last executing test programs: 19.705583539s ago: executing program 1 (id=1026): syz_emit_ethernet(0x92, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0) 19.68263096s ago: executing program 1 (id=1027): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket(0x26, 0x2, 0x3) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r12 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) 19.273528258s ago: executing program 1 (id=1031): socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000600)={0x800006da, 0x6, 0xfffffef9, 0x75e, 0x7, "0400009100000400000000000a000000008b23"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782da02b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a001f4004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfff9, 0x40, 0x0, 0x0, 0xfffffffe, 0x5c0, 0x0, 0x1, 0x824f, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x11e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") listxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000900"], 0x184}}, 0x0) r5 = semget$private(0x0, 0x4000000009, 0x88) semop(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x15249cda8521b178}, {0x2, 0xfffe, 0x1000}], 0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x4}, 0x18) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x1) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xbf, 0x9}, 0x11, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x3e8}}, 0x48}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 18.060582171s ago: executing program 1 (id=1039): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@abort}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46942, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) pwrite64(r0, &(0x7f0000000000)='l', 0x1, 0x404042ffd) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 17.893623388s ago: executing program 1 (id=1044): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000120a010200000000000000000200fffe0900020073797a310000000008000440000000000900010073797a30000000000800034000000008"], 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x0) 15.980555702s ago: executing program 1 (id=1065): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1=0xe0000020}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB], 0x30}}], 0x1, 0x4000804) 15.980232262s ago: executing program 32 (id=1065): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1=0xe0000020}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB], 0x30}}], 0x1, 0x4000804) 7.728145192s ago: executing program 2 (id=1117): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_delete(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) writev(r2, &(0x7f0000001000)=[{&(0x7f0000000880)="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", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)="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", 0x2be}], 0x3) sendfile(r2, r1, 0x0, 0x7fffeff9) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x20000101}], 0x1000000000000044, 0x0) 7.520000752s ago: executing program 2 (id=1121): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x18) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r1}, 0x18) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6bf}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b0400000000000000000200000050000480280001800a00010071756f74610000001800028008000240000000000c000140000000000000086724000180090001006d6574610000000014000280080002400000001a08000140000000060900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x80000000000725) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0a00000004000000040000004c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000c80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x6000, 0x10, 0x0) 7.483648973s ago: executing program 2 (id=1124): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) write$tun(r2, &(0x7f0000000040)=ANY=[], 0xfdef) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000"], 0x48) 6.595031132s ago: executing program 3 (id=1131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xff03, 0x60, &(0x7f0000006d80)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x110, 0x0, 0x110, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @remote}}}, {{@arp={@rand_addr, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'macvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @remote, @multicast1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a62fc17084a5529259b49fd11336d17a70955372bc8ea881043d3504e2a3"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000c80)={[{@grpquota}, {@nogrpid}, {@quota}, {@test_dummy_encryption}, {@usrquota}, {@nouid32}, {@journal_checksum}, {@commit={'commit', 0x3d, 0xfe}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@nombcache}, {@orlov}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(0x0, 0xee01, 0xffffffffffffffff) chown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x203, 0x8401) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r5 = dup(r4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r5, &(0x7f0000000b40)="bc7ecad29ae13921733ae91ee5b7c85348da8b4b2fc63e9f1bbb3cf863ea2bf04eb523a213fde0e197e49f68322db1724b2cbeef7e99e509ced112df01c70fd69936eb7c72fa58126450535cae56b69b9643d7b4e3eb86e48716886cddec679c93b718094ab8b1f2f5f31ad0b8059577f65a8acd15248a44969632ddfe5821cd665b61b07af2ceda5b2707d569e327fb3989bfd74b2ae897e9723ec14a600d699959d00df6c6b2aef3bd", &(0x7f0000000c00)=""/100}, 0x20) ioctl$GIO_UNISCRNMAP(r5, 0x43403d0e, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = memfd_create(0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) tkill(0x0, 0x0) 6.330665223s ago: executing program 3 (id=1133): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000300)=""/279, 0x117, 0x0, 0x0, 0x0) 6.329681994s ago: executing program 3 (id=1134): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x6ef2, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000b00)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl0\x00', r9, 0x20, 0x700, 0xfffffffa, 0x8, {{0x1a, 0x4, 0x3, 0x9, 0x68, 0x68, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x43}, {[@lsrr={0x83, 0xb, 0xdc, [@loopback, @multicast1]}, @lsrr={0x83, 0x1b, 0xa3, [@remote, @broadcast, @rand_addr=0x64010101, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x3d}]}, @ssrr={0x89, 0x2b, 0x7d, [@multicast2, @multicast2, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xf}]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400100001000130400000000fbdbdf25e0000002000000000000000000000000ac1414aa000000ed0000000000000000000000004e2400000a00002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414100000000000000000000000000000001032000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a00010100000000000000004f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000040000000f27cf400"], 0x140}}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060088"], 0x24}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0/file0\x00', 0x1, &(0x7f0000000080)={[{@nobh}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@norecovery}]}, 0x2, 0x484, &(0x7f0000001500)="$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") 6.288421956s ago: executing program 3 (id=1135): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@abort}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46942, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, 0x0) pwrite64(r0, &(0x7f0000000000)='l', 0x1, 0x404042ffd) (fail_nth: 3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 6.107847203s ago: executing program 3 (id=1138): socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000600)={0x800006da, 0x6, 0xfffffef9, 0x75e, 0x7, "0400009100000400000000000a000000008b23"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782da02b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a001f4004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfff9, 0x40, 0x0, 0x0, 0xfffffffe, 0x5c0, 0x0, 0x1, 0x824f, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file3\x00', 0x11e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESOCT=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") listxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000900"], 0x184}}, 0x0) r5 = semget$private(0x0, 0x4000000009, 0x88) semop(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x15249cda8521b178}, {0x2, 0xfffe, 0x1000}], 0x2) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x4}, 0x18) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x1) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xbf, 0x9}, 0x11, 0x8}) r9 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x3e8}}, 0x48}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 6.084296974s ago: executing program 5 (id=1139): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(r0, &(0x7f00000004c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x5, 0x5, 0x171, 0x9}}, 0x118) 5.976395009s ago: executing program 5 (id=1140): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xeffffffffffffffd}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="5adb0100fa"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_usb_connect(0x3, 0x51b, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 4.213684656s ago: executing program 0 (id=1152): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="d81f96bed9556700"/23, 0x17}], 0x15, 0x2009c00, 0x2, 0x0) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000080001000a081000418e0fff0004fcff", 0x58}], 0x1) 4.192232587s ago: executing program 0 (id=1153): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x8c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) fsmount(r4, 0x0, 0x0) 3.308017526s ago: executing program 0 (id=1157): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000004c0), 0x0, 0x2}, 0x20) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x5c, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0xfffffffe}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004005}, 0x8820) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) 2.931249412s ago: executing program 5 (id=1160): syz_emit_ethernet(0xd6, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x1, 0x12, "8c9300"/16}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x8, "ccf0294e2a3b"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0) 2.909014423s ago: executing program 5 (id=1161): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000d, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2000, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x120, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) getdents(r1, 0x0, 0x54) 2.456092763s ago: executing program 3 (id=1162): r0 = socket$netlink(0x10, 0x3, 0x8000000004) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000080001000a081000418e0fff0004fcff", 0x58}], 0x1) 2.450846093s ago: executing program 33 (id=1162): r0 = socket$netlink(0x10, 0x3, 0x8000000004) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000080001000a081000418e0fff0004fcff", 0x58}], 0x1) 2.335997598s ago: executing program 0 (id=1164): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x34}}, 0x44084) io_setup(0x2, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000280)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1, r1, 0x0, 0x0, 0x200}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_clone3(&(0x7f0000000340)={0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0xf}, &(0x7f0000000140)=""/88, 0x58, &(0x7f00000001c0)=""/31, &(0x7f0000000240)=[0x0, 0x0, 0xffffffffffffffff], 0x3, {r4}}, 0x58) getitimer(0x0, &(0x7f0000000000)) fsync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0552060000c9000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0d02020000110000a908a1570542e34a88e3900fe580e5757b1c55820fca753872587bfea02f692f9f2200000000"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) 2.222116473s ago: executing program 4 (id=1165): r0 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000006d80)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x110, 0x0, 0x110, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @remote}}}, {{@arp={@rand_addr, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'macvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @remote, @multicast1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "a62fc17084a5529259b49fd11336d17a70955372bc8ea881043d3504e2a3"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000c80)={[{@grpquota}, {@nogrpid}, {@quota}, {@test_dummy_encryption}, {@usrquota}, {@nouid32}, {@journal_checksum}, {@commit={'commit', 0x3d, 0xfe}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@nombcache}, {@orlov}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(0x0, 0xee01, 0xffffffffffffffff) chown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x203, 0x8401) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x9, [@volatile={0xf, 0x0, 0x0, 0x9, 0x5}, @restrict={0x8, 0x0, 0x0, 0xb, 0x2}, @union={0xd, 0x1, 0x0, 0x5, 0x0, 0x2, [{0xf, 0x2, 0x2}]}, @enum={0x3, 0x8, 0x0, 0x6, 0x4, [{0x9, 0xd48}, {0x5}, {0x2, 0x7ff}, {0xb, 0x98}, {0x5, 0x2}, {0x4, 0x6}, {0x3, 0x80000001}, {0xe, 0x5}]}]}, {0x0, [0x5f, 0x61, 0x2e, 0x0, 0x61, 0x0, 0x5f]}}, &(0x7f0000000500)=""/3, 0x9d, 0x3, 0x0, 0x5, 0x10000}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRES64=r2], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r7, 0x0, r8}, 0x60) stat(0x0, 0x0) 2.201184264s ago: executing program 2 (id=1166): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000101030000000000000000000a00000306001240000200004000018006000340000300002c0001"], 0x5c}}, 0x4000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = dup(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000), 0x0, 0x0, 0x2) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5889, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r0], 0x4, 0x27c, &(0x7f0000000a40)="$eJzs3M9OE1EUx/EfFAVBaBVFwRhPNCa6mUB9goZAYmyiQWr8k5gMYapNh5Z0GkyNEXZufQ7i0p2J8QV4BePCHRuXLIxjmBZoS4m6sIP2+9nMIZdfc2/OnclddLr98O1KMR84ebeq/j7TgLShHSmlfiVU19e49kf1STXb0M3x7JfL9x89vpPJZucWzOYzi7fSZjZ25eOLV++ufqqOPHg/9mFQW6mn29/SX7cmtia3fyw+LwRWCKxUrpprS+Vy1V3yPVsuBEXH7N71z27gWaEUeJWW8bxfXl2tmVtaHh1erXhBYG6pZkWvZtWyVSs1c5+5hZI5jmOjw8Kv5DYXFtxM3LPA31WpZNxZSVOHRnKbsUwIAADE6nie/32P8383cP7vBbvn/yeN+7cV538AAAAAAAAAAAAAAAAAAAAAAP4FO2GYDMMwuXc9IUVv+ISNv09JGpY0Ium0pFFJY5KSklKSzkg6K2lc0jlJ5yVNSLog6aKkyabPinutOOyo/ifof09o73+C+7+n8PzvbU0v7g5JK2/Wcmu5+rU+nsmrIF+eppXU96iXDfV6/nZ2btoiKV1aWW/k19dyidb8jJK7G6ZTfqaet9b8YLTv9vNpJXc3WKd8umN+SDeuHeQHG+sty9dytCcP8q9nzGbvZtvyU9H//e8c29exf45z1Hg9/xv7I5zu2J8BTQ3Eu3ZIQe1l0fV9r0JB0Vbs/e7DcZkPRTeLmB9M6IqDpsc9EwAAAAAAAAAAAAAAAADAn+jG1wnjXiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO1+BgAA//8kq1ti") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000daf000/0x1000)=nil, 0x1000) munlockall() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = eventfd2(0x3000, 0x0) read$eventfd(r7, &(0x7f0000000040), 0x8) mq_notify(r5, &(0x7f0000000540)={0x0, 0x5, 0x0, @thr={&(0x7f0000000480)="9bc74e148e336ed4da3f201626971269292232f9c2dfa06a168f8c9d13bdbcfd7fc0101dd8b7e70c90c82d88aae8169f8a7f4bc885b2097fbcc8256dff68c8c5c4fbd1bb5f4d07875be872e692c178dd9b885975063558411ed5a47a7cb6c9f481c8ae6b7d1be748c3eb930b33a95f443baca754470410dad167acc2218e1d0eb073e2f7b6d804ba74664886c2213e8d68df3b115361c02fd4531f3f8fb2cf68a29b8803aa52ef5cf10c429900271baeef57bf77aa21207fa961a1a0", &(0x7f0000000400)="1a74a7eb17e77a5130cb27e879871cf0687fc4253a27c8933a3d07d62cccd73fc5e8acedabb29fb22bef1ec45dd150c46b2c3f5614b3148d77e3c6e8"}}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00') fsopen(&(0x7f0000000040)='btrfs\x00', 0x1) 1.935216216s ago: executing program 5 (id=1167): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x8c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) fsmount(r4, 0x0, 0x0) 1.424009888s ago: executing program 2 (id=1168): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@oldalloc}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(0x0, 0x3000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3f, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES8=0x0], 0x1, 0x252, &(0x7f00000007c0)="$eJzs3TFrE2EYB/DHNm1DFzuLw4GLU9FOrkEqiAEhkkEnA9UlFeGypJ3uY/gZ/Eh+jE7dTryLSVsPF03f5O73g3AP+SfwvEveDM979/Hxl+nZ19nn8se36Pez6EUUZRlxFDuxG7UHi+tOVe/HTUUAANtmNJoMUvfAeuX5YLIXEQd/JOPvSRoCAAAAAAAAAADgnzXN/8e1+X8AaDPz/+2X54PJ4eL/223m/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB0rsvyYfmXV+r+AID/z/4PAN1j/weA7rH/A0D3vHv/4c1gODwdZVk/4qqYj+fj+lrnr14PT59llaPVt67m8/HuMn9e59ntfC8OF/lJY74fT5/U+a/s5dvhnfwgzta/fAAAAAAAAAAAAAAAAAAAANgIx9lS4/n+4+oDJw15Xd24P8Cd8/u9eNS7t2UAAAAAAAAAAAAAAAAAAADAVptdXE4n5+ef8lkvIqpi+Y5iO4t4sRFt3Evx+xYTF5fTiA3opz1F4h8mAAAAAAAAAAAAAAAAAADooNWh39SdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA6q+f/r6+IiKKspV4uAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GI/AwAA//+6z5XB") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x8}, 