T10211] [ 216.375210][T10051] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 216.422646][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'. [ 216.444519][T10051] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 216.469034][T10231] netlink: 'syz.2.1822': attribute type 10 has an invalid length. [ 216.488107][T10051] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 216.522634][ T28] audit: type=1400 audit(1775212576.839:2374): avc: denied { listen } for pid=10245 comm="syz.0.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 216.557159][T10051] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 216.567395][T10249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10249 comm=syz.3.1829 [ 216.811371][T10278] FAULT_INJECTION: forcing a failure. [ 216.811371][T10278] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 216.824890][T10278] CPU: 1 UID: 0 PID: 10278 Comm: syz.2.1830 Tainted: G W syzkaller #0 PREEMPT(full) [ 216.824919][T10278] Tainted: [W]=WARN [ 216.824960][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.824971][T10278] Call Trace: [ 216.824977][T10278] [ 216.824986][T10278] __dump_stack+0x1d/0x30 [ 216.825020][T10278] dump_stack_lvl+0x95/0xd0 [ 216.825108][T10278] dump_stack+0x15/0x1b [ 216.825206][T10278] should_fail_ex+0x263/0x280 [ 216.825235][T10278] should_fail+0xb/0x20 [ 216.825298][T10278] should_fail_usercopy+0x1a/0x20 [ 216.825380][T10278] copy_folio_from_iter_atomic+0x269/0x1170 [ 216.825411][T10278] ? shmem_write_begin+0xfc/0x1f0 [ 216.825434][T10278] ? shmem_write_begin+0x135/0x1f0 [ 216.825534][T10278] generic_perform_write+0x2c1/0x490 [ 216.825563][T10278] shmem_file_write_iter+0xc5/0xf0 [ 216.825589][T10278] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 216.825636][T10278] vfs_write+0x5a6/0x9f0 [ 216.825660][T10278] ksys_write+0xdc/0x1a0 [ 216.825686][T10278] __x64_sys_write+0x40/0x50 [ 216.825707][T10278] x64_sys_call+0x27e1/0x3020 [ 216.825787][T10278] do_syscall_64+0x12c/0x370 [ 216.825925][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.826009][T10278] RIP: 0033:0x7fc352f3d04e [ 216.826032][T10278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.826092][T10278] RSP: 002b:00007fc351994da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.826115][T10278] RAX: ffffffffffffffda RBX: 00007fc3519956c0 RCX: 00007fc352f3d04e [ 216.826129][T10278] RDX: 0000000000010000 RSI: 00007fc349575000 RDI: 000000000000000a [ 216.826144][T10278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.826158][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 216.826172][T10278] R13: 00007fc351994ee0 R14: 00007fc351994ea0 R15: 00007fc349575000 [ 216.826266][T10278] [ 217.026138][T10278] loop2: detected capacity change from 0 to 128 [ 217.220391][T10278] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 217.228646][T10278] FAT-fs (loop2): Filesystem has been set read-only [ 217.528095][T10051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.832771][T10051] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.581728][ T8150] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.588834][ T8150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.907803][ T28] audit: type=1400 audit(1775212579.219:2375): avc: denied { bind } for pid=10284 comm="syz.4.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 218.967747][ T8150] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.974957][ T8150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.049466][T10296] rdma_rxe: rxe_newlink: failed to add veth0_macvtap [ 219.060313][ T28] audit: type=1400 audit(1775212579.379:2376): avc: denied { egress } for pid=8404 comm="kworker/1:18" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 219.105454][T10304] netlink: 'syz.0.1840': attribute type 27 has an invalid length. [ 219.131272][ T28] audit: type=1400 audit(1775212579.379:2377): avc: denied { sendto } for pid=8404 comm="kworker/1:18" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 219.165722][T10310] loop4: detected capacity change from 0 to 512 [ 219.167264][T10307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10307 comm=syz.3.1841 [ 219.185462][T10310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 219.197991][T10297] infiniband syz2: set down [ 219.202697][T10297] infiniband syz2: added veth0_macvtap [ 219.215840][T10297] RDS/IB: syz2: added [ 219.220712][T10297] smc: adding ib device syz2 with port count 1 [ 219.226874][T10297] smc: ib device syz2 port 1 has pnetid S (user defined) [ 219.236384][T10310] EXT4-fs (loop4): 1 truncate cleaned up [ 219.243396][T10310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.256539][ T28] audit: type=1400 audit(1775212579.569:2378): avc: denied { listen } for pid=10309 comm="syz.4.1842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 219.329740][ T28] audit: type=1400 audit(1775212579.649:2379): avc: denied { ioctl } for pid=10309 comm="syz.4.1842" path="/331/file1/file1" dev="loop4" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 220.180918][T10304] bond1: left allmulticast mode [ 220.185900][T10304] bridge1: left promiscuous mode [ 220.187039][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.192877][T10304] bridge1: left allmulticast mode [ 220.220762][T10304] bridge0: left allmulticast mode [ 220.228734][T10304] veth5: left allmulticast mode [ 220.254300][T10308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.262628][T10308] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.271774][T10308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.287773][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 220.299414][T10329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1847'. [ 220.305272][ T8150] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.320682][T10325] dvmrp6: entered allmulticast mode [ 220.341684][T10329] netlink: 'syz.4.1847': attribute type 21 has an invalid length. [ 220.349999][T10329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1847'. [ 220.361548][ T8150] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.385113][T10051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.450526][ T8150] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.466746][ T8150] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.581614][T10349] FAULT_INJECTION: forcing a failure. [ 220.581614][T10349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 220.595314][T10349] CPU: 0 UID: 0 PID: 10349 Comm: syz.0.1848 Tainted: G W syzkaller #0 PREEMPT(full) [ 220.595413][T10349] Tainted: [W]=WARN [ 220.595418][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.595431][T10349] Call Trace: [ 220.595438][T10349] [ 220.595447][T10349] __dump_stack+0x1d/0x30 [ 220.595475][T10349] dump_stack_lvl+0x95/0xd0 [ 220.595500][T10349] dump_stack+0x15/0x1b [ 220.595522][T10349] should_fail_ex+0x263/0x280 [ 220.595551][T10349] should_fail_alloc_page+0xf2/0x100 [ 220.595655][T10349] __alloc_frozen_pages_noprof+0x108/0x360 [ 220.595681][T10349] alloc_pages_mpol+0xb3/0x260 [ 220.595705][T10349] folio_alloc_mpol_noprof+0x39/0x80 [ 220.595807][T10349] shmem_get_folio_gfp+0x3da/0xd60 [ 220.595835][T10349] shmem_write_begin+0xfc/0x1f0 [ 220.595865][T10349] generic_perform_write+0x183/0x490 [ 220.595898][T10349] shmem_file_write_iter+0xc5/0xf0 [ 220.596059][T10349] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 220.596113][T10349] vfs_write+0x5a6/0x9f0 [ 220.596137][T10349] ksys_write+0xdc/0x1a0 [ 220.596154][T10349] __x64_sys_write+0x40/0x50 [ 220.596173][T10349] x64_sys_call+0x27e1/0x3020 [ 220.596203][T10349] do_syscall_64+0x12c/0x370 [ 220.596296][T10349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.596384][T10349] RIP: 0033:0x7f7a0b4dd04e [ 220.596399][T10349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 220.596414][T10349] RSP: 002b:00007f7a09f2cda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.596588][T10349] RAX: ffffffffffffffda RBX: 00007f7a09f2d6c0 RCX: 00007f7a0b4dd04e [ 220.596604][T10349] RDX: 0000000000010000 RSI: 00007f7a01b0d000 RDI: 000000000000000a [ 220.596693][T10349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.596707][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 220.596721][T10349] R13: 00007f7a09f2cee0 R14: 00007f7a09f2cea0 R15: 00007f7a01b0d000 [ 220.596814][T10349] [ 221.275124][T10051] veth0_vlan: entered promiscuous mode [ 221.317772][T10051] veth1_vlan: entered promiscuous mode [ 221.365444][T10051] veth0_macvtap: entered promiscuous mode [ 221.411363][T10051] veth1_macvtap: entered promiscuous mode [ 221.447201][T10051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.480370][T10051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.522135][ T8150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.538627][ T8150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.575355][ T8150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.604755][ T8150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.714485][T10364] loop6: detected capacity change from 0 to 512 [ 221.869167][T10377] loop2: detected capacity change from 0 to 256 [ 221.935143][T10377] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=24859 sclass=netlink_xfrm_socket pid=10377 comm=syz.2.1855 [ 222.002136][T10379] loop4: detected capacity change from 0 to 1024 [ 222.038285][T10379] ext4: Unknown parameter 'noacl' [ 222.051070][T10381] loop0: detected capacity change from 0 to 1024 [ 222.097172][T10381] EXT4-fs: Ignoring removed orlov option [ 222.151878][T10381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.359896][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.376384][T10394] netlink: 'syz.6.1861': attribute type 25 has an invalid length. [ 222.391612][T10394] netlink: 'syz.6.1861': attribute type 29 has an invalid length. [ 222.445317][T10407] loop6: detected capacity change from 0 to 512 [ 222.492981][T10402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10402 comm=syz.3.1864 [ 222.579447][T10407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.605083][T10407] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.716178][T10394] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 223.887915][T10051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.935235][T10437] loop2: detected capacity change from 0 to 512 [ 223.997594][T10437] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.028931][T10437] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 224.061567][T10437] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 224.081721][T10437] System zones: 0-2, 18-18, 34-34 [ 224.093239][T10440] loop0: detected capacity change from 0 to 4096 [ 224.102073][T10437] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1871: inode #15: comm syz.2.1871: iget: illegal inode # [ 224.125720][T10440] EXT4-fs error (device loop0): ext4_quota_enable:7213: comm syz.0.1869: Bad quota inum: 2, type: 1 [ 224.157888][T10437] loop2: lost filesystem error report for type 5 error -117 [ 224.158190][T10437] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1871: couldn't read orphan inode 15 (err -117) [ 224.165595][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 224.165610][ C0] EXT4-fs (loop2): initial error at time 1775212584: ext4_orphan_get:1397 [ 224.165629][ C0] EXT4-fs (loop2): last error at time 1775212584: ext4_orphan_get:1397 [ 224.209712][T10440] loop0: lost filesystem error report for type 5 error -117 [ 224.218558][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 224.232298][ C0] EXT4-fs (loop0): initial error at time 1775212584: ext4_quota_enable:7213 [ 