last executing test programs: 1m45.043403236s ago: executing program 4 (id=775): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m44.966694701s ago: executing program 4 (id=777): semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000000)=[{0x1, 0xbbe1, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x7, 0xbb]) (fail_nth: 1) 1m43.95397185s ago: executing program 4 (id=791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0={0x18, 0x0, 0x0, 0x300}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1m43.874900404s ago: executing program 4 (id=792): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$eJzs3M1vFOUfAPDvTLuF/oBfq+ILL2oVjQ1qSwGVgwc1mnjAxEQPGk9NWwhSqKE1EUIUjMGTMSbejUf/BU96MUYvJl71bkiI6QXw4prZnWl3l90tLbtdYD+fZOB55qXP99uZZ/eZeXYbQN8ay/5JIrZHxB8RMVKt1u8wVv3v2vL5mevL52eSKJff+jup7Hd1+fxMsWtx3La8Mp5GpJ8lsadJu4tnz52cnp+fO5PXJ5dOfTC5ePbcsydOTR+fOz53+uCRI4cPTb3w/MHnmgc+tL48s5iu7v54Ye+u19/96o2jX9Tl35BHh4y12/hkudzh5nprR005GexhIKzLQERkp6tU6f8jMRCrJ28kXvu0p8EBXVUul8vbWm++UG6QNq4A7mBJ1Ndv6PLAXap4o8/uf4ulcRDwUveGHz135eXqDVCW97V8qW4ZjDTfp9Rwf9tJYxHxzoV/vsmW6M5zCACAOj9k459nmo3/0nigZr//53NDoxFxT0TcGxH3RcTOiLg/orLvgxHxUOXIWBk7raVxkuTG8U96+ZYSXEM2/nsxn9sazsZ/pZV2i8LoQF7bUcm/lBw7MT93IP+djEdpS1afatPGj6/+/mWrbbXjv2zJ4ijGgnkclwe31B8zO700vfGM6125GLF7sMi1dvybrMwEJBGxKyJ2b7CNE/u/29tq29r5t9GBeabytxFPVc//hViuz7+QtJ+fnNwa83MHJour4ka//HbpzVbtV/Lfv8H8OyA7///Lr/9rzfMfTWrnaxfX38alPz9veU+z0et/KHm7Ui6mgT+aXlo6MxUxlBytBl27/uDqsUW92D/Lf3xfs/zTymtc8ZvYExHZRfxwRDwSEY/msT8WEY9HxL42+f/8yhPvN92Q3uL13wFZ/rPrOv+rhaFoXNO8MHDyp+/rGh1dLeb5X29//g9XSuP5mpt5/buZuDZ2NQMAAMCdJ42I7ZGkEyvlNJ2YqH5efmdEOr+wuPT0sYUPT89WvyMwGqW0eNI1UvM8dCq/ra/WL0ZE9aMFxfZD+XPjrweGK/WJmYX52V4nD31uW4v+n/lroNfRAV3n+1rQv/R/6F/N+v/WHsQBbD7v/9C/mvT/4V7EAWy+Zu//n7Q/5N9uxQJsrob+b9oP+sj67/9/fa8rgQCbrmX/v5v/8g9Q4fk/9KXF4Vj7S/JtC8VP2uDht0shiYiO/sAo3RZ53XqhnDQ9uZFmhdLtEKFCFwq9fV0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADolP8CAAD//3fv18M=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="4cf2a36adc4bc2ebb4b811ea6fc55952"}}) add_key$fscrypt_v1(&(0x7f00000002c0), 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7, @private0, 0x7f}}}, 0x30) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000180)={&(0x7f00000002c0)=""/48, 0x30}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x4000) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) 1m43.742119712s ago: executing program 4 (id=794): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 1m42.138100405s ago: executing program 4 (id=806): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[], 0x758) socket$rds(0x15, 0x5, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x6e3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="060000000def8584a64f853db2eb3f4e2f291ec8d07bed70fba42a001d5b15dd322ea7a08e225e4c13b1fc908613a410acf59a2089b79ddc916f86ccac7c34e9d56c790c4e5b0626043cf7aa95d08ed5c147e43fbfddb97dcd076a9f221b975c42b7d2499828cadc419dc442249a9776c1a23e5e496a625e66a011f74f69ac6300"/140, @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002400018006d2940005004e230000060001000204000008000300ac1414aa0800060001000000d73e3958bfccf0d2e5836113aee1d0aa97ec9eeb8e130638eac97b4e35ac8dc521f14987d6e1abddc3e4a38299ef1e2157a35016215c5c251cb2cce19aa674e21229f8ca3003582adc3d4fe8a5170584e4b359d0a0e7ea395f"], 0x38}}, 0x20004001) close(0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 1m42.137979355s ago: executing program 32 (id=806): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[], 0x758) socket$rds(0x15, 