0x18) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [0x0, 0x0, 0xfc], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc020) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) write$selinux_validatetrans(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:\x00bject_r:chkpwd_exec_t:s0 system_u:object_r:devicekit_var_lib_t:s0 00000000000000000083 /usr/sbin/cups-browsed\x00'], 0x78) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, &(0x7f0000000200)={0x800, 0x30, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 1.423065908s ago: executing program 4 (id=1169): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100008fa2301c7b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/hibernate_compression_threads', 0x0, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000004000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000000000bf090000000000005509010000000000950000000000000018120000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000ffe000/0x2000)=nil, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x5}, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x40}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={0x28, r3, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x28}}, 0x40044) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059", @ANYRES32=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x0, 0x0, 0x0) readv(r4, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c1, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xdfffffff, 0x3, 0x1cbe, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r10, 0x540a, 0x0) 1.417226469s ago: executing program 0 (id=1170): socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000600)={0x800006da, 0x6, 0xfffffef9, 0x75e, 0x7, "0400009100000400000000000a000000008b23"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782da02b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a001f4004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfff9, 0x40, 0x0, 0x0, 0xfffffffe, 0x5c0, 0x0, 0x1, 0x824f, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x11e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRESOCT=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") listxattr(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b8008000900"], 0x184}}, 0x0) r5 = semget$private(0x0, 0x4000000009, 0x88) semop(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x15249cda8521b178}, {0x2, 0xfffe, 0x1000}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x4}, 0x18) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000180)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xbf, 0x9}, 0x11, 0x8}) r8 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x3e8}}, 0x48}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 969.979238ms ago: executing program 2 (id=1171): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xeffffffffffffffd}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="5adb0100fa"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x2}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_usb_connect(0x3, 0x51b, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 597.726334ms ago: executing program 4 (id=1172): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000020018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x130, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x1, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x11866633d381fd75]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130, 0xffffff7f}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 486.945209ms ago: executing program 0 (id=1173): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000004c0), 0x0, 0x2}, 0x20) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x5c, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0xfffffffe}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004005}, 0x8820) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) 368.397684ms ago: executing program 4 (id=1174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x8}]}}]}, 0x4c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x4, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000340)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) socket$inet(0x2, 0x3, 0x8d) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000780)=[{&(0x7f0000000180)="80fd0fe874bf", 0x6}], 0x1, 0x0, 0x9) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f00000004c0), r10, 0x2}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000040416ae69a763be7c0b5a123c7357912a874130f9795aec6aa556c93a016660aed440954ca13d3b23798c728a197d6616bbdd88d20b4e05c22a43a6a38ff8a13dd6c0b02990d0c0c86927fa9478148f5b250fc3c893a22d5d8daf08f5a04b371000000"], 0x50) r11 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r11, 0x0) syz_pidfd_open(r11, 0x0) 81.396367ms ago: executing program 5 (id=1175): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000d, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2000, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x120, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r4, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) getdents(r1, 0x0, 0x54) 57.366548ms ago: executing program 4 (id=1176): syz_emit_ethernet(0xd6, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x26, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xe, "9606053d0006ff00800000b6"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x4c, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x1, 0x12, "8c9300"/16}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x8, "ccf0294e2a3b"}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}, @lsrr={0x83, 0x7, 0x62, [@rand_addr=0x64010100]}]}}, "a815a23d"}}}}}, 0x0) 0s ago: executing program 4 (id=1177): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c00ff7f00000000000000000c0000000000000803000000090000000000ec0b0400000000f1"], 0x0, 0x35, 0x0, 0x1000001, 0x6}, 0x28) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB='map=acorn,check=strict,block=0x0000000000000800,norock,showassoc,iocharset=iso8859-6,dmode=0x0000000\x00\x00\x00\x00\x00\x00\x00\x009,nocompress,norock,unhide,map=normal,uid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=0x0000000000007fff,map=off,hide,\x00'], 0x0, 0x3fc, &(0x7f0000000280)="$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") chdir(&(0x7f0000000280)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x4, 0x100) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000140)=@usbdevfs_disconnect={0x5}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) kernel console output (not intermixed with test programs): p4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.946650][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.950270][ T5683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 87.998812][ T5686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 88.030913][ T5692] syz.4.776: attempt to access beyond end of device [ 88.030913][ T5692] loop4: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 88.058500][ T5692] syz.4.776: attempt to access beyond end of device [ 88.058500][ T5692] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 88.123220][ T5699] netlink: 224 bytes leftover after parsing attributes in process `syz.0.778'. [ 88.165350][ T5692] netlink: 72 bytes leftover after parsing attributes in process `syz.4.776'. [ 88.178912][ T5696] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.195722][ T5696] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 770 with error 28 [ 88.208262][ T5696] EXT4-fs (loop2): This should not happen!! Data will be lost [ 88.208262][ T5696] [ 88.218172][ T5696] EXT4-fs (loop2): Total free blocks count 0 [ 88.224912][ T5696] EXT4-fs (loop2): Free/Dirty block details [ 88.230933][ T5696] EXT4-fs (loop2): free_blocks=2415919104 [ 88.236820][ T5696] EXT4-fs (loop2): dirty_blocks=784 [ 88.242052][ T5696] EXT4-fs (loop2): Block reservation details [ 88.248111][ T5696] EXT4-fs (loop2): i_reserved_data_blocks=49 [ 88.261187][ T5699] EXT4-fs: Ignoring removed i_version option [ 88.267371][ T5699] EXT4-fs: Ignoring removed bh option [ 88.286225][ T5708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.297269][ T5699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.338260][ T5708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.353809][ T5708] netlink: 256 bytes leftover after parsing attributes in process `syz.3.779'. [ 88.362945][ T5708] netlink: 72 bytes leftover after parsing attributes in process `syz.3.779'. [ 88.549078][ T5714] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.559235][ T5721] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.559266][ T5721] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 88.559287][ T5721] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.783: Corrupt directory, running e2fsck is recommended [ 88.578996][ T5721] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 88.609144][ T5721] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.783: corrupted in-inode xattr: invalid ea_ino [ 88.609898][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.623755][ T5721] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.783: couldn't read orphan inode 15 (err -117) [ 88.646376][ T5721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.760816][ T5714] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.820776][ T274] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 88.842271][ T5731] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.843302][ T5730] bond3: entered promiscuous mode [ 88.853887][ T5731] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 88.869726][ T5731] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.783: Corrupt directory, running e2fsck is recommended [ 88.891947][ T5731] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.783: path /144/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 88.981023][ T5714] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.385333][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.400921][ T5714] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.476614][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.550863][ T5751] hub 9-0:1.0: USB hub found [ 89.560546][ T5751] hub 9-0:1.0: 8 ports detected [ 89.618477][ T5745] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.741290][ T5761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.757392][ T5761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.787616][ T5758] random: crng reseeded on system resumption [ 89.794162][ T5745] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.827736][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.833312][ T5769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.846287][ T5769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.865351][ T5772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.878832][ T5745] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.907331][ T5772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.973166][ T5779] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.984767][ T5779] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 89.994978][ T5779] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.800: Corrupt directory, running e2fsck is recommended [ 90.022942][ T5745] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.037016][ T5779] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 90.045721][ T5779] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.800: corrupted in-inode xattr: invalid ea_ino [ 90.060316][ T5779] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.800: couldn't read orphan inode 15 (err -117) [ 90.074623][ T5779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.085064][ T5782] syz.1.801: attempt to access beyond end of device [ 90.085064][ T5782] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 90.104435][ T5782] syz.1.801: attempt to access beyond end of device [ 90.104435][ T5782] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 90.117849][ T5782] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 90.129771][ T5782] syz.1.801: attempt to access beyond end of device [ 90.129771][ T5782] loop1: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 90.143209][ T5782] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 90.151897][ T5782] syz.1.801: attempt to access beyond end of device [ 90.151897][ T5782] loop1: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 90.166058][ T5784] bond2: entered promiscuous mode [ 90.194624][ T5784] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.206245][ T5784] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 90.216397][ T5784] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.800: Corrupt directory, running e2fsck is recommended [ 90.229371][ T5784] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.800: path /166/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 90.516954][ T5787] set_capacity_and_notify: 11 callbacks suppressed [ 90.516971][ T5787] loop1: detected capacity change from 0 to 32768 [ 90.639849][ T5790] loop1: detected capacity change from 0 to 256 [ 90.783440][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.828838][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.977150][ T5809] program syz.0.811 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.003574][ T5811] loop0: detected capacity change from 0 to 512 [ 91.010475][ T5811] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.021892][ T5811] EXT4-fs (loop0): 1 truncate cleaned up [ 91.028488][ T5811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.059871][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.123617][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 91.123634][ T29] audit: type=1400 audit(91.102:8517): avc: denied { create } for pid=5813 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 91.126103][ T5814] __nla_validate_parse: 3 callbacks suppressed [ 91.126121][ T5814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.813'. [ 91.130095][ T29] audit: type=1400 audit(91.102:8518): avc: denied { write } for pid=5813 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 91.185226][ T5814] bond3 (unregistering): Released all slaves [ 91.247226][ T5814] netlink: 28 bytes leftover after parsing attributes in process `syz.0.813'. [ 91.256600][ T29] audit: type=1400 audit(91.232:8519): avc: denied { bind } for pid=5813 comm="syz.0.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.291083][ T5818] loop0: detected capacity change from 0 to 256 [ 91.345836][ T29] audit: type=1400 audit(91.322:8520): avc: denied { associate } for pid=5819 comm="syz.0.815" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.370568][ T29] audit: type=1400 audit(91.352:8521): avc: denied { setopt } for pid=5819 comm="syz.0.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.461491][ T29] audit: type=1400 audit(91.432:8522): avc: denied { rename } for pid=5821 comm="syz.0.816" name="file1" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.491763][ T29] audit: type=1400 audit(91.462:8523): avc: denied { unlink } for pid=3324 comm="syz-executor" name="file7" dev="tmpfs" ino=959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.517900][ T29] audit: type=1326 audit(91.492:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c1aaf749 code=0x7ffc0000 [ 91.526344][ T5825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5825 comm=syz.0.817 [ 91.541384][ T29] audit: type=1326 audit(91.492:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c1aaf749 code=0x7ffc0000 [ 91.576111][ T29] audit: type=1326 audit(91.502:8526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5824 comm="syz.0.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f66c1aaf749 code=0x7ffc0000 [ 91.579448][ T5825] program syz.0.