224.241030][ C0] EXT4-fs (loop0): last error at time 1775212584: ext4_quota_enable:7213 [ 224.268686][T10440] EXT4-fs warning (device loop0): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 224.293416][T10440] EXT4-fs (loop0): mount failed [ 224.303467][T10437] loop2: lost filesystem error report for type 5 error -117 [ 224.303972][T10437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.366871][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.585707][T10455] loop4: detected capacity change from 0 to 256 [ 224.714717][T10468] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1870'. [ 224.775187][T10468] loop6: detected capacity change from 0 to 512 [ 224.808705][T10468] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 224.847420][T10468] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1870: bad orphan inode 131083 [ 224.858053][T10468] loop6: lost filesystem error report for type 5 error -117 [ 224.858619][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 224.872380][ C1] EXT4-fs (loop6): initial error at time 1775212585: ext4_orphan_get:1423 [ 224.880913][ C1] EXT4-fs (loop6): last error at time 1775212585: ext4_orphan_get:1423 [ 224.889353][T10468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.908735][T10484] loop0: detected capacity change from 0 to 512 [ 224.921411][ T28] audit: type=1400 audit(1775212585.219:2380): avc: denied { getopt } for pid=10477 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 224.941672][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1882'. [ 225.140547][ T28] audit: type=1400 audit(1775212585.459:2381): avc: denied { mac_admin } for pid=10456 comm="syz.6.1870" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 225.217310][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1880'. [ 225.248688][T10475] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1880'. [ 225.464625][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 225.563208][T10051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.619240][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.697247][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.875171][T10518] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1893'. [ 226.068715][T10522] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.094590][T10522] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1893: Invalid block bitmap block 0 in block_group 0 [ 226.895802][ T28] audit: type=1400 audit(1775212587.189:2382): avc: denied { read } for pid=10520 comm="syz.3.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.935549][T10522] loop4: lost filesystem error report for type 5 error -117 [ 226.938617][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 226.952368][ C0] EXT4-fs (loop4): initial error at time 1775212587: ext4_read_block_bitmap_nowait:483 [ 226.962029][ C0] EXT4-fs (loop4): last error at time 1775212587: ext4_read_block_bitmap_nowait:483 [ 227.026384][T10522] Quota error (device loop4): write_blk: dquota write failed [ 227.042840][T10528] set_capacity_and_notify: 1 callbacks suppressed [ 227.042858][T10528] loop6: detected capacity change from 0 to 1024 [ 227.056123][T10522] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 227.073566][T10528] EXT4-fs: inline encryption not supported [ 227.087083][T10522] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.1893: Failed to acquire dquot type 0 [ 227.099078][T10522] loop4: lost filesystem error report for type 5 error -117 [ 227.099244][T10522] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.1893: Freeing blocks not in datazone - block = 0, count = 4096 [ 227.124271][T10528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 227.156153][T10522] loop4: lost filesystem error report for type 5 error -117 [ 227.156369][T10522] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1893: Invalid inode bitmap blk 0 in block_group 0 [ 227.177253][ T8150] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 227.194662][T10534] loop0: detected capacity change from 0 to 1024 [ 227.201339][T10528] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.212317][ T8150] EXT4-fs error (device loop4): ext4_release_dquot:7062: comm kworker/u8:30: Failed to release dquot type 0 [ 227.239338][T10528] EXT4-fs error (device loop6): ext4_map_blocks:828: inode #15: comm syz.6.1891: lblock 0 mapped to illegal pblock 0 (length 1) [ 227.252840][ T8150] loop4: lost filesystem error report for type 5 error -117 [ 227.258679][T10522] loop4: lost filesystem error report for type 5 error -117 [ 227.388679][T10522] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 227.404991][T10522] loop4: lost filesystem error report for type 5 error -117 [ 227.425095][T10522] EXT4-fs (loop4): 1 orphan inode deleted [ 228.179999][T10522] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.192631][T10528] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 228.231191][T10542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1897'. [ 228.248924][T10528] EXT4-fs (loop6): This should not happen!! Data will be lost [ 228.248924][T10528] [ 228.283528][T10522] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.362706][T10051] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 228.393448][T10051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 228.487573][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 228.500677][T10563] loop4: detected capacity change from 0 to 128 [ 228.549399][T10563] EXT4-fs: Ignoring removed nobh option [ 228.567738][T10563] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.591519][T10563] ext4 filesystem being mounted at /344/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.617119][ T28] audit: type=1400 audit(1775212588.929:2383): avc: denied { create } for pid=10562 comm="syz.4.1901" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 228.684176][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.853731][T10588] loop4: detected capacity change from 0 to 1024 [ 228.863714][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1908'. [ 228.873864][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 229.848946][T10588] EXT4-fs: inline encryption not supported [ 229.908647][T10588] EXT4-fs: Ignoring removed nobh option [ 229.977021][ T28] audit: type=1400 audit(1775212590.289:2384): avc: denied { execute } for pid=10570 comm="syz.6.1903" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 230.099224][T10588] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 230.183081][T10588] System zones: 0-1, 3-12 [ 230.205156][T10588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.248733][ T28] audit: type=1400 audit(1775212590.449:2385): avc: denied { accept } for pid=10570 comm="syz.6.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 230.434332][T10625] loop6: detected capacity change from 0 to 2048 [ 230.514781][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.531287][T10625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.597479][T10625] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 16: comm syz.6.1912: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=8, size=2048 fake=0 [ 230.624789][ T28] audit: type=1400 audit(1775212590.909:2386): avc: denied { rename } for pid=10624 comm="syz.6.1912" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 230.650399][T10634] netlink: 'syz.2.1910': attribute type 13 has an invalid length. [ 230.781725][T10625] EXT4-fs error (device loop6): ext4_map_blocks:786: inode #12: block 2: comm syz.6.1912: lblock 0 mapped to illegal pblock 2 (length 1) [ 230.795902][ T28] audit: type=1400 audit(1775212591.099:2387): avc: denied { read } for pid=10624 comm="syz.6.1912" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 230.997243][T10634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 231.048473][T10648] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.101974][T10614] loop2: detected capacity change from 0 to 512 [ 231.133944][T10614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.187497][T10648] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.226051][T10051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.244062][T10648] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.257195][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.286938][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1915'. [ 231.381134][T10648] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.455665][T10675] netlink: 'syz.6.1919': attribute type 21 has an invalid length. [ 231.469589][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 231.479691][T10675] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1919'. [ 231.564524][T10684] loop6: detected capacity change from 0 to 128 [ 231.628619][ T8138] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.746451][T10696] 9pnet_fd: p9_fd_create_unix (10696): problem connecting socket: ./file0: -111 [ 231.755633][ T28] audit: type=1400 audit(1775212592.059:2388): avc: denied { mounton } for pid=10692 comm="syz.2.1924" path="/378/file0" dev="tmpfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 231.783448][T10691] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1921'. [ 231.797477][ T8142] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.824802][ T8142] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.842493][ T8159] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.026943][T10709] loop4: detected capacity change from 0 to 128 [ 232.046368][T10703] 9p: Bad value for 'source' [ 232.076515][T10709] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.080817][T10712] loop6: detected capacity change from 0 to 1024 [ 232.097558][T10712] EXT4-fs: Ignoring removed orlov option [ 232.106926][T10709] ext4 filesystem being mounted at /349/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.146252][T10693] syzkaller0: left promiscuous mode [ 232.152924][T10712] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.172153][T10693] bond3: left promiscuous mode [ 232.177234][T10693] vcan1: left promiscuous mode [ 232.232163][ T8159] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.253507][ T8159] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.271774][ T8159] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.312998][ T8159] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.376087][T10051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.662018][T10730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1935'. [ 232.794190][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 232.811119][T10737] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 232.826312][T10737] bridge0: left allmulticast mode [ 232.880055][ T28] audit: type=1400 audit(1775212593.109:2389): avc: denied { bind } for pid=10729 comm="syz.2.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 232.991302][T10751] loop0: detected capacity change from 0 to 512 [ 232.999798][T10751] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.012981][T10751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.040240][T10751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.065662][T10751] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.080225][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1939'. [ 233.093566][T10751] EXT4-fs (loop0): shut down requested (2) [ 233.101699][T10751] tipc: Started in network mode [ 233.106718][T10751] tipc: Node identity 4, cluster identity 4711 [ 233.113359][T10751] tipc: Node number set to 4 [ 233.130478][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.275274][T10760] netlink: 'syz.6.1931': attribute type 1 has an invalid length. [ 233.574043][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.602275][T10761] kthread_run failed with err -4 [ 233.644688][T10773] loop4: detected capacity change from 0 to 512 [ 233.671966][T10773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.717141][ T10] IPVS: starting estimator thread 0... [ 233.797149][T10792] loop6: detected capacity change from 0 to 256 [ 233.813695][T10786] IPVS: using max 2352 ests per chain, 117600 per kthread [ 233.852153][ T28] audit: type=1400 audit(1775212594.169:2390): avc: denied { write } for pid=10791 comm="syz.6.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 233.907319][T10792] xt_CT: No such helper "snmp_trap" [ 233.909371][T10796] tipc: Started in network mode [ 233.919469][T10796] tipc: Node identity ac14140f, cluster identity 4711 [ 233.926323][T10796] tipc: New replicast peer: 255.255.255.255 [ 233.953180][ T28] audit: type=1400 audit(1775212594.169:2391): avc: denied { setopt } for pid=10791 comm="syz.6.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 233.979370][T10796] tipc: Enabled bearer , priority 10 [ 233.986008][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.096075][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.103287][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.138194][T10820] loop2: detected capacity change from 0 to 512 [ 234.145903][T10820] journal_path: Non-blockdev passed as './file2' [ 234.153251][T10820] EXT4-fs: error: could not find journal device path [ 234.161719][T10820] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1960'. [ 234.194035][T10792] bridge_slave_0: left allmulticast mode [ 234.201214][T10792] bridge_slave_0: left promiscuous mode [ 234.207051][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.219835][T10792] bridge_slave_1: left allmulticast mode [ 234.225687][T10792] bridge_slave_1: left promiscuous mode [ 234.231831][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.248116][T10792] bond0: (slave bond_slave_0): Releasing backup interface [ 234.261733][T10792] bond0: (slave bond_slave_1): Releasing backup interface [ 234.275905][T10792] team0: Port device team_slave_0 removed [ 234.287020][T10792] team0: Port device team_slave_1 removed [ 234.295517][T10792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.306110][T10792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.316914][T10792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.326945][T10792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.341237][T10792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.398563][ T28] audit: type=1326 audit(1775212594.709:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10829 comm="syz.2.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352f7c819 code=0x7ffc0000 [ 234.638787][ T28] audit: type=1326 audit(1775212594.709:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10829 comm="syz.2.1962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352f7c819 code=0x7ffc0000 [ 234.949264][T10858] loop0: detected capacity change from 0 to 512 [ 234.983565][T10861] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1968'. [ 235.098643][ T8405] tipc: Node number set to 2886997007 [ 235.412364][T10877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1973'. [ 235.466708][T10882] syzkaller0: entered promiscuous mode [ 235.482588][T10882] syzkaller0: entered allmulticast mode [ 236.033150][T10921] loop6: detected capacity change from 0 to 128 [ 236.498387][T10948] loop4: detected capacity change from 0 to 164 [ 236.534395][T10948] rock: directory entry would overflow storage [ 236.541146][T10955] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=50 sclass=netlink_tcpdiag_socket pid=10955 comm=syz.3.1994 [ 236.554266][T10948] rock: sig=0x4f50, size=4, remaining=3 [ 236.564200][T10948] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 236.582620][T10955] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=258 sclass=netlink_tcpdiag_socket pid=10955 comm=syz.3.1994 [ 236.607284][T10965] loop6: detected capacity change from 0 to 512 [ 236.629701][T10965] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 236.760171][T10965] syzkaller0: entered promiscuous mode [ 236.765754][T10965] syzkaller0: entered allmulticast mode [ 236.777774][T10987] loop4: detected capacity change from 0 to 1024 [ 236.795200][T10987] EXT4-fs: inline encryption not supported [ 236.801875][T10987] EXT4-fs: Ignoring removed bh option [ 236.811216][T10987] EXT4-fs (loop4): invalid first ino: 8 [ 236.940480][T11005] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 236.953722][T11005] EXT4-fs (loop6): orphan cleanup on readonly fs [ 236.960673][T11005] __quota_error: 41 callbacks suppressed [ 236.960685][T11005] Quota error (device loop6): v2_read_file_info: Block with free entry 5 out of range (1, 5). [ 236.977067][T11005] EXT4-fs warning (device loop6): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 236.992069][T11005] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 236.999540][T11005] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #16: comm syz.6.2003: corrupted inode contents [ 237.006099][ T28] audit: type=1400 audit(1775212597.319:2435): avc: denied { mount } for pid=10985 comm="syz.4.1999" name="/" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 237.012696][T11005] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 237.035323][ T28] audit: type=1400 audit(1775212597.349:2436): avc: denied { search } for pid=10985 comm="syz.4.1999" name="/" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 237.036236][T11005] EXT4-fs (loop6): Remounting filesystem read-only [ 237.044835][ T28] audit: type=1400 audit(1775212597.349:2437): avc: denied { setattr } for pid=10985 comm="syz.4.1999" name="/" dev="configfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 237.066863][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 237.066880][ C0] EXT4-fs (loop6): initial error at time 1775212597: ext4_do_update_inode:5602: inode 16 [ 237.066907][ C0] EXT4-fs (loop6): last error at time 1775212597: ext4_do_update_inode:5602: inode 16 [ 237.068638][T11005] EXT4-fs (loop6): 1 truncate cleaned up [ 237.096231][T11009] set_capacity_and_notify: 1 callbacks suppressed [ 237.096247][T11009] loop4: detected capacity change from 0 to 256 [ 237.103135][T11005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 237.488736][T11018] loop2: detected capacity change from 0 to 764 [ 237.567372][T11027] loop2: detected capacity change from 0 to 512 [ 237.597430][T11027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.781060][T10051] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.930459][ T28] audit: type=1400 audit(1775212598.239:2438): avc: denied { ioctl } for pid=11048 comm="syz.4.2015" path="socket:[30016]" dev="sockfs" ino=30016 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 238.988668][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.300362][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.605479][T11073] loop4: detected capacity change from 0 to 2048 [ 239.648410][T11081] loop6: detected capacity change from 0 to 256 [ 239.669064][ T3304] loop4: p1 p2 p3 [ 239.680042][ T3304] loop4: p2 size 458752 extends beyond EOD, truncated [ 239.691793][ T28] audit: type=1400 audit(1775212600.009:2439): avc: denied { connect } for pid=11075 comm="syz.2.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.711699][ T3304] loop4: p3 start 65280 is beyond EOD, truncated [ 239.746007][T11073] loop4: p1 p2 p3 [ 239.761166][T11073] loop4: p2 size 458752 extends beyond EOD, truncated [ 239.787023][ T8159] Bluetooth: hci0: Frame reassembly failed (-84) [ 239.808164][T11073] loop4: p3 start 65280 is beyond EOD, truncated [ 239.889481][ T28] audit: type=1400 audit(1775212600.209:2440): avc: denied { write } for pid=11069 comm="syz.4.2021" name="loop4p1" dev="devtmpfs" ino=1629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 239.914656][T11073] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 239.924505][ T28] audit: type=1400 audit(1775212600.209:2441): avc: denied { open } for pid=11069 comm="syz.4.2021" path="/dev/loop4p1" dev="devtmpfs" ino=1629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 239.994717][T11116] tipc: Enabling of bearer rejected, failed to enable media [ 240.084316][T11128] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 240.140144][T11129] loop4: detected capacity change from 0 to 256 [ 240.167853][T11094] loop0: detected capacity change from 0 to 4096 [ 240.171745][T11129] FAT-fs (loop4): Directory bread(block 64) failed [ 240.187580][T11129] FAT-fs (loop4): Directory bread(block 65) failed [ 240.194467][T11129] FAT-fs (loop4): Directory bread(block 66) failed [ 240.214102][T11129] FAT-fs (loop4): Directory bread(block 67) failed [ 240.225818][T11129] FAT-fs (loop4): Directory bread(block 68) failed [ 240.226213][T11094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.233718][T11129] FAT-fs (loop4): Directory bread(block 69) failed [ 240.256048][T11095] pim6reg: entered allmulticast mode [ 240.265935][T11129] FAT-fs (loop4): Directory bread(block 70) failed [ 240.272756][T11129] FAT-fs (loop4): Directory bread(block 71) failed [ 240.279674][T11129] FAT-fs (loop4): Directory bread(block 72) failed [ 240.286193][T11129] FAT-fs (loop4): Directory bread(block 73) failed [ 240.286667][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.305178][ T28] audit: type=1400 audit(1775212600.619:2442): avc: denied { watch } for pid=11127 comm="syz.4.2039" path="/371/file0/file0" dev="loop4" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 241.858657][ T3537] Bluetooth: hci0: command 0x1003 tx timeout [ 241.858668][ T8909] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 261.064399][T11137] __nla_validate_parse: 34 callbacks suppressed [ 261.064423][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2041'. [ 261.079732][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2041'. [ 261.155610][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2043'. [ 261.180133][T11146] loop2: detected capacity change from 0 to 512 [ 261.231628][T11141] loop4: detected capacity change from 0 to 2048 [ 261.269509][T11146] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 261.517121][T11146] EXT4-fs warning (device loop2): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 261.698451][ T28] audit: type=1400 audit(1775212621.999:2443): avc: denied { setattr } for pid=11162 comm="syz.0.2047" name="X25" dev="sockfs" ino=29266 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 261.754621][T11146] EXT4-fs (loop2): mount failed [ 261.780970][T11141] loop4: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 261.829139][T11167] FAULT_INJECTION: forcing a failure. [ 261.829139][T11167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.858318][ T28] audit: type=1400 audit(1775212622.139:2444): avc: denied { map } for pid=11138 comm="syz.2.2042" path="/404/file0" dev="tmpfs" ino=2189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 261.990239][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.0.2048 Tainted: G W syzkaller #0 PREEMPT(full) [ 261.990282][T11167] Tainted: [W]=WARN [ 261.990289][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.990306][T11167] Call Trace: [ 261.990313][T11167] [ 261.990321][T11167] __dump_stack+0x1d/0x30 [ 261.990398][T11167] dump_stack_lvl+0x95/0xd0 [ 261.990429][T11167] dump_stack+0x15/0x1b [ 261.990526][T11167] should_fail_ex+0x263/0x280 [ 261.990552][T11167] should_fail+0xb/0x20 [ 261.990572][T11167] should_fail_usercopy+0x1a/0x20 [ 261.990595][T11167] _copy_from_user+0x1c/0xb0 [ 261.990689][T11167] ___sys_sendmsg+0xc1/0x1e0 [ 261.990755][T11167] __x64_sys_sendmsg+0xd4/0x160 [ 261.990864][T11167] x64_sys_call+0x194c/0x3020 [ 261.990924][T11167] do_syscall_64+0x12c/0x370 [ 261.990947][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.990970][T11167] RIP: 0033:0x7f7a0b51c819 [ 261.991044][T11167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.991059][T11167] RSP: 002b:00007f7a09f6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.991077][T11167] RAX: ffffffffffffffda RBX: 00007f7a0b795fa0 RCX: 00007f7a0b51c819 [ 261.991090][T11167] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 261.991102][T11167] RBP: 00007f7a09f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 261.991115][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.991126][T11167] R13: 00007f7a0b796038 R14: 00007f7a0b795fa0 R15: 00007ffc74696108 [ 261.991143][T11167] [ 261.991992][T11141] loop4: p4 size 8388608 extends beyond EOD, truncated [ 262.167656][ T28] audit: type=1400 audit(1775212622.139:2445): avc: denied { execute } for pid=11138 comm="syz.2.2042" path="/404/file0" dev="tmpfs" ino=2189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.192541][ T28] audit: type=1400 audit(1775212622.139:2446): avc: denied { append } for pid=11138 comm="syz.2.2042" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 262.259060][T11177] loop0: detected capacity change from 0 to 256 [ 262.429919][ T3311] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 262.437494][ T3311] FAT-fs (loop0): Filesystem has been set read-only [ 262.460201][ T3311] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 262.879272][T11226] FAULT_INJECTION: forcing a failure. [ 262.879272][T11226] name failslab, interval 1, probability 0, space 0, times 0 [ 262.894949][ T8150] veth0_to_bridge: left allmulticast mode [ 262.918590][ T8150] veth0_to_bridge: left promiscuous mode [ 262.937757][T11226] CPU: 0 UID: 0 PID: 11226 Comm: syz.2.2059 Tainted: G W syzkaller #0 PREEMPT(full) [ 262.937793][T11226] Tainted: [W]=WARN [ 262.937801][T11226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.937814][T11226] Call Trace: [ 262.937821][T11226] [ 262.937831][T11226] __dump_stack+0x1d/0x30 [ 262.937860][T11226] dump_stack_lvl+0x95/0xd0 [ 262.937974][T11226] dump_stack+0x15/0x1b [ 262.937998][T11226] should_fail_ex+0x263/0x280 [ 262.938027][T11226] should_failslab+0x8c/0xb0 [ 262.938048][T11226] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 262.938082][T11226] ? __alloc_skb+0x2d6/0x690 [ 262.938114][T11226] __alloc_skb+0x2d6/0x690 [ 262.938143][T11226] ? __alloc_skb+0x200/0x690 [ 262.938249][T11226] netlink_alloc_large_skb+0xbf/0xf0 [ 262.938276][T11226] netlink_sendmsg+0x40c/0x6f0 [ 262.938300][T11226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.938321][T11226] ____sys_sendmsg+0x563/0x5b0 [ 262.938405][T11226] ___sys_sendmsg+0x195/0x1e0 [ 262.938450][T11226] __x64_sys_sendmsg+0xd4/0x160 [ 262.938487][T11226] x64_sys_call+0x194c/0x3020 [ 262.938558][T11226] do_syscall_64+0x12c/0x370 [ 262.938580][T11226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.938633][T11226] RIP: 0033:0x7fc352f7c819 [ 262.938648][T11226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.938664][T11226] RSP: 002b:00007fc3519d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.938685][T11226] RAX: ffffffffffffffda RBX: 00007fc3531f5fa0 RCX: 00007fc352f7c819 [ 262.938783][T11226] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.938796][T11226] RBP: 00007fc3519d7090 R08: 0000000000000000 R09: 0000000000000000 [ 262.938808][T11226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.938821][T11226] R13: 00007fc3531f6038 R14: 00007fc3531f5fa0 R15: 00007ffdb696ba08 [ 262.938840][T11226] [ 262.939017][ T8150] bridge0: port 1(veth0_to_bridge) entered disabled state [ 263.221686][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'. [ 263.377683][T11244] loop2: detected capacity change from 0 to 256 [ 263.431038][T11242] ================================================================== [ 263.439139][T11242] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 263.446522][T11242] [ 263.448837][T11242] write to 0xffffc900020c3e18 of 8 bytes by task 11233 on cpu 1: [ 263.456543][T11242] shmem_fallocate+0x724/0x920 [ 263.461311][T11242] vfs_fallocate+0x3b6/0x450 [ 263.465887][T11242] __x64_sys_fallocate+0x7a/0xd0 [ 263.470809][T11242] x64_sys_call+0x298e/0x3020 [ 263.475472][T11242] do_syscall_64+0x12c/0x370 [ 263.480046][T11242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.485931][T11242] [ 263.488236][T11242] read to 0xffffc900020c3e18 of 8 bytes by task 11242 on cpu 0: [ 263.495847][T11242] shmem_writeout+0x2c1/0x920 [ 263.500512][T11242] shrink_folio_list+0x1f1f/0x2820 [ 263.505628][T11242] evict_folios+0x2a60/0x35c0 [ 263.510285][T11242] try_to_shrink_lruvec+0x81b/0xbf0 [ 263.515467][T11242] shrink_lruvec+0x255/0x1c60 [ 263.520143][T11242] shrink_node+0x67a/0x2130 [ 263.524638][T11242] do_try_to_free_pages+0x408/0xc80 [ 263.529825][T11242] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 263.535723][T11242] try_charge_memcg+0x37e/0xa10 [ 263.540564][T11242] obj_cgroup_charge_pages+0x23/0xc0 [ 263.545841][T11242] __memcg_kmem_charge_page+0x9e/0x170 [ 263.551290][T11242] __alloc_frozen_pages_noprof+0x18a/0x360 [ 263.557084][T11242] alloc_pages_mpol+0xb3/0x260 [ 263.561834][T11242] alloc_pages_noprof+0x8f/0x140 [ 263.566756][T11242] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 263.572754][T11242] __kvmalloc_node_noprof+0x3d4/0x650 [ 263.578137][T11242] futex_hash_allocate+0x190/0x9d0 [ 263.583284][T11242] futex_hash_prctl+0xd8/0xf0 [ 263.587952][T11242] __se_sys_prctl+0xa3d/0x13f0 [ 263.592704][T11242] __x64_sys_prctl+0x67/0x80 [ 263.597293][T11242] x64_sys_call+0x2533/0x3020 [ 263.601955][T11242] do_syscall_64+0x12c/0x370 [ 263.606538][T11242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.612611][T11242] [ 263.614922][T11242] value changed: 0x0000000000000e51 -> 0x0000000000000e52 [ 263.622007][T11242] [ 263.624310][T11242] Reported by Kernel Concurrency Sanitizer on: [ 263.630444][T11242] CPU: 0 UID: 0 PID: 11242 Comm: syz.3.2061 Tainted: G W syzkaller #0 PREEMPT(full) [ 263.641371][T11242] Tainted: [W]=WARN [ 263.645152][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.655188][T11242] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 263.684941][ T28] audit: type=1400 audit(1775212623.999:2447): avc: denied { write } for pid=3298 comm="syz-executor" path="pipe:[2643]" dev="pipefs" ino=2643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 263.719160][ T8150] bond4 (unregistering): (slave ip6gretap2): Releasing active interface [ 263.748746][ T28] audit: type=1400 audit(1775212624.049:2448): avc: denied { recv } for pid=11243 comm="syz.2.2064" saddr=10.128.0.163 src=37248 daddr=10.128.0.21 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 263.932697][T11150] udevd[11150]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 263.949784][T11149] udevd[11149]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 263.950048][T11155] udevd[11155]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 263.991182][T11248] udevd[11248]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 264.059396][T11251] udevd[11251]: inotify_add_watch(7, /dev/loop4p10, 10) failed: No such file or directory [ 264.069685][T11252] udevd[11252]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory [ 264.080838][T11250] udevd[11250]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 264.089981][T11150] udevd[11150]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory [ 264.091658][T11149] udevd[11149]: inotify_add_watch(7, /dev/loop4p14, 10) failed: No such file or directory [ 264.111101][T11251] udevd[11251]: inotify_add_watch(7, /dev/loop4p17, 10) failed: No such file or directory [ 264.446971][ T8150] team0: Port device bond0 removed [ 264.481905][ T8150] bond0 (unregistering): Released all slaves [ 264.500459][ T8150] bond1 (unregistering): Released all slaves [ 264.527475][ T8150] bond2 (unregistering): Released all slaves [ 264.546377][ T8150] bond3 (unregistering): Released all slaves [ 264.569625][ T8150] bond4 (unregistering): Released all slaves [ 264.578018][ T8150] bond5 (unregistering): Released all slaves [ 264.637438][T11193] bond0: (slave syz_tun): Releasing backup interface [ 264.695578][ T8150] tipc: Left network mode [ 264.700688][ T8150] IPVS: stopping backup sync thread 3693 ... [ 264.763569][ T8150] hsr_slave_0: left promiscuous mode [ 264.770078][ T8150] hsr_slave_1: left promiscuous mode [ 264.792406][ T8150] pim6reg (unregistering): left allmulticast mode [ 265.124700][ T8150] IPVS: stop unused estimator thread 0... [ 265.181024][ T8150] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.229986][ T8150] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.259617][ T8150] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.319862][ T8150] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.392683][ T8150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.428166][ T8150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.486678][ T8150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.534011][ T8150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.658202][ T8150] erspan0: left allmulticast mode [ 265.663463][ T8150] erspan0: left promiscuous mode [ 265.668786][ T8150] bridge0: port 3(erspan0) entered disabled state [ 265.679443][ T8150] bridge_slave_1: left allmulticast mode [ 265.685108][ T8150] bridge_slave_1: left promiscuous mode [ 265.691081][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.699171][ T8150] bridge_slave_0: left promiscuous mode [ 265.704842][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.716123][ T8150] batman_adv: batadv0: Interface deactivated: gretap1 [ 265.745857][ T8150] gretap0 (unregistering): left promiscuous mode [ 265.753892][ T8150] batman_adv: batadv0: Removing interface: gretap1 [ 265.763059][ T8150] dvmrp6 (unregistering): left allmulticast mode [ 265.920076][ T8150] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 265.928210][ T8150] bridge3 (unregistering): left allmulticast mode [ 266.159832][ T8150] bond0 (unregistering): left promiscuous mode [ 266.166132][ T8150] bond_slave_0: left promiscuous mode [ 266.171601][ T8150] bond_slave_1: left promiscuous mode [ 266.179634][ T8150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.189040][ T8150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.198043][ T8150] bond0 (unregistering): Released all slaves [ 266.205646][ T8150] bond1 (unregistering): Released all slaves [ 266.214651][ T8150] bond2 (unregistering): Released all slaves [ 266.380088][ T8150] bond0 (unregistering): Released all slaves [ 266.517101][ T8150] hsr_slave_0: left promiscuous mode [ 266.523476][ T8150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.533459][ T8150] hsr_slave_0: left promiscuous mode [ 266.539074][ T8150] hsr_slave_1: left promiscuous mode [ 266.545399][ T8150] veth1_macvtap: left promiscuous mode [ 266.550902][ T8150] veth0_macvtap: left promiscuous mode [ 266.556540][ T8150] veth1_vlan: left promiscuous mode [ 266.561911][ T8150] veth0_vlan: left promiscuous mode [ 266.602148][ T8150] team0 (unregistering): Port device team_slave_1 removed [ 266.611504][ T8150] team0 (unregistering): Port device team_slave_0 removed [ 267.006846][ T8150] IPVS: stop unused estimator thread 0...