0x5, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@resgid}, {@bh}, {@nouid32}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, 0x0) truncate(&(0x7f00000001c0)='./file1\x00', 0x6e3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="060000000def8584a64f853db2eb3f4e2f291ec8d07bed70fba42a001d5b15dd322ea7a08e225e4c13b1fc908613a410acf59a2089b79ddc916f86ccac7c34e9d56c790c4e5b0626043cf7aa95d08ed5c147e43fbfddb97dcd076a9f221b975c42b7d2499828cadc419dc442249a9776c1a23e5e496a625e66a011f74f69ac6300"/140, @ANYRES16=r4, @ANYBLOB="01000000000000000000010000002400018006d2940005004e230000060001000204000008000300ac1414aa0800060001000000d73e3958bfccf0d2e5836113aee1d0aa97ec9eeb8e130638eac97b4e35ac8dc521f14987d6e1abddc3e4a38299ef1e2157a35016215c5c251cb2cce19aa674e21229f8ca3003582adc3d4fe8a5170584e4b359d0a0e7ea395f"], 0x38}}, 0x20004001) close(0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 35.366863455s ago: executing program 0 (id=1817): timerfd_create(0x5, 0x40800) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f00000001c0)={[{@barrier}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000e40)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r0 = socket(0x25, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 35.059672863s ago: executing program 0 (id=1830): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac0200000000000000000004000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 34.94246554s ago: executing program 0 (id=1837): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10000, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x48}}, 0x20000084) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_io_uring_setup(0xbc0, &(0x7f0000000280)={0x0, 0x5568, 0x10000, 0x2, 0x282}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r3, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 34.896861022s ago: executing program 0 (id=1841): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@nodioread_nolock}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x470, 0xffffffff, 0x2b0, 0x2b0, 0x168, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x128, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'dummy0\x00', {0x4, 0xb3b9, 0x4, 0x5, 0x10001, 0xb2, 0xffffff81, 0x8, 0xa8}, {0x5}}}, @common=@hl={{0x28}, {0x1, 0x4}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b58da236b29e4cd2b7c58816319a7f162152e3a162d65a7e23b03f829914"}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d2], 0x1, 0x2}}, @common=@icmp6={{0x28}, {0x5, "2c1f", 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'veth1_to_bridge\x00', {0x81}}}}, {{@ipv6={@empty, @remote, [0x0, 0xff000000, 0xff, 0xffffff00], [0xff, 0x0, 0xffffffff, 0xffffffff], 'dummy0\x00', 'veth0_to_bond\x00', {}, {}, 0x3c, 0x2, 0x2, 0x9}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'macsec0\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlockall(0x7) (async) mlockall(0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c40), 0x40, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x1e, &(0x7f0000001140)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @generic={0x8, 0xe, 0x8, 0xf, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0xa6}], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000e00)={{0x1, 0x1, 0x18, r2, {0x10001}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000084cf64b08df58538030fd8c19ff26f01ec2ae3b928635d8ebab1698d3757585a66a1bdfd56864e1c6a8922eebc0a2560bc232c580596ce68e921bfb08fcf8ca581a1c5dabcc6a719bea8e438c3b602d17aabf37882825edd5521c976f84dbe33a965ac0faea0486fac6a1eccf914d798f734ca3693bd063947e7268ae70d4422967209613d9f01c514331ab9f7dce811ee74b06a4ba17fd90e820b91daa609611cf3280dc5e8697bbb4934cd80d794900fb0"], 