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.626539][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 91.680274][ T5838] netlink: 'syz.3.823': attribute type 4 has an invalid length. [ 91.696643][ T5838] vlan2: entered allmulticast mode [ 91.765456][ T5844] loop0: detected capacity change from 0 to 256 [ 91.925874][ T5854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.829'. [ 91.935641][ T5854] netlink: 28 bytes leftover after parsing attributes in process `syz.1.829'. [ 91.983005][ T5856] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 92.001387][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.008906][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.032092][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.039732][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.060758][ T5850] loop3: detected capacity change from 0 to 1024 [ 92.170362][ T5863] loop1: detected capacity change from 0 to 128 [ 92.203921][ T5850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 92.243724][ T5850] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.823: bg 0: block 112: padding at end of block bitmap is not set [ 92.381975][ T5870] loop9: detected capacity change from 0 to 7 [ 92.389203][ T5870] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.403997][ T5870] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.411935][ T5870] loop9: unable to read partition table [ 92.425062][ T5870] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 92.425062][ T5870] ) failed (rc=-5) [ 92.486325][ T5870] random: crng reseeded on system resumption [ 92.554837][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 92.608157][ T5874] netlink: 'syz.3.833': attribute type 21 has an invalid length. [ 92.616107][ T5876] loop1: detected capacity change from 0 to 512 [ 92.846063][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.868972][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.886183][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.964144][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.987338][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.057979][ T5884] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.128331][ T5901] random: crng reseeded on system resumption [ 93.163935][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.176353][ T5905] FAULT_INJECTION: forcing a failure. [ 93.176353][ T5905] name failslab, interval 1, probability 0, space 0, times 0 [ 93.189066][ T5905] CPU: 1 UID: 0 PID: 5905 Comm: syz.1.844 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.189143][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.189156][ T5905] Call Trace: [ 93.189163][ T5905] [ 93.189171][ T5905] __dump_stack+0x1d/0x30 [ 93.189201][ T5905] dump_stack_lvl+0xe8/0x140 [ 93.189232][ T5905] dump_stack+0x15/0x1b [ 93.189256][ T5905] should_fail_ex+0x265/0x280 [ 93.189305][ T5905] should_failslab+0x8c/0xb0 [ 93.189327][ T5905] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 93.189356][ T5905] ? __alloc_skb+0x324/0x4d0 [ 93.189385][ T5905] __alloc_skb+0x324/0x4d0 [ 93.189407][ T5905] ? __alloc_skb+0x24d/0x4d0 [ 93.189496][ T5905] netlink_alloc_large_skb+0xbf/0xf0 [ 93.189600][ T5905] netlink_sendmsg+0x3cf/0x6b0 [ 93.189641][ T5905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.189767][ T5905] __sock_sendmsg+0x145/0x180 [ 93.189833][ T5905] ____sys_sendmsg+0x31e/0x4a0 [ 93.189936][ T5905] ___sys_sendmsg+0x17b/0x1d0 [ 93.189988][ T5905] __x64_sys_sendmsg+0xd4/0x160 [ 93.190028][ T5905] x64_sys_call+0x17ba/0x3000 [ 93.190065][ T5905] do_syscall_64+0xd8/0x2a0 [ 93.190205][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.190226][ T5905] RIP: 0033:0x7ff5eb24f749 [ 93.190244][ T5905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.190261][ T5905] RSP: 002b:00007ff5e9cb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.190285][ T5905] RAX: ffffffffffffffda RBX: 00007ff5eb4a5fa0 RCX: 00007ff5eb24f749 [ 93.190319][ T5905] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 93.190334][ T5905] RBP: 00007ff5e9cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.190349][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.190365][ T5905] R13: 00007ff5eb4a6038 R14: 00007ff5eb4a5fa0 R15: 00007ffd9fa76438 [ 93.190445][ T5905] [ 93.466987][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.488988][ T5884] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.495563][ T5907] 9pnet_fd: Insufficient options for proto=fd [ 93.531272][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.613029][ T5924] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.648689][ T5884] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.702439][ T5924] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.708516][ T5930] loop0: detected capacity change from 0 to 512 [ 93.719358][ T5930] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.741692][ T5930] EXT4-fs (loop0): 1 truncate cleaned up [ 93.758482][ T5930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.772652][ T5884] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.787618][ T5934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.815550][ T5934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.826019][ T5930] infiniband syz!: set down [ 93.832784][ T5930] infiniband syz!: added team_slave_0 [ 93.840262][ T5924] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.854432][ T5939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.853'. [ 93.873021][ T5934] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 93.894108][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.908785][ T5924] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.962726][ T5930] RDS/IB: syz!: added [ 93.967179][ T5930] smc: adding ib device syz! with port count 1 [ 93.979947][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.989641][ T5930] smc: ib device syz! port 1 has no pnetid [ 93.997857][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.016468][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.028672][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.061644][ T5942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.855'. [ 94.090218][ T5944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.109021][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.144661][ T5944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.196267][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.204659][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.213164][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.307166][ T5944] netlink: 256 bytes leftover after parsing attributes in process `syz.3.856'. [ 94.316354][ T5944] netlink: 72 bytes leftover after parsing attributes in process `syz.3.856'. [ 94.377432][ T5956] pim6reg: entered allmulticast mode [ 94.383691][ T5956] pim6reg: left allmulticast mode [ 94.464454][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.512008][ T5964] FAULT_INJECTION: forcing a failure. [ 94.512008][ T5964] name failslab, interval 1, probability 0, space 0, times 0 [ 94.524752][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: syz.2.861 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.524786][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.524881][ T5964] Call Trace: [ 94.524889][ T5964] [ 94.524900][ T5964] __dump_stack+0x1d/0x30 [ 94.524932][ T5964] dump_stack_lvl+0xe8/0x140 [ 94.524963][ T5964] dump_stack+0x15/0x1b [ 94.524986][ T5964] should_fail_ex+0x265/0x280 [ 94.525093][ T5964] should_failslab+0x8c/0xb0 [ 94.525123][ T5964] __kmalloc_cache_noprof+0x65/0x4c0 [ 94.525196][ T5964] ? io_manage_buffers_legacy+0x305/0x6c0 [ 94.525233][ T5964] io_manage_buffers_legacy+0x305/0x6c0 [ 94.525267][ T5964] ? __memcg_slab_post_alloc_hook+0x44b/0x530 [ 94.525337][ T5964] __io_issue_sqe+0xfe/0x2e0 [ 94.525367][ T5964] ? io_assign_file+0x56/0x200 [ 94.525407][ T5964] io_issue_sqe+0x56/0xa80 [ 94.525500][ T5964] ? io_provide_buffers_prep+0x1c7/0x1f0 [ 94.525527][ T5964] io_submit_sqes+0x78b/0x11b0 [ 94.525574][ T5964] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 94.525619][ T5964] ? 0xffffffff81000000 [ 94.525705][ T5964] ? __rcu_read_unlock+0x4f/0x70 [ 94.525735][ T5964] ? proc_fail_nth_write+0x13b/0x160 [ 94.525774][ T5964] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 94.525809][ T5964] ? vfs_write+0x7e8/0x960 [ 94.525833][ T5964] ? __rcu_read_unlock+0x4f/0x70 [ 94.525889][ T5964] ? __fget_files+0x184/0x1c0 [ 94.525921][ T5964] ? mutex_unlock+0x4f/0x90 [ 94.526011][ T5964] ? fput+0x8f/0xc0 [ 94.526047][ T5964] __x64_sys_io_uring_enter+0x78/0x90 [ 94.526135][ T5964] x64_sys_call+0x27e4/0x3000 [ 94.526162][ T5964] do_syscall_64+0xd8/0x2a0 [ 94.526201][ T5964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.526225][ T5964] RIP: 0033:0x7f5c570cf749 [ 94.526302][ T5964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.526351][ T5964] RSP: 002b:00007f5c55b37038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 94.526376][ T5964] RAX: ffffffffffffffda RBX: 00007f5c57325fa0 RCX: 00007f5c570cf749 [ 94.526393][ T5964] RDX: 0000000000000000 RSI: 00000000000047fc RDI: 0000000000000007 [ 94.526461][ T5964] RBP: 00007f5c55b37090 R08: 0000000000000000 R09: 0000000000000045 [ 94.526478][ T5964] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 94.526517][ T5964] R13: 00007f5c57326038 R14: 00007f5c57325fa0 R15: 00007ffcb6aa4ae8 [ 94.526543][ T5964] [ 94.851365][ T5971] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 94.859145][ T5971] netlink: 'syz.4.863': attribute type 1 has an invalid length. [ 94.866842][ T5971] netlink: 'syz.4.863': attribute type 2 has an invalid length. [ 94.874653][ T5971] netlink: 'syz.4.863': attribute type 2 has an invalid length. [ 95.097685][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.452674][ T5984] FAULT_INJECTION: forcing a failure. [ 95.452674][ T5984] name failslab, interval 1, probability 0, space 0, times 0 [ 95.465510][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.4.867 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.465545][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.465561][ T5984] Call Trace: [ 95.465568][ T5984] [ 95.465598][ T5984] __dump_stack+0x1d/0x30 [ 95.465624][ T5984] dump_stack_lvl+0xe8/0x140 [ 95.465658][ T5984] dump_stack+0x15/0x1b [ 95.465683][ T5984] should_fail_ex+0x265/0x280 [ 95.465712][ T5984] should_failslab+0x8c/0xb0 [ 95.465739][ T5984] __kmalloc_cache_noprof+0x65/0x4c0 [ 95.465772][ T5984] ? rtnl_newlink+0x5c/0x1360 [ 95.465851][ T5984] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.465894][ T5984] rtnl_newlink+0x5c/0x1360 [ 95.465931][ T5984] ? css_rstat_updated+0xb7/0x240 [ 95.465958][ T5984] ? css_rstat_updated+0xb7/0x240 [ 95.466039][ T5984] ? refill_stock+0x32f/0x390 [ 95.466059][ T5984] ? x86_call_depth_emit_accounting+0x128/0x2e0 [ 95.466097][ T5984] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 95.466166][ T5984] ? __memcg_slab_free_hook+0x135/0x230 [ 95.466256][ T5984] ? __rcu_read_unlock+0x4f/0x70 [ 95.466341][ T5984] ? avc_has_perm_noaudit+0xab/0x130 [ 95.466385][ T5984] ? cred_has_capability+0x210/0x280 [ 95.466528][ T5984] ? selinux_capable+0x31/0x40 [ 95.466557][ T5984] ? security_capable+0x83/0x90 [ 95.466627][ T5984] ? ns_capable+0x7d/0xb0 [ 95.466716][ T5984] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.466782][ T5984] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 95.466876][ T5984] netlink_rcv_skb+0x123/0x220 [ 95.466982][ T5984] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.467107][ T5984] rtnetlink_rcv+0x1c/0x30 [ 95.467148][ T5984] netlink_unicast+0x5c0/0x690 [ 95.467269][ T5984] netlink_sendmsg+0x58b/0x6b0 [ 95.467309][ T5984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.467351][ T5984] __sock_sendmsg+0x145/0x180 [ 95.467464][ T5984] ____sys_sendmsg+0x31e/0x4a0 [ 95.467501][ T5984] ___sys_sendmsg+0x17b/0x1d0 [ 95.467552][ T5984] __x64_sys_sendmsg+0xd4/0x160 [ 95.467591][ T5984] x64_sys_call+0x17ba/0x3000 [ 95.467652][ T5984] do_syscall_64+0xd8/0x2a0 [ 95.467714][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.467742][ T5984] RIP: 0033:0x7f90811cf749 [ 95.467760][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.467866][ T5984] RSP: 002b:00007f907fc37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.467939][ T5984] RAX: ffffffffffffffda RBX: 00007f9081425fa0 RCX: 00007f90811cf749 [ 95.467954][ T5984] RDX: 0000000024000800 RSI: 0000200000000280 RDI: 0000000000000005 [ 95.467967][ T5984] RBP: 00007f907fc37090 R08: 0000000000000000 R09: 0000000000000000 [ 95.467983][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.468018][ T5984] R13: 00007f9081426038 R14: 00007f9081425fa0 R15: 00007fff70797728 [ 95.468044][ T5984] [ 95.812956][ T5988] FAULT_INJECTION: forcing a failure. [ 95.812956][ T5988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.826140][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: syz.0.869 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.826183][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.826198][ T5988] Call Trace: [ 95.826204][ T5988] [ 95.826212][ T5988] __dump_stack+0x1d/0x30 [ 95.826244][ T5988] dump_stack_lvl+0xe8/0x140 [ 95.826396][ T5988] dump_stack+0x15/0x1b [ 95.826419][ T5988] should_fail_ex+0x265/0x280 [ 95.826449][ T5988] should_fail+0xb/0x20 [ 95.826474][ T5988] should_fail_usercopy+0x1a/0x20 [ 95.826506][ T5988] _copy_to_user+0x20/0xa0 [ 95.826608][ T5988] simple_read_from_buffer+0xb5/0x130 [ 95.826632][ T5988] proc_fail_nth_read+0x10e/0x150 [ 95.826669][ T5988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.826749][ T5988] vfs_read+0x1a8/0x770 [ 95.826772][ T5988] ? __rcu_read_unlock+0x4f/0x70 [ 95.826795][ T5988] ? __fget_files+0x184/0x1c0 [ 95.826868][ T5988] ? mutex_lock+0x58/0x90 [ 95.826960][ T5988] ksys_read+0xda/0x1a0 [ 95.826986][ T5988] __x64_sys_read+0x40/0x50 [ 95.827006][ T5988] x64_sys_call+0x2889/0x3000 [ 95.827046][ T5988] do_syscall_64+0xd8/0x2a0 [ 95.827086][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.827113][ T5988] RIP: 0033:0x7f66c1aae15c [ 95.827130][ T5988] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 95.827154][ T5988] RSP: 002b:00007f66c0517030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.827217][ T5988] RAX: ffffffffffffffda RBX: 00007f66c1d05fa0 RCX: 00007f66c1aae15c [ 95.827234][ T5988] RDX: 000000000000000f RSI: 00007f66c05170a0 RDI: 0000000000000005 [ 95.827250][ T5988] RBP: 00007f66c0517090 R08: 0000000000000000 R09: 0000000000000000 [ 95.827266][ T5988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.827287][ T5988] R13: 00007f66c1d06038 R14: 00007f66c1d05fa0 R15: 00007ffe8ab65e08 [ 95.827311][ T5988] [ 95.838273][ T5982] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.142252][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 96.142276][ T29] audit: type=1326 audit(96.112:8646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.0.872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66c1aaf749 code=0x0 [ 96.207043][ T5982] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.244430][ T6002] __nla_validate_parse: 1 callbacks suppressed [ 96.244451][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.872'. [ 96.333532][ T6002] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 96.374016][ T6007] random: crng reseeded on system resumption [ 96.416940][ T5982] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.625192][ T5982] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.156021][ T5997] syz.2.868 (5997) used greatest stack depth: 7032 bytes left [ 97.181021][ T6016] set_capacity_and_notify: 2 callbacks suppressed [ 97.181038][ T6016] loop0: detected capacity change from 0 to 512 [ 97.203486][ T6016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.283427][ T6016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.298649][ T6016] netlink: 256 bytes leftover after parsing attributes in process `syz.0.876'. [ 97.307677][ T6016] netlink: 72 bytes leftover after parsing attributes in process `syz.0.876'. [ 97.387125][ T29] audit: type=1107 audit(97.362:8647): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 98.088495][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.117165][ T29] audit: type=1400 audit(98.092:8648): avc: denied { write } for pid=6032 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 98.328347][ T29] audit: type=1400 audit(98.302:8649): avc: denied { setopt } for pid=6040 comm="syz.4.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 98.430785][ T29] audit: type=1326 audit(98.402:8650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 98.453483][ T29] audit: type=1326 audit(98.402:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 98.476386][ T29] audit: type=1326 audit(98.402:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 98.499135][ T29] audit: type=1326 audit(98.402:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 98.521807][ T29] audit: type=1326 audit(98.402:8654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 98.544998][ T29] audit: type=1326 audit(98.402:8655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6037 comm="syz.2.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 98.673722][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 98.682650][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 98.760689][ T6050] loop2: detected capacity change from 0 to 1024 [ 98.771844][ T6050] EXT4-fs: Ignoring removed bh option [ 98.777297][ T6050] EXT4-fs: Ignoring removed nobh option [ 98.783015][ T6050] EXT4-fs: Ignoring removed bh option [ 98.794483][ T6050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.827356][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.856011][ T6058] random: crng reseeded on system resumption [ 98.894101][ T6062] loop1: detected capacity change from 0 to 256 [ 98.934477][ T6056] loop0: detected capacity change from 0 to 512 [ 98.970679][ T6056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.972575][ T6064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 99.001030][ T6064] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 99.002188][ T6056] EXT4-fs (loop0): 1 truncate cleaned up [ 99.034843][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.108240][ T6079] SELinux: unknown common  [ 99.121320][ T6079] SELinux: failed to load policy [ 99.168663][ T274] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 99.282847][ T911] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 99.349500][ T6094] FAULT_INJECTION: forcing a failure. [ 99.349500][ T6094] name failslab, interval 1, probability 0, space 0, times 0 [ 99.362216][ T6094] CPU: 0 UID: 0 PID: 6094 Comm: syz.1.899 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.362380][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.362396][ T6094] Call Trace: [ 99.362404][ T6094] [ 99.362413][ T6094] __dump_stack+0x1d/0x30 [ 99.362445][ T6094] dump_stack_lvl+0xe8/0x140 [ 99.362475][ T6094] dump_stack+0x15/0x1b [ 99.362496][ T6094] should_fail_ex+0x265/0x280 [ 99.362598][ T6094] should_failslab+0x8c/0xb0 [ 99.362628][ T6094] kmem_cache_alloc_noprof+0x69/0x4b0 [ 99.362673][ T6094] ? skb_clone+0x151/0x1f0 [ 99.362712][ T6094] skb_clone+0x151/0x1f0 [ 99.362763][ T6094] ip_mc_output+0x10d/0x340 [ 99.362794][ T6094] ? __pfx_dst_output+0x10/0x10 [ 99.362824][ T6094] ip_send_skb+0x151/0x160 [ 99.362858][ T6094] udp_send_skb+0x6e3/0xa40 [ 99.362909][ T6094] udp_sendmsg+0x48d/0x13c0 [ 99.362935][ T6094] ? avc_has_perm_noaudit+0xab/0x130 [ 99.362980][ T6094] ? __rcu_read_unlock+0x4f/0x70 [ 99.363050][ T6094] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 99.363142][ T6094] ? avc_has_perm+0xf7/0x180 [ 99.363175][ T6094] ? __pfx_udp_sendmsg+0x10/0x10 [ 99.363206][ T6094] inet_sendmsg+0xac/0xd0 [ 99.363235][ T6094] __sock_sendmsg+0x102/0x180 [ 99.363358][ T6094] ____sys_sendmsg+0x31e/0x4a0 [ 99.363398][ T6094] ___sys_sendmsg+0x17b/0x1d0 [ 99.363453][ T6094] __x64_sys_sendmsg+0xd4/0x160 [ 99.363501][ T6094] x64_sys_call+0x17ba/0x3000 [ 99.363529][ T6094] do_syscall_64+0xd8/0x2a0 [ 99.363607][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.363635][ T6094] RIP: 0033:0x7ff5eb24f749 [ 99.363655][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.363680][ T6094] RSP: 002b:00007ff5e9c96038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.363700][ T6094] RAX: ffffffffffffffda RBX: 00007ff5eb4a6090 RCX: 00007ff5eb24f749 [ 99.363716][ T6094] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 99.363733][ T6094] RBP: 00007ff5e9c96090 R08: 0000000000000000 R09: 0000000000000000 [ 99.363799][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.363815][ T6094] R13: 00007ff5eb4a6128 R14: 00007ff5eb4a6090 R15: 00007ffd9fa76438 [ 99.363905][ T6094] [ 99.616535][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.636628][ T6098] random: crng reseeded on system resumption [ 99.657468][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.685086][ T6096] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.723504][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.761956][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.771659][ T6096] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.810385][ T6106] netlink: 100 bytes leftover after parsing attributes in process `syz.0.905'. [ 99.864310][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.872969][ T6111] netlink: 'syz.0.907': attribute type 12 has an invalid length. [ 99.882246][ T6096] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.903168][ T6112] netlink: 56 bytes leftover after parsing attributes in process `syz.4.906'. [ 99.912189][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 99.964621][ T6096] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.993464][ T6117] __vm_enough_memory: pid: 6117, comm: syz.0.908, bytes: 21200236277760 not enough memory for the allocation [ 100.052515][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.070246][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.082035][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.099495][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.154901][ T6122] loop3: detected capacity change from 0 to 1024 [ 100.195086][ T6128] loop2: detected capacity change from 0 to 512 [ 100.201708][ T6128] ext2: Bad value for 'max_batch_time' [ 100.803292][ T6158] loop0: detected capacity change from 0 to 256 [ 100.841542][ T6158] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.858736][ T6157] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.945441][ T6157] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.005081][ T6157] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.028404][ T6163] loop1: detected capacity change from 0 to 512 [ 101.035866][ T6163] ext2: Bad value for 'max_batch_time' [ 101.054572][ T6163] FAULT_INJECTION: forcing a failure. [ 101.054572][ T6163] name failslab, interval 1, probability 0, space 0, times 0 [ 101.067332][ T6163] CPU: 0 UID: 0 PID: 6163 Comm: syz.1.922 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.067410][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.067423][ T6163] Call Trace: [ 101.067430][ T6163] [ 101.067438][ T6163] __dump_stack+0x1d/0x30 [ 101.067490][ T6163] dump_stack_lvl+0xe8/0x140 [ 101.067520][ T6163] dump_stack+0x15/0x1b [ 101.067546][ T6163] should_fail_ex+0x265/0x280 [ 101.067639][ T6163] should_failslab+0x8c/0xb0 [ 101.067669][ T6163] kmem_cache_alloc_bulk_noprof+0x63/0x3f0 [ 101.067706][ T6163] ? bpf_test_run_xdp_live+0x64a/0x11d0 [ 101.067790][ T6163] bpf_test_run_xdp_live+0xdd3/0x11d0 [ 101.067820][ T6163] ? __pfx_autoremove_wake_function+0x10/0x10 [ 101.067858][ T6163] ? bpf_test_run_xdp_live+0x354/0x11d0 [ 101.067967][ T6163] bpf_prog_test_run_xdp+0x525/0x970 [ 101.068050][ T6163] ? _kstrtol+0x81/0x90 [ 101.068068][ T6163] ? __rcu_read_unlock+0x4f/0x70 [ 101.068132][ T6163] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.068226][ T6163] bpf_prog_test_run+0x22a/0x390 [ 101.068255][ T6163] __sys_bpf+0x4c0/0x7c0 [ 101.068324][ T6163] __x64_sys_bpf+0x41/0x50 [ 101.068345][ T6163] x64_sys_call+0x28e1/0x3000 [ 101.068370][ T6163] do_syscall_64+0xd8/0x2a0 [ 101.068449][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.068505][ T6163] RIP: 0033:0x7ff5eb24f749 [ 101.068522][ T6163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.068540][ T6163] RSP: 002b:00007ff5e9cb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.068564][ T6163] RAX: ffffffffffffffda RBX: 00007ff5eb4a5fa0 RCX: 00007ff5eb24f749 [ 101.068614][ T6163] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 101.068637][ T6163] RBP: 00007ff5e9cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.068661][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.068740][ T6163] R13: 00007ff5eb4a6038 R14: 00007ff5eb4a5fa0 R15: 00007ffd9fa76438 [ 101.068764][ T6163] [ 101.286043][ T6157] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.286317][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 101.286336][ T29] audit: type=1326 audit(101.262:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 101.324775][ T29] audit: type=1326 audit(101.272:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 101.347641][ T29] audit: type=1326 audit(101.282:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 crond[3108]: tim[ 101.371102][ T29] audit: type=1326 audit(101.302:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 e disparity of -[ 101.394785][ T29] audit: type=1326 audit(101.322:8970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 29420600 minutes[ 101.418673][ T29] audit: type=1326 audit(101.332:8971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 detected[ 101.560490][ T6169] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.580661][ T6171] loop1: detected capacity change from 0 to 128 [ 101.652369][ T29] audit: type=1326 audit(101.492:8972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.3.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 101.675130][ T29] audit: type=1326 audit(101.562:8973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 101.698037][ T29] audit: type=1326 audit(101.562:8974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 101.756578][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.766267][ T6169] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.780995][ T6171] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 101.790132][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.807139][ T269] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.810607][ T29] audit: type=1326 audit(101.782:8975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.3.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 101.839576][ T269] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.853512][ T6169] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.918606][ T6181] loop3: detected capacity change from 0 to 256 [ 102.001464][ T6169] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.058617][ T6192] smc: net device hsr0 applied user defined pnetid SYZ2 [ 102.072313][ T6192] smc: net device hsr0 erased user defined pnetid SYZ2 [ 102.073694][ T6194] random: crng reseeded on system resumption [ 102.079876][ T6192] FAULT_INJECTION: forcing a failure. [ 102.079876][ T6192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.098307][ T6192] CPU: 0 UID: 0 PID: 6192 Comm: syz.0.932 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.098338][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.098354][ T6192] Call Trace: [ 102.098364][ T6192] [ 102.098374][ T6192] __dump_stack+0x1d/0x30 [ 102.098405][ T6192] dump_stack_lvl+0xe8/0x140 [ 102.098472][ T6192] dump_stack+0x15/0x1b [ 102.098497][ T6192] should_fail_ex+0x265/0x280 [ 102.098526][ T6192] should_fail+0xb/0x20 [ 102.098598][ T6192] should_fail_usercopy+0x1a/0x20 [ 102.098622][ T6192] _copy_from_user+0x1c/0xb0 [ 102.098650][ T6192] kstrtouint_from_user+0x69/0xf0 [ 102.098672][ T6192] ? 0xffffffff81000000 [ 102.098688][ T6192] ? selinux_file_permission+0x1e2/0x320 [ 102.098787][ T6192] proc_fail_nth_write+0x50/0x160 [ 102.098937][ T6192] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 102.098972][ T6192] vfs_write+0x269/0x960 [ 102.098995][ T6192] ? vfs_read+0x4e6/0x770 [ 102.099017][ T6192] ? __rcu_read_unlock+0x4f/0x70 [ 102.099043][ T6192] ? __fget_files+0x184/0x1c0 [ 102.099181][ T6192] ? mutex_lock+0x58/0x90 [ 102.099216][ T6192] ksys_write+0xda/0x1a0 [ 102.099240][ T6192] __x64_sys_write+0x40/0x50 [ 102.099260][ T6192] x64_sys_call+0x2847/0x3000 [ 102.099284][ T6192] do_syscall_64+0xd8/0x2a0 [ 102.099358][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.099386][ T6192] RIP: 0033:0x7f66c1aae1ff [ 102.099406][ T6192] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 102.099479][ T6192] RSP: 002b:00007f66c0517030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 102.099500][ T6192] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f66c1aae1ff [ 102.099516][ T6192] RDX: 0000000000000001 RSI: 00007f66c05170a0 RDI: 0000000000000007 [ 102.099532][ T6192] RBP: 00007f66c0517090 R08: 0000000000000000 R09: 0000000000000000 [ 102.099548][ T6192] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 102.099563][ T6192] R13: 00007f66c1d06038 R14: 00007f66c1d05fa0 R15: 00007ffe8ab65e08 [ 102.099643][ T6192] [ 102.327868][ T6199] set_capacity_and_notify: 1 callbacks suppressed [ 102.327887][ T6199] loop0: detected capacity change from 0 to 128 [ 102.343790][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.934'. [ 102.352996][ T6199] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 102.354544][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 102.393727][ T6201] team0: Port device team_slave_1 removed [ 102.404394][ T6207] loop0: detected capacity change from 0 to 128 [ 102.425928][ T6210] loop1: detected capacity change from 0 to 128 [ 102.447420][ T6209] loop4: detected capacity change from 0 to 2048 [ 102.458171][ T6209] EXT4-fs: Ignoring removed bh option [ 102.468553][ T6212] netlink: 'syz.0.939': attribute type 21 has an invalid length. [ 102.476763][ T6212] netlink: 156 bytes leftover after parsing attributes in process `syz.0.939'. [ 102.568269][ T6221] random: crng reseeded on system resumption [ 102.599556][ T6226] loop0: detected capacity change from 0 to 256 [ 102.647572][ T6232] wireguard0: entered promiscuous mode [ 102.653334][ T6232] wireguard0: entered allmulticast mode [ 102.679132][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.944'. [ 102.691406][ T6238] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 102.704513][ T6240] loop1: detected capacity change from 0 to 1024 [ 102.711250][ T6240] EXT4-fs: inline encryption not supported [ 102.737057][ T6223] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.942: Allocating blocks 497-513 which overlap fs metadata [ 102.751470][ T6223] EXT4-fs (loop1): Remounting filesystem read-only [ 103.640053][ T6273] loop4: detected capacity change from 0 to 256 [ 103.711444][ T6266] loop1: detected capacity change from 0 to 128 [ 103.726913][ T6275] random: crng reseeded on system resumption [ 103.769972][ T6279] loop1: detected capacity change from 0 to 512 [ 103.819680][ T6279] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 103.831237][ T6279] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 103.841564][ T6279] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.957: Corrupt directory, running e2fsck is recommended [ 103.872057][ T6279] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 103.880910][ T6279] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.957: corrupted in-inode xattr: invalid ea_ino [ 103.894627][ T6279] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.957: couldn't read orphan inode 15 (err -117) [ 103.914717][ T6287] netlink: 44 bytes leftover after parsing attributes in process `syz.0.959'. [ 103.982338][ T6290] bond4: entered promiscuous mode [ 104.010850][ T6290] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 104.022554][ T6290] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 104.032800][ T6290] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.957: Corrupt directory, running e2fsck is recommended [ 104.045926][ T6290] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.957: path /180/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 104.525309][ T6298] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.581234][ T6298] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.639766][ T3317] EXT4-fs unmount: 9 callbacks suppressed [ 104.639788][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.659866][ T6298] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.795961][ T6298] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.983815][ T2654] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.071232][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.129857][ T6314] random: crng reseeded on system resumption [ 105.182717][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.207745][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.277666][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.305715][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.327322][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.352663][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.385427][ T6317] loop4: detected capacity change from 0 to 128 [ 105.535728][ T6334] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.547341][ T6334] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 105.557995][ T6334] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.973: Corrupt directory, running e2fsck is recommended [ 105.624504][ T6334] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 105.670964][ T6334] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.973: corrupted in-inode xattr: invalid ea_ino [ 105.743014][ T6334] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.973: couldn't read orphan inode 15 (err -117) [ 105.770416][ T6334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.857119][ T6345] bond2: entered promiscuous mode [ 105.944808][ T6345] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 105.956444][ T6345] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 105.966644][ T6345] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.973: Corrupt directory, running e2fsck is recommended [ 105.982963][ T6345] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.973: path /210/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 106.003928][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 106.013110][ T3532] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.120675][ T6353] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.197699][ T6358] random: crng reseeded on system resumption [ 106.231606][ T6353] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.289694][ T6364] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.299751][ T6364] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 106.313384][ T6364] netlink: 176 bytes leftover after parsing attributes in process `syz.2.984'. [ 106.323275][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 106.323293][ T29] audit: type=1326 audit(106.302:9254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 106.352892][ T29] audit: type=1326 audit(106.302:9255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 106.375726][ T29] audit: type=1326 audit(106.302:9256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 106.381522][ T6353] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.398512][ T29] audit: type=1326 audit(106.302:9257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 106.398551][ T29] audit: type=1326 audit(106.302:9258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 106.398585][ T29] audit: type=1326 audit(106.302:9259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 106.398617][ T29] audit: type=1326 audit(106.302:9260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 106.584650][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.610121][ T29] audit: type=1326 audit(106.582:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 106.634789][ T29] audit: type=1326 audit(106.612:9262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6363 comm="syz.2.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c570cf749 code=0x7ffc0000 [ 106.663758][ T6369] team0: Device gtp0 is of different type [ 106.679659][ T29] audit: type=1326 audit(106.652:9263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6372 comm="syz.4.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 106.720658][ T6364] EXT4-fs (loop2): failed to initialize system zone (-117) [ 106.732528][ T6353] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.736864][ T6364] EXT4-fs (loop2): mount failed [ 106.877221][ T6385] netlink: 65536 bytes leftover after parsing attributes in process `syz.4.993'. [ 106.917899][ T6387] random: crng reseeded on system resumption [ 106.956252][ T6389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.996966][ T6389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.044380][ T6389] netlink: 256 bytes leftover after parsing attributes in process `syz.3.994'. [ 107.053516][ T6389] netlink: 72 bytes leftover after parsing attributes in process `syz.3.994'. [ 107.154989][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.163672][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.171937][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.192680][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.270995][ T6405] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 107.282790][ T6405] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 107.292950][ T6405] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.997: Corrupt directory, running e2fsck is recommended [ 107.332212][ T6405] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 107.361177][ T6405] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.997: corrupted in-inode xattr: invalid ea_ino [ 107.391111][ T6405] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.997: couldn't read orphan inode 15 (err -117) [ 107.425276][ T6405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.574247][ T6410] bond5: entered promiscuous mode [ 107.624914][ T6410] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 107.636558][ T6410] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 107.646675][ T6410] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.997: Corrupt directory, running e2fsck is recommended [ 107.683578][ T6410] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.997: path /184/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 107.876299][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.921210][ T6425] set_capacity_and_notify: 8 callbacks suppressed [ 107.921232][ T6425] loop3: detected capacity change from 0 to 512 [ 107.958082][ T6431] loop3: detected capacity change from 0 to 256 [ 108.033678][ T6436] random: crng reseeded on system resumption [ 108.088018][ T6443] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6443 comm=syz.3.1009 [ 108.135243][ T6443] program syz.3.1009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.160053][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'. [ 108.190151][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.215210][ T6447] loop2: detected capacity change from 0 to 512 [ 108.237470][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'. [ 108.252757][ T6447] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 108.343211][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'. [ 108.377301][ T6460] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 108.401100][ T6447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.423894][ T6447] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1011'. [ 108.433055][ T6447] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1011'. [ 108.446212][ T6464] netlink: 'syz.3.1016': attribute type 7 has an invalid length. [ 108.454031][ T6464] netlink: 'syz.3.1016': attribute type 8 has an invalid length. [ 108.562112][ T6468] loop0: detected capacity change from 0 to 256 [ 108.722075][ T6471] FAULT_INJECTION: forcing a failure. [ 108.722075][ T6471] name failslab, interval 1, probability 0, space 0, times 0 [ 108.734842][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.3.1018 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.734927][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 108.734944][ T6471] Call Trace: [ 108.734953][ T6471] [ 108.734964][ T6471] __dump_stack+0x1d/0x30 [ 108.734993][ T6471] dump_stack_lvl+0xe8/0x140 [ 108.735017][ T6471] dump_stack+0x15/0x1b [ 108.735149][ T6471] should_fail_ex+0x265/0x280 [ 108.735181][ T6471] should_failslab+0x8c/0xb0 [ 108.735211][ T6471] __kmalloc_noprof+0xb9/0x5a0 [ 108.735242][ T6471] ? security_perf_event_alloc+0x48/0x120 [ 108.735352][ T6471] security_perf_event_alloc+0x48/0x120 [ 108.735384][ T6471] perf_event_alloc+0x171d/0x18d0 [ 108.735419][ T6471] ? __fget_files+0x184/0x1c0 [ 108.735491][ T6471] __se_sys_perf_event_open+0x603/0x1210 [ 108.735563][ T6471] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 108.735614][ T6471] __x64_sys_perf_event_open+0x67/0x80 [ 108.735649][ T6471] x64_sys_call+0x78c/0x3000 [ 108.735772][ T6471] do_syscall_64+0xd8/0x2a0 [ 108.735826][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.735925][ T6471] RIP: 0033:0x7f1ed933f749 [ 108.735944][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.735963][ T6471] RSP: 002b:00007f1ed7da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 108.735985][ T6471] RAX: ffffffffffffffda RBX: 00007f1ed9595fa0 RCX: 00007f1ed933f749 [ 108.735997][ T6471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 108.736009][ T6471] RBP: 00007f1ed7da7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.736021][ T6471] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 108.736045][ T6471] R13: 00007f1ed9596038 R14: 00007f1ed9595fa0 R15: 00007ffee4645f18 [ 108.736069][ T6471] [ 108.957616][ T6476] random: crng reseeded on system resumption [ 109.156747][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.237750][ T6494] loop2: detected capacity change from 0 to 512 [ 109.258243][ T6494] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 109.269908][ T6494] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 109.280056][ T6494] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1024: Corrupt directory, running e2fsck is recommended [ 109.421603][ T6494] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 109.429974][ T6494] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1024: corrupted in-inode xattr: invalid ea_ino [ 109.455272][ T6498] loop0: detected capacity change from 0 to 512 [ 109.464823][ T6494] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1024: couldn't read orphan inode 15 (err -117) [ 109.488806][ T6490] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1027'. [ 109.513440][ T6506] loop0: detected capacity change from 0 to 256 [ 109.547030][ T6494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.649802][ T6509] loop1: detected capacity change from 0 to 512 [ 109.655245][ T6511] random: crng reseeded on system resumption [ 109.662249][ T6509] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.681711][ T6509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.696030][ T6509] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1031'. [ 109.705120][ T6509] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1031'. [ 109.727821][ T6516] bond4: entered promiscuous mode [ 109.748748][ T6519] loop0: detected capacity change from 0 to 512 [ 109.756179][ T6519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.767021][ T6516] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 109.778621][ T6516] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 109.788737][ T6516] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1024: Corrupt directory, running e2fsck is recommended [ 109.793978][ T6519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.802009][ T6516] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.1024: path /214/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 109.822942][ T6519] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1034'. [ 110.641835][ T6285] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 110.678105][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.782190][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.822536][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.851508][ T6540] loop1: detected capacity change from 0 to 512 [ 110.858613][ T6540] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.878267][ T6540] EXT4-fs (loop1): 1 truncate cleaned up [ 110.888480][ T6540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.957134][ T6547] random: crng reseeded on system resumption [ 110.982098][ T3317] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 111.000783][ T3317] EXT4-fs error (device loop1): __ext4_iget:5426: inode #12: block 2: comm syz-executor: invalid block [ 111.013071][ T3317] EXT4-fs error (device loop1): __ext4_iget:5426: inode #12: block 2: comm syz-executor: invalid block [ 111.434486][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 111.434518][ T29] audit: type=1326 audit(111.412:9614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 111.480274][ T29] audit: type=1326 audit(111.442:9615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 111.503149][ T29] audit: type=1326 audit(111.442:9616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 111.526000][ T29] audit: type=1326 audit(111.442:9617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 111.548892][ T29] audit: type=1326 audit(111.442:9618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 111.571824][ T29] audit: type=1326 audit(111.442:9619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 111.594682][ T29] audit: type=1326 audit(111.442:9620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 111.617602][ T29] audit: type=1326 audit(111.442:9621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 111.640765][ T29] audit: type=1326 audit(111.442:9622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 111.663563][ T29] audit: type=1326 audit(111.442:9623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.3.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 111.737842][ T6565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.755361][ T6567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.755832][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.775478][ T6567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.946848][ T6579] FAT-fs (loop2): Directory bread(block 64) failed [ 111.953469][ T6579] FAT-fs (loop2): Directory bread(block 65) failed [ 111.960021][ T6579] FAT-fs (loop2): Directory bread(block 66) failed [ 111.966895][ T6579] FAT-fs (loop2): Directory bread(block 67) failed [ 111.973538][ T6579] FAT-fs (loop2): Directory bread(block 68) failed [ 111.980108][ T6579] FAT-fs (loop2): Directory bread(block 69) failed [ 111.986685][ T6579] FAT-fs (loop2): Directory bread(block 70) failed [ 111.993687][ T6579] FAT-fs (loop2): Directory bread(block 71) failed [ 112.000324][ T6579] FAT-fs (loop2): Directory bread(block 72) failed [ 112.006874][ T6579] FAT-fs (loop2): Directory bread(block 73) failed [ 112.046975][ T6583] random: crng reseeded on system resumption [ 112.625013][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.655258][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.834596][ T6549] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.848396][ T2654] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.923729][ T2654] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.055285][ T2654] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.153983][ T6616] random: crng reseeded on system resumption [ 113.275448][ T2654] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.403955][ T2654] bridge_slave_1: left allmulticast mode [ 113.409676][ T2654] bridge_slave_1: left promiscuous mode [ 113.415809][ T2654] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.426343][ T2654] bridge_slave_0: left allmulticast mode [ 113.432110][ T2654] bridge_slave_0: left promiscuous mode [ 113.437922][ T2654] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.490409][ T2654] team0: Port device geneve1 removed [ 113.536976][ T2654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.567878][ T2654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.587910][ T2654] bond0 (unregistering): Released all slaves [ 113.607963][ T2654] bond1 (unregistering): Released all slaves [ 113.619974][ T2654] bond2 (unregistering): Released all slaves [ 113.626265][ T6633] set_capacity_and_notify: 8 callbacks suppressed [ 113.626282][ T6633] loop0: detected capacity change from 0 to 512 [ 113.630617][ T2654] bond3 (unregistering): Released all slaves [ 113.645687][ T6633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.655673][ T2654] bond4 (unregistering): Released all slaves [ 113.664331][ T2654] bond5 (unregistering): Released all slaves [ 113.669130][ T6633] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.710139][ T6633] __nla_validate_parse: 5 callbacks suppressed [ 113.710154][ T6633] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1071'. [ 113.725670][ T6633] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1071'. [ 113.745914][ T6640] loop4: detected capacity change from 0 to 512 [ 113.753861][ T6640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.788551][ T6640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.807965][ T6608] chnl_net:caif_netlink_parms(): no params data found [ 113.820694][ T2654] hsr_slave_0: left promiscuous mode [ 113.835711][ T6640] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1073'. [ 113.845894][ T6640] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1073'. [ 113.855322][ T2654] hsr_slave_1: left promiscuous mode [ 113.865084][ T2654] veth1_macvtap: left promiscuous mode [ 113.870602][ T2654] veth0_macvtap: left promiscuous mode [ 113.870865][ T6648] loop3: detected capacity change from 0 to 512 [ 113.877169][ T2654] veth1_vlan: left promiscuous mode [ 113.887999][ T2654] veth0_vlan: left promiscuous mode [ 113.888731][ T6648] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.905127][ T6648] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 113.915357][ T6648] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1075: Corrupt directory, running e2fsck is recommended [ 113.945678][ T6648] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 113.954096][ T6648] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1075: corrupted in-inode xattr: invalid ea_ino [ 113.967759][ T6648] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1075: couldn't read orphan inode 15 (err -117) [ 113.980444][ T6648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.024241][ T2654] team0 (unregistering): Port device team_slave_1 removed [ 114.037374][ T2654] team0 (unregistering): Port device team_slave_0 removed [ 114.056446][ T6655] tmpfs: Bad value for 'mpol' [ 114.067802][ T6655] loop2: detected capacity change from 0 to 764 [ 114.084109][ T6655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1076'. [ 114.092089][ T6653] bond3: entered promiscuous mode [ 114.126577][ T6655] IPVS: Error connecting to the multicast addr [ 114.131479][ T6653] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 114.144348][ T6653] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 114.144373][ T6653] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1075: Corrupt directory, running e2fsck is recommended [ 114.145211][ T6653] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1075: path /235/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 114.163133][ T6655] rock: directory entry would overflow storage [ 114.194959][ T6655] rock: sig=0x4f50, size=4, remaining=3 [ 114.200621][ T6655] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 114.209237][ T6660] netlink: 'syz.2.1076': attribute type 29 has an invalid length. [ 114.229257][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.236448][ T6608] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.243852][ T6608] bridge_slave_0: entered allmulticast mode [ 114.250818][ T6608] bridge_slave_0: entered promiscuous mode [ 114.259347][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.262328][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.266502][ T6608] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.266686][ T6608] bridge_slave_1: entered allmulticast mode [ 114.275442][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.283044][ T6608] bridge_slave_1: entered promiscuous mode [ 114.324514][ T6608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.335296][ T6608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.361131][ T6608] team0: Port device team_slave_0 added [ 114.368432][ T6608] team0: Port device team_slave_1 added [ 114.388348][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.396138][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.422367][ T6608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.436324][ T6608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.443480][ T6608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.469414][ T6608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.499435][ T6608] hsr_slave_0: entered promiscuous mode [ 114.506373][ T6608] hsr_slave_1: entered promiscuous mode [ 114.527295][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.583598][ T6665] IPv6: Can't replace route, no match found [ 114.748319][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.898538][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.914248][ T6608] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.925641][ T6608] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.936057][ T6608] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.946302][ T6608] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.982189][ T6669] netlink: 'syz.3.1079': attribute type 27 has an invalid length. [ 114.994317][ T6608] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.001414][ T6608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.008827][ T6608] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.015895][ T6608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.033575][ T6676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.045772][ T6677] loop4: detected capacity change from 0 to 512 [ 115.053472][ T6676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.063990][ T6669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 115.113098][ T269] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.121160][ T269] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.134725][ T6677] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.150088][ T6677] EXT4-fs (loop4): mount failed [ 115.201001][ T6608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.208520][ T6677] lo speed is unknown, defaulting to 1000 [ 115.214641][ T6608] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.223109][ T6684] FAULT_INJECTION: forcing a failure. [ 115.223109][ T6684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.227575][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.236320][ T6684] CPU: 1 UID: 0 PID: 6684 Comm: syz.3.1081 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.236357][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.236378][ T6684] Call Trace: [ 115.236387][ T6684] [ 115.236397][ T6684] __dump_stack+0x1d/0x30 [ 115.236433][ T6684] dump_stack_lvl+0xe8/0x140 [ 115.236467][ T6684] dump_stack+0x15/0x1b [ 115.236521][ T6684] should_fail_ex+0x265/0x280 [ 115.236552][ T6684] should_fail+0xb/0x20 [ 115.236579][ T6684] should_fail_usercopy+0x1a/0x20 [ 115.236614][ T6684] strncpy_from_user+0x27/0x260 [ 115.236698][ T6684] __se_sys_memfd_create+0x206/0x6b0 [ 115.236749][ T6684] __x64_sys_memfd_create+0x31/0x40 [ 115.236814][ T6684] x64_sys_call+0x28cb/0x3000 [ 115.236849][ T6684] do_syscall_64+0xd8/0x2a0 [ 115.236895][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.236976][ T6684] RIP: 0033:0x7f1ed933f749 [ 115.236997][ T6684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.237052][ T6684] RSP: 002b:00007f1ed7da6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 115.237077][ T6684] RAX: ffffffffffffffda RBX: 000000000000052e RCX: 00007f1ed933f749 [ 115.237156][ T6684] RDX: 00007f1ed7da6ef0 RSI: 0000000000000000 RDI: 00007f1ed93c4960 [ 115.237173][ T6684] RBP: 0000200000000640 R08: 00007f1ed7da6bb7 R09: 00007f1ed7da6e40 [ 115.237191][ T6684] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 115.237208][ T6684] R13: 00007f1ed7da6ef0 R14: 00007f1ed7da6eb0 R15: 00002000000001c0 [ 115.237234][ T6684] [ 115.289511][ T6686] rdma_rxe: rxe_newlink: failed to add lo [ 115.291372][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.469631][ T6687] IPv6: Can't replace route, no match found [ 115.496097][ T6677] lo speed is unknown, defaulting to 1000 [ 115.527092][ T6608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.537512][ T6608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.667408][ T6608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.882079][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.889229][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.909251][ T6677] lo speed is unknown, defaulting to 1000 [ 115.948843][ T6608] veth0_vlan: entered promiscuous mode [ 115.950892][ T6677] infiniband syz1: set active [ 115.957398][ T6608] veth1_vlan: entered promiscuous mode [ 115.959165][ T6677] infiniband syz1: added lo [ 115.969281][ T23] lo speed is unknown, defaulting to 1000 [ 115.974634][ T6608] veth0_macvtap: entered promiscuous mode [ 115.977260][ T6677] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 115.981164][ T6677] infiniband syz1: Couldn't open port 1 [ 115.984588][ T6608] veth1_macvtap: entered promiscuous mode [ 116.010135][ T6677] RDS/IB: syz1: added [ 116.012701][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.021496][ T6677] smc: adding ib device syz1 with port count 1 [ 116.027373][ T6608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.027900][ T6677] smc: ib device syz1 port 1 has no pnetid [ 116.040213][ T1895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.050163][ T23] lo speed is unknown, defaulting to 1000 [ 116.051684][ T1895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.065798][ T1895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.074656][ T6677] lo speed is unknown, defaulting to 1000 [ 116.074735][ T1895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.128560][ T6677] lo speed is unknown, defaulting to 1000 [ 116.146430][ T6711] loop5: detected capacity change from 0 to 512 [ 116.169696][ T6677] lo speed is unknown, defaulting to 1000 [ 116.211506][ T6677] lo speed is unknown, defaulting to 1000 [ 116.228663][ T6717] loop5: detected capacity change from 0 to 1024 [ 116.236477][ T6717] EXT4-fs: inline encryption not supported [ 116.251837][ T6677] lo speed is unknown, defaulting to 1000 [ 116.257446][ T6717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.306664][ T6608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.441668][ T6730] loop3: detected capacity change from 0 to 512 [ 116.448034][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 116.448051][ T29] audit: type=1326 audit(116.412:9831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 116.448147][ T29] audit: type=1326 audit(116.412:9832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 116.448233][ T29] audit: type=1326 audit(116.412:9833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 116.456232][ T6730] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.487080][ T29] audit: type=1326 audit(116.432:9834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 116.555910][ T29] audit: type=1326 audit(116.462:9835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 116.578687][ T29] audit: type=1326 audit(116.462:9836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 116.600851][ T6733] lo speed is unknown, defaulting to 1000 [ 116.602540][ T29] audit: type=1326 audit(116.462:9837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 116.748436][ T6730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.783128][ T29] audit: type=1326 audit(116.482:9838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 116.806689][ T29] audit: type=1326 audit(116.482:9839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 116.829994][ T29] audit: type=1326 audit(116.482:9840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6722 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 116.870615][ T6730] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1088'. [ 116.879826][ T6730] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1088'. [ 117.182117][ T6738] loop4: detected capacity change from 0 to 512 [ 117.201803][ T6738] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.214254][ T6738] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 117.224392][ T6738] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1089: Corrupt directory, running e2fsck is recommended [ 117.257293][ T6738] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 117.273559][ T6738] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.1089: corrupted in-inode xattr: invalid ea_ino [ 117.317839][ T6738] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1089: couldn't read orphan inode 15 (err -117) [ 117.340032][ T6746] loop2: detected capacity change from 0 to 256 [ 117.343081][ T6738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.368440][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.420950][ T6749] random: crng reseeded on system resumption [ 117.430050][ T6751] bond2: entered promiscuous mode [ 117.473422][ T6751] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.485686][ T6751] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 117.495806][ T6751] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1089: Corrupt directory, running e2fsck is recommended [ 117.540690][ T6751] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.1089: path /190/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 117.619008][ T6760] FAULT_INJECTION: forcing a failure. [ 117.619008][ T6760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.632228][ T6760] CPU: 1 UID: 0 PID: 6760 Comm: syz.3.1097 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.632260][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.632276][ T6760] Call Trace: [ 117.632285][ T6760] [ 117.632298][ T6760] __dump_stack+0x1d/0x30 [ 117.632323][ T6760] dump_stack_lvl+0xe8/0x140 [ 117.632345][ T6760] dump_stack+0x15/0x1b [ 117.632373][ T6760] should_fail_ex+0x265/0x280 [ 117.632401][ T6760] should_fail+0xb/0x20 [ 117.632422][ T6760] should_fail_usercopy+0x1a/0x20 [ 117.632497][ T6760] _copy_from_iter+0xcf/0xe70 [ 117.632594][ T6760] ? __alloc_skb+0x3bb/0x4d0 [ 117.632623][ T6760] ? __alloc_skb+0x24d/0x4d0 [ 117.632654][ T6760] netlink_sendmsg+0x471/0x6b0 [ 117.632844][ T6760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.632889][ T6760] __sock_sendmsg+0x145/0x180 [ 117.632933][ T6760] ____sys_sendmsg+0x345/0x4a0 [ 117.633012][ T6760] ___sys_sendmsg+0x17b/0x1d0 [ 117.633116][ T6760] __sys_sendmmsg+0x178/0x300 [ 117.633214][ T6760] __x64_sys_sendmmsg+0x57/0x70 [ 117.633249][ T6760] x64_sys_call+0x1e28/0x3000 [ 117.633396][ T6760] do_syscall_64+0xd8/0x2a0 [ 117.633479][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.633502][ T6760] RIP: 0033:0x7f1ed933f749 [ 117.633518][ T6760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.633565][ T6760] RSP: 002b:00007f1ed7da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 117.633585][ T6760] RAX: ffffffffffffffda RBX: 00007f1ed9595fa0 RCX: 00007f1ed933f749 [ 117.633598][ T6760] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 117.633611][ T6760] RBP: 00007f1ed7da7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.633668][ T6760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.633681][ T6760] R13: 00007f1ed9596038 R14: 00007f1ed9595fa0 R15: 00007ffee4645f18 [ 117.633702][ T6760] [ 118.153680][ T6770] lo speed is unknown, defaulting to 1000 [ 118.554021][ T6775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.589151][ T6775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.655135][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.798046][ T6778] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1101'. [ 118.807175][ T6778] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1101'. [ 118.831943][ T6780] set_capacity_and_notify: 3 callbacks suppressed [ 118.831967][ T6780] loop2: detected capacity change from 0 to 512 [ 118.866355][ T6780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.915237][ T6780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.940328][ T6787] loop5: detected capacity change from 0 to 256 [ 118.948790][ T6780] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1103'. [ 118.958013][ T6780] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1103'. [ 118.988910][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.001588][ T6789] loop3: detected capacity change from 0 to 512 [ 119.010976][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.141338][ T6799] random: crng reseeded on system resumption [ 119.244986][ T6803] IPv6: Can't replace route, no match found [ 119.284808][ T6795] loop3: detected capacity change from 0 to 128 [ 119.328800][ T6805] loop5: detected capacity change from 0 to 1024 [ 119.336524][ T6805] EXT4-fs: Ignoring removed orlov option [ 119.348060][ T6805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.440630][ T6805] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1111'. [ 119.453237][ T6805] hsr_slave_0: left promiscuous mode [ 119.459391][ T6805] hsr_slave_1: left promiscuous mode [ 119.498718][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.624189][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'. [ 119.869419][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.092352][ T6813] lo speed is unknown, defaulting to 1000 [ 120.256082][ T6817] loop3: detected capacity change from 0 to 512 [ 120.273403][ T6817] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 120.285713][ T6817] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 120.295915][ T6817] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1115: Corrupt directory, running e2fsck is recommended [ 120.349077][ T6817] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 120.358407][ T6817] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.1115: corrupted in-inode xattr: invalid ea_ino [ 120.405313][ T6817] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1115: couldn't read orphan inode 15 (err -117) [ 120.421994][ T6817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.500789][ T6822] bond4: entered promiscuous mode [ 120.531600][ T6822] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 120.543224][ T6822] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 120.553450][ T6822] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1115: Corrupt directory, running e2fsck is recommended [ 120.566547][ T6822] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1115: path /247/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 121.139390][ T6829] loop2: detected capacity change from 0 to 256 [ 121.164488][ T6608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.290722][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.365553][ T6835] loop3: detected capacity change from 0 to 512 [ 121.416043][ T6839] random: crng reseeded on system resumption [ 121.454723][ T6845] loop5: detected capacity change from 0 to 512 [ 121.544036][ T6845] __quota_error: 210 callbacks suppressed [ 121.544057][ T6845] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 121.573194][ T6845] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.589465][ T6845] EXT4-fs (loop5): mount failed [ 121.597986][ T6843] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.626120][ T6855] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.636204][ T6845] loop5: detected capacity change from 0 to 1024 [ 121.643888][ T6845] EXT4-fs: Ignoring removed orlov option [ 121.649849][ T6845] ext4: Unknown parameter 'subj_type' [ 121.659766][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1125'. [ 121.721296][ T6843] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.729924][ T6863] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 121.743521][ T6863] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 121.753725][ T6863] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1129: Corrupt directory, running e2fsck is recommended [ 121.772911][ T6855] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.785475][ T6863] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 121.793726][ T6863] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1129: corrupted in-inode xattr: invalid ea_ino [ 121.807887][ T6863] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1129: couldn't read orphan inode 15 (err -117) [ 121.820433][ T6863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.844414][ T6843] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.865007][ T6855] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.895491][ T6865] bond1: entered promiscuous mode [ 121.931415][ T6865] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 121.943006][ T6865] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 121.953741][ T6865] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1129: Corrupt directory, running e2fsck is recommended [ 121.966770][ T6865] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.1129: path /19/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 121.992387][ T6843] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.043712][ T6855] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.073796][ T6868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.101248][ T6868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.118377][ T6868] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1130'. [ 122.127782][ T6868] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1130'. [ 122.140058][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.157899][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.179473][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.192055][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.208593][ T29] audit: type=1107 audit(122.182:10051): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 122.212127][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.229721][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.282916][ T2654] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.298189][ T29] audit: type=1326 audit(122.272:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 122.330011][ T6873] EXT4-fs: test_dummy_encryption option not supported [ 122.342026][ T29] audit: type=1326 audit(122.302:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 122.365180][ T29] audit: type=1326 audit(122.302:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 122.388163][ T29] audit: type=1326 audit(122.302:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 122.411089][ T29] audit: type=1326 audit(122.302:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 122.423688][ T911] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.434088][ T29] audit: type=1326 audit(122.302:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 122.465093][ T29] audit: type=1326 audit(122.302:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 122.465131][ T29] audit: type=1326 audit(122.302:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.3.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ed933f749 code=0x7ffc0000 [ 122.596678][ T6608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.610967][ T6882] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.629283][ T6882] EXT4-fs (loop3): 1 truncate cleaned up [ 122.636392][ T6882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.704280][ T6882] FAULT_INJECTION: forcing a failure. [ 122.704280][ T6882] name failslab, interval 1, probability 0, space 0, times 0 [ 122.717022][ T6882] CPU: 0 UID: 0 PID: 6882 Comm: syz.3.1135 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.717117][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.717138][ T6882] Call Trace: [ 122.717151][ T6882] [ 122.717162][ T6882] __dump_stack+0x1d/0x30 [ 122.717192][ T6882] dump_stack_lvl+0xe8/0x140 [ 122.717217][ T6882] dump_stack+0x15/0x1b [ 122.717236][ T6882] should_fail_ex+0x265/0x280 [ 122.717295][ T6882] should_failslab+0x8c/0xb0 [ 122.717323][ T6882] kmem_cache_alloc_noprof+0x69/0x4b0 [ 122.717353][ T6882] ? ext4_mb_new_blocks+0x79f/0x2080 [ 122.717401][ T6882] ext4_mb_new_blocks+0x79f/0x2080 [ 122.717476][ T6882] ? ext4_ind_map_blocks+0x838/0x14f0 [ 122.717499][ T6882] ? ext4_get_branch+0x321/0x3a0 [ 122.717529][ T6882] ext4_ind_map_blocks+0xb86/0x14f0 [ 122.717564][ T6882] ext4_map_blocks+0x5e3/0xd20 [ 122.717809][ T6882] _ext4_get_block+0x10a/0x350 [ 122.717846][ T6882] ? folio_alloc_buffers+0x2e5/0x310 [ 122.717878][ T6882] ? _raw_spin_lock+0x52/0xa0 [ 122.717905][ T6882] ext4_get_block+0x39/0x50 [ 122.717950][ T6882] ext4_block_write_begin+0x650/0xcf0 [ 122.717994][ T6882] ? __pfx_ext4_get_block+0x10/0x10 [ 122.718033][ T6882] ext4_convert_inline_data_to_extent+0x3e2/0x7d0 [ 122.718122][ T6882] ext4_try_to_write_inline_data+0x54/0x90 [ 122.718204][ T6882] ext4_write_begin+0x1a3/0xe90 [ 122.718275][ T6882] ? __ext4_mark_inode_dirty+0x2fe/0x3f0 [ 122.718406][ T6882] ? inode_to_bdi+0x47/0xa0 [ 122.718451][ T6882] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 122.718492][ T6882] generic_perform_write+0x184/0x490 [ 122.718561][ T6882] ext4_buffered_write_iter+0x1ee/0x3c0 [ 122.718597][ T6882] ext4_file_write_iter+0x387/0xf60 [ 122.718640][ T6882] ? 0xffffffff81000000 [ 122.718680][ T6882] ? avc_policy_seqno+0x15/0x30 [ 122.718709][ T6882] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 122.718749][ T6882] vfs_write+0x52a/0x960 [ 122.718773][ T6882] __x64_sys_pwrite64+0xfd/0x150 [ 122.718877][ T6882] x64_sys_call+0x9f7/0x3000 [ 122.718906][ T6882] do_syscall_64+0xd8/0x2a0 [ 122.718947][ T6882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.718971][ T6882] RIP: 0033:0x7f1ed933f749 [ 122.719036][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.719060][ T6882] RSP: 002b:00007f1ed7da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 122.719085][ T6882] RAX: ffffffffffffffda RBX: 00007f1ed9595fa0 RCX: 00007f1ed933f749 [ 122.719136][ T6882] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 122.719148][ T6882] RBP: 00007f1ed7da7090 R08: 0000000000000000 R09: 0000000000000000 [ 122.719160][ T6882] R10: 0000000404042ffd R11: 0000000000000246 R12: 0000000000000001 [ 122.719172][ T6882] R13: 00007f1ed9596038 R14: 00007f1ed9595fa0 R15: 00007ffee4645f18 [ 122.719220][ T6882] [ 122.719766][ T6884] random: crng reseeded on system resumption [ 122.766402][ T3318] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, [ 122.904331][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.905388][ T3318] inode 11: [ 122.915380][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.919507][ T3318] block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 123.043115][ T3318] EXT4-fs error (device loop3): __ext4_iget:5426: inode #12: block 2: comm syz-executor: invalid block [ 123.054745][ T3318] EXT4-fs error (device loop3): __ext4_iget:5426: inode #12: block 2: comm syz-executor: invalid block [ 123.342679][ T6898] IPv6: Can't replace route, no match found [ 123.363516][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.483036][ T6901] lo speed is unknown, defaulting to 1000 [ 123.742462][ T6908] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.925881][ T6908] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.027962][ T6908] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.126886][ T6908] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.248711][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.279965][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.313104][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.341275][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.404542][ T6916] set_capacity_and_notify: 6 callbacks suppressed [ 124.404601][ T6916] loop4: detected capacity change from 0 to 512 [ 124.533558][ T6926] loop4: detected capacity change from 0 to 128 [ 124.540342][ T6926] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.553559][ T6926] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.787842][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.812875][ T6938] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1154'. [ 125.618169][ T6946] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.728500][ T6946] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.747960][ T6951] loop4: detected capacity change from 0 to 512 [ 125.775870][ T6953] loop4: detected capacity change from 0 to 512 [ 125.784367][ T6953] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 125.796108][ T6953] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 125.806316][ T6953] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1159: Corrupt directory, running e2fsck is recommended [ 125.836876][ T6953] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 125.845541][ T6953] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.1159: corrupted in-inode xattr: invalid ea_ino [ 125.851971][ T6946] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.863044][ T6953] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1159: couldn't read orphan inode 15 (err -117) [ 125.882472][ T6953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.958110][ T6957] bond3: entered promiscuous mode [ 125.978319][ T6960] loop5: detected capacity change from 0 to 512 [ 125.986686][ T6960] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 125.998555][ T6960] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 126.009548][ T6960] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1161: Corrupt directory, running e2fsck is recommended [ 126.022053][ T6962] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.034052][ T6962] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 126.044230][ T6962] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.1159: Corrupt directory, running e2fsck is recommended [ 126.057349][ T6962] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.1159: path /204/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 126.061723][ T6960] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 126.094736][ T6960] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1161: corrupted in-inode xattr: invalid ea_ino [ 126.109063][ T6960] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1161: couldn't read orphan inode 15 (err -117) [ 126.111564][ T6946] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.131104][ T6960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.225603][ T6963] bond2: entered promiscuous mode [ 126.265693][ T6963] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.277263][ T6963] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 126.287447][ T6963] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1161: Corrupt directory, running e2fsck is recommended [ 126.301325][ T6963] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.1161: path /24/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 126.346513][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.378447][ T274] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.391428][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.469181][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.483429][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.506304][ T274] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.519595][ T274] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.545301][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.594649][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.657806][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.687734][ T6966] lo speed is unknown, defaulting to 1000 [ 126.703308][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1166'. [ 126.712233][ T6979] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1166'. [ 126.722811][ T12] bridge_slave_1: left allmulticast mode [ 126.728517][ T12] bridge_slave_1: left promiscuous mode [ 126.735008][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.748450][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 126.748465][ T29] audit: type=1326 audit(126.722:10295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 126.778298][ T12] bridge_slave_0: left promiscuous mode [ 126.784900][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.789176][ T6981] loop4: detected capacity change from 0 to 512 [ 126.804560][ T6981] EXT4-fs: test_dummy_encryption option not supported [ 126.836933][ T29] audit: type=1326 audit(126.762:10296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 126.837561][ T6979] loop2: detected capacity change from 0 to 128 [ 126.859890][ T29] audit: type=1326 audit(126.762:10297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 126.859928][ T29] audit: type=1326 audit(126.762:10298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 126.860013][ T29] audit: type=1326 audit(126.762:10300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 126.860048][ T29] audit: type=1326 audit(126.762:10301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 126.860152][ T29] audit: type=1326 audit(126.762:10302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 126.860255][ T29] audit: type=1326 audit(126.762:10299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 126.860286][ T29] audit: type=1326 audit(126.762:10303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 126.860373][ T29] audit: type=1326 audit(126.762:10304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90811cf749 code=0x7ffc0000 [ 127.056381][ T6608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.239042][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.250372][ T12] bond0 (unregistering): Released all slaves [ 127.275349][ T12] bond1 (unregistering): Released all slaves [ 127.284807][ T12] bond2 (unregistering): Released all slaves [ 127.294420][ T12] bond3 (unregistering): Released all slaves [ 127.304727][ T12] bond4 (unregistering): Released all slaves [ 127.478363][ T6995] loop2: detected capacity change from 0 to 1024 [ 127.495269][ T6997] loop0: detected capacity change from 0 to 512 [ 127.503434][ T6995] EXT4-fs: Ignoring removed oldalloc option [ 127.512389][ T6997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 127.531754][ T6995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.545732][ T6997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.554106][ T6966] chnl_net:caif_netlink_parms(): no params data found [ 127.567566][ T6997] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1170'. [ 127.577354][ T6997] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1170'. [ 127.587373][ T6995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.666128][ T12] hsr_slave_0: left promiscuous mode [ 127.672223][ T12] hsr_slave_1: left promiscuous mode [ 127.682354][ T12] veth1_macvtap: left promiscuous mode [ 127.688015][ T12] veth0_macvtap: left promiscuous mode [ 127.694068][ T12] veth1_vlan: left promiscuous mode [ 127.699537][ T12] veth0_vlan: left promiscuous mode [ 127.799296][ T12] team0 (unregistering): Port device team_slave_0 removed [ 127.909318][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.919874][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.927083][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.942725][ T6966] bridge_slave_0: entered allmulticast mode [ 127.949460][ T6966] bridge_slave_0: entered promiscuous mode [ 127.956799][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.964115][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.971613][ T6966] bridge_slave_1: entered allmulticast mode [ 127.978303][ T6966] bridge_slave_1: entered promiscuous mode [ 127.984853][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.993841][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.031619][ T6966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.054838][ T6966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.091058][ T6966] team0: Port device team_slave_0 added [ 128.101110][ T6966] team0: Port device team_slave_1 added [ 128.125858][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.133063][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.159078][ T6966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.170985][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.177987][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.204002][ T6966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.217128][ T7013] IPv6: Can't replace route, no match found [ 128.303257][ T6966] hsr_slave_0: entered promiscuous mode [ 128.339627][ T6966] hsr_slave_1: entered promiscuous mode [ 128.393770][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.683276][ T6966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 128.758604][ T6966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.781418][ T6966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.800601][ T6966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.820802][ T7028] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.839587][ T7031] loop5: detected capacity change from 0 to 512 [ 128.849504][ T7031] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 128.861138][ T7031] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 128.871345][ T7031] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1175: Corrupt directory, running e2fsck is recommended [ 128.903715][ T7031] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 128.911980][ T7031] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.1175: corrupted in-inode xattr: invalid ea_ino [ 128.925927][ T7031] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1175: couldn't read orphan inode 15 (err -117) [ 128.938800][ T7031] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.957995][ T7028] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.979897][ T6966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.992568][ T6966] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.002606][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.009748][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.025352][ T7044] bond3: entered promiscuous mode [ 129.032366][ T7028] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.048060][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.055188][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.065602][ T7044] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 129.077318][ T7044] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 129.087477][ T7044] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1175: Corrupt directory, running e2fsck is recommended [ 129.089215][ T6966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.101020][ T7044] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.1175: path /26/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 129.165883][ T7028] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.183294][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.297923][ T6966] veth0_vlan: entered promiscuous mode [ 129.306953][ T6966] veth1_vlan: entered promiscuous mode [ 129.323678][ T6966] veth0_macvtap: entered promiscuous mode [ 129.331326][ T6966] veth1_macvtap: entered promiscuous mode [ 129.343272][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.355378][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.366391][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.376251][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.385684][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.396334][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.413257][ T3888] ================================================================== [ 129.421374][ T3888] BUG: KCSAN: data-race in __mod_timer / __mod_timer [ 129.428074][ T3888] [ 129.430408][ T3888] write to 0xffff88811b384ae0 of 8 bytes by task 10 on cpu 0: [ 129.437869][ T3888] __mod_timer+0x784/0x840 [ 129.442313][ T3888] mod_timer+0x1f/0x30 [ 129.446403][ T3888] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 129.453622][ T3888] wg_packet_tx_worker+0xeb/0x330 [ 129.458662][ T3888] process_scheduled_works+0x4ce/0x9d0 [ 129.464131][ T3888] worker_thread+0x582/0x770 [ 129.468734][ T3888] kthread+0x489/0x510 [ 129.472832][ T3888] ret_from_fork+0x149/0x290 [ 129.477447][ T3888] ret_from_fork_asm+0x1a/0x30 [ 129.482226][ T3888] [ 129.484552][ T3888] read to 0xffff88811b384ae0 of 8 bytes by task 3888 on cpu 1: [ 129.492098][ T3888] __mod_timer+0x69/0x840 [ 129.496449][ T3888] mod_timer+0x1f/0x30 [ 129.500534][ T3888] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 129.507755][ T3888] wg_packet_handshake_receive_worker+0x4c3/0x5d0 [ 129.514276][ T3888] process_scheduled_works+0x4ce/0x9d0 [ 129.519746][ T3888] worker_thread+0x582/0x770 [ 129.524349][ T3888] kthread+0x489/0x510 [ 129.528436][ T3888] ret_from_fork+0x149/0x290 [ 129.533039][ T3888] ret_from_fork_asm+0x1a/0x30 [ 129.537826][ T3888] [ 129.540149][ T3888] value changed: 0x00000000ffffc29d -> 0x00000000ffffc29e SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 129.547256][ T3888] [ 129.549585][ T3888] Reported by Kernel Concurrency Sanitizer on: [ 129.555736][ T3888] CPU: 1 UID: 0 PID: 3888 Comm: kworker/1:13 Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.565639][ T3888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.575704][ T3888] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 129.582935][ T3888] ================================================================== [ 129.752454][ T7029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.912711][ T37] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.024409][ T37] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.104296][ T37] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.155036][ T37] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.218069][ T37] bridge_slave_1: left allmulticast mode [ 130.223862][ T37] bridge_slave_1: left promiscuous mode [ 130.229495][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.237705][ T37] bridge_slave_0: left allmulticast mode [ 130.243401][ T37] bridge_slave_0: left promiscuous mode [ 130.249151][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.335580][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.345658][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.355183][ T37] bond0 (unregistering): Released all slaves [ 130.363654][ T37] bond1 (unregistering): Released all slaves [ 130.372155][ T37] bond2 (unregistering): Released all slaves [ 130.381096][ T37] bond3 (unregistering): Released all slaves [ 130.459490][ T37] hsr_slave_0: left promiscuous mode [ 130.467990][ T37] hsr_slave_1: left promiscuous mode [ 130.474565][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.482011][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.489593][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.497635][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.508464][ T37] veth1_macvtap: left promiscuous mode [ 130.514031][ T37] veth0_macvtap: left promiscuous mode [ 130.519594][ T37] veth1_vlan: left promiscuous mode [ 130.524876][ T37] veth0_vlan: left promiscuous mode [ 130.591370][ T37] team0 (unregistering): Port device team_slave_1 removed [ 130.602401][ T37] team0 (unregistering): Port device team_slave_0 removed [ 130.637154][ T12] smc: removing ib device syz1 [ 130.643845][ T3605] lo speed is unknown, defaulting to 1000 [ 130.649595][ T3605] syz1: Port: 1 Link DOWN [ 130.895860][ T37] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.957409][ T37] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.034670][ T37] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.074745][ T37] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.119507][ T911] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.131764][ T911] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.154317][ T1895] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.169111][ T37] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.180826][ T1895] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.236250][ T37] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.335391][ T37] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.385533][ T37] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.437571][ T37] bridge_slave_1: left allmulticast mode [ 131.444012][ T37] bridge_slave_1: left promiscuous mode [ 131.449656][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.457666][ T37] bridge_slave_0: left allmulticast mode [ 131.463397][ T37] bridge_slave_0: left promiscuous mode [ 131.469078][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.478116][ T37] bridge_slave_1: left allmulticast mode [ 131.483822][ T37] bridge_slave_1: left promiscuous mode [ 131.489481][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.497294][ T37] bridge_slave_0: left allmulticast mode [ 131.503562][ T37] bridge_slave_0: left promiscuous mode [ 131.509246][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.568806][ T37] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 131.579733][ T37] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 131.645809][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.655826][ T37] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 131.664612][ T37] bond0 (unregistering): Released all slaves [ 131.673502][ T37] bond1 (unregistering): Released all slaves [ 131.681889][ T37] bond2 (unregistering): Released all slaves [ 131.690680][ T37] bond3 (unregistering): Released all slaves [ 131.699232][ T37] bond4 (unregistering): Released all slaves [ 131.775316][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.785243][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.795169][ T37] bond0 (unregistering): Released all slaves [ 131.803725][ T37] bond1 (unregistering): Released all slaves [ 131.812314][ T37] bond2 (unregistering): Released all slaves [ 131.820820][ T37] bond3 (unregistering): Released all slaves [ 131.905019][ T37] hsr_slave_0: left promiscuous mode [ 131.910692][ T37] hsr_slave_1: left promiscuous mode [ 131.917045][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.924456][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.932115][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.939525][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.948548][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.955962][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.963620][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.970994][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.983552][ T37] veth1_macvtap: left promiscuous mode [ 131.989037][ T37] veth0_macvtap: left promiscuous mode [ 131.997078][ T37] veth1_vlan: left promiscuous mode [ 132.002386][ T37] veth0_vlan: left promiscuous mode [ 132.008196][ T37] veth1_macvtap: left promiscuous mode [ 132.013822][ T37] veth0_macvtap: left promiscuous mode [ 132.019373][ T37] veth1_vlan: left promiscuous mode [ 132.024733][ T37] veth0_vlan: left promiscuous mode [ 132.127038][ T37] team0 (unregistering): Port device team_slave_1 removed [ 132.137373][ T37] team0 (unregistering): Port device team_slave_0 removed [ 132.195530][ T37] team0 (unregistering): Port device team_slave_1 removed [ 132.206436][ T37] team0 (unregistering): Port device team_slave_0 removed [ 132.796086][ T37] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.375294][ T37] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.415689][ T37] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.455990][ T37] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.507071][ T37] bridge_slave_1: left allmulticast mode [ 133.512860][ T37] bridge_slave_1: left promiscuous mode [ 133.518703][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.526671][ T37] bridge_slave_0: left allmulticast mode [ 133.532379][ T37] bridge_slave_0: left promiscuous mode [ 133.538324][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.615039][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.625002][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.634684][ T37] bond0 (unregistering): Released all slaves [ 133.693441][ T37] hsr_slave_0: left promiscuous mode [ 133.699115][ T37] hsr_slave_1: left promiscuous mode [ 133.704711][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.712084][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.721135][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.728799][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.738906][ T37] veth1_macvtap: left promiscuous mode [ 133.744566][ T37] veth0_macvtap: left promiscuous mode [ 133.750063][ T37] veth1_vlan: left promiscuous mode [ 133.755354][ T37] veth0_vlan: left promiscuous mode [ 133.821351][ T37] team0 (unregistering): Port device team_slave_1 removed [ 133.831435][ T37] team0 (unregistering): Port device team_slave_0 removed [ 134.775849][ T274] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.824525][ T274] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.874440][ T274] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.924292][ T274] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.977987][ T274] bridge_slave_1: left allmulticast mode [ 134.983831][ T274] bridge_slave_1: left promiscuous mode [ 134.989451][ T274] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.997413][ T274] bridge_slave_0: left promiscuous mode [ 135.003263][ T274] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.134780][ T274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.144852][ T274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.154726][ T274] bond0 (unregistering): Released all slaves [ 135.163325][ T274] bond1 (unregistering): Released all slaves [ 135.171921][ T274] bond2 (unregistering): Released all slaves [ 135.203595][ T274] hsr_slave_0: left promiscuous mode [ 135.209205][ T274] hsr_slave_1: left promiscuous mode [ 135.214971][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.222401][ T274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.231202][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.246748][ T274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.256689][ T274] veth1_macvtap: left promiscuous mode [ 135.262182][ T274] veth0_macvtap: left promiscuous mode [ 135.267774][ T274] veth1_vlan: left promiscuous mode [ 135.273056][ T274] veth0_vlan: left promiscuous mode [ 135.338217][ T274] team0 (unregistering): Port device team_slave_1 removed [ 135.348874][ T274] team0 (unregistering): Port device team_slave_0 removed [ 135.356456][ T1895] smc: removing ib device syz!