0x24, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000000000000000200000000000000084cf64b08df58538030fd8c19ff26f01ec2ae3b928635d8ebab1698d3757585a66a1bdfd56864e1c6a8922eebc0a2560bc232c580596ce68e921bfb08fcf8ca581a1c5dabcc6a719bea8e438c3b602d17aabf37882825edd5521c976f84dbe33a965ac0faea0486fac6a1eccf914d798f734ca3693bd063947e7268ae70d4422967209613d9f01c514331ab9f7dce811ee74b06a4ba17fd90e820b91daa609611cf3280dc5e8697bbb4934cd80d794900fb0"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) socket$inet6_sctp(0xa, 0xfbbcd9f35301039, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0xfbbcd9f35301039, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f4, &(0x7f0000000740)="$eJzs3E1oHFUcAPD/bL77YaPWamvV1CoGi0mbVpuDIBUFDwpiBfUYkrTUpo00KdhSZQtSj1LwLh69evCqXop4ErzWoyCFIr20FcSV2d3Zr+wmzSbZNfb3g8m+N7M7771582bfvJedAO5bI+mfpBS+HhE7IiLX+IaR0sudW5em7966NB35QuH4n0nxY7fTeFl5N7G1HBnNReQ+S6obaixcuHh6am5u9lw5Pr545qPxhQsXXzg1WF4zOZn0tlmoJuml5bq959P5vbvf+ODqW9OVPWep1ZZjvYzESLOsFD273ol12faacNv1Rsel539aXX3F9r8jemK5yst3MGfARisUCoWB1pvzhUaXl6wBNq0Y7HYOgO7IvujT+99sadYR6N+Y7kfX3TxWugFKy32nvEQ8VVyZjYP0NdzfrqeRiHg//9dX6RIbNA4BAFDrh2NZT7Ch/zdcmhn5+/y1V9LXB8pzKMMR8WBEPBQRD0fEzoh4JCJ2RcSjEfFY3d6HoiciCsukP9IQr6RfmYTK3Vi3wjaR9v9eLs9tpUt17qsSGu4px7ZHZB3m2YPlYzIafQMnTs3NHlomjR9f+/WLVttq+3/pkuYh6wuW83Gjt2GAbmZqcaq90i5183LEnt5q+Uv936Q3IqnMBCQRsTsi9qxiv8M14VPPf7O3Eumrf9/K5S8qNJ1HW4d5psLXEc+V6j8flfJH3SRiUjc/eWbq5OzJ2bMTk5NHDh86+tLEi+ODMTd7cDw9Cw42TePnX6683Sr9Fcv/3e+Nc4ivH/3+eESxZa1dWv9bas7/yOZvq6kOJxFJZb52YfVpXPnt85b3NO2e//3Ju8Vwdl/68dTi4rlDEf3Jm0vXT1Q/m8XT18iXyj+6v/H8L6ZbvMZlR+LxiEhP4ici4sko3SGmed8XEU9HxP5lyv/Tq8982H75N1Za/pmoL3+p5uvqvzpf3yqQlOcG6zb1RxroOb3v+t0WF497q/8jxdBoeU3z619S10xa5TT7tkvX/LPmowcAAACbQy4ittWMJW2LXG5srDQGtDO25ObmFxYPnJg/f3Ym3RYxHH25bKSrNB7cl2Tjn8M18YmG+OHyuPGXPUPF+Nj0/NxMV0sObC22+SQ3FvFeT037T/2xPkPMwH+Z32vB/Wu59p924ndd7WBmgI669+//a59saEaAjqtp/61+4Z9v4/++gE3A/T9QtfKDflwzYPMraMtwX1tV+z/gIYDwf9Ib71TCua7mBOi0Zb//hzqXD6CjVvxd/5oChYHmmwZj6ZtjcPkd9kR72RhqklZXAmnPqiupD7XzqexpCi3fE7nV7XAg6tf0t1mnJ9Z4NPLnFk7uqp782bNF1nicC+X/lV/vGvy2I+20WaDjlyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAN8W8AAAD//84f19M=") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='gadgetfs\x00', 0x200000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@generic={&(0x7f0000000d80)='./file0\x00', 0x0, 0x10}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x7}, 0x120, 0x10000, 0x33f8, 0x1, 0xd2, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x991}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x267, &(0x7f0000000e40)="$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") getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x633}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x633}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={r6, 0x6037, 0x9}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000056c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61640024000280080004400000005608000340000000bb080001400000000a08000240000040010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ftruncate(0xffffffffffffffff, 0x6) 34.710108543s ago: executing program 0 (id=1851): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10000, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x48}}, 0x20000084) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_io_uring_setup(0xbc0, &(0x7f0000000280)={0x0, 0x5568, 0x10000, 0x2, 0x282}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r3, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 34.620435098s ago: executing program 0 (id=1857): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x5, 0x6c9e, 0x0, 0x80, 0x800, 0x401, 0x4aa8, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 34.528016504s ago: executing program 33 (id=1857): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x5, 0x6c9e, 0x0, 0x80, 0x800, 0x401, 0x4aa8, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 28.56620493s ago: executing program 2 (id=2074): connect$inet6(0xffffffffffffffff, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r0 = syz_io_uring_setup(0xbc0, &(0x7f0000000280)={0x0, 0x5568, 0x10000, 0x2, 0x282}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{0x0}], 0x1, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 28.56568668s ago: executing program 2 (id=2075): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x17}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x1000007}]}}]}, 0x40}}, 0x4000010) 28.512877043s ago: executing program 2 (id=2079): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) 28.486720695s ago: executing program 2 (id=2080): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800714, &(0x7f0000000100), 0x2, 0x48f, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) syz_clone(0x40002000, &(0x7f00000000c0)="bf670486880b33bd4c65b2a526e59b510e43d8c6ea581ee1fb658d3cfa35d62b2420a8430d81e800924bb1e0439469084f6ddf9b937ecef5f242a3d4b17cc093c8506ce28b", 0x45, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="805160312becb84e75a7ff88b6e66ccd67ef6a1faa78edb5ee2599679b1823976ac45a5a6837bcd475d9125df9c1ec3d8dde2d8eae166540f3") 28.314174305s ago: executing program 2 (id=2089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.107511807s ago: executing program 2 (id=2090): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) 28.106836437s ago: executing program 34 (id=2090): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) 3.525204415s ago: executing program 1 (id=2768): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x3, 0x800000, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x0, 0x20000000000001, 0x2}, 0x800}}, 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000925ed12f62470dde00000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffff"], 0xb8}}, 0x10) 3.522008895s ago: executing program 1 (id=2769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20006005bbbbbbbbbbbb00000000000086dd6a5420bd0000327a00000000000000000000000000000000ff020000000000000000000000000002"], 0x3a) 3.413365111s ago: executing program 1 (id=2771): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x10000, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x3, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x48}}, 0x20000084) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) inotify_init() bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000040)="b64b6779e7", 0x0, 0x0, 0x0, 0xfffffff7, 0xffffffffffffffff, 0x4}, 0x38) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_io_uring_setup(0xbc0, &(0x7f0000000280)={0x0, 0x5568, 0x10000, 0x2, 0x282}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r5, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 3.288330679s ago: executing program 1 (id=2772): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x10441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1ff, 0x80000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0xa8, &(0x7f0000001300)=ANY=[@ANYBLOB='nonumtail=0,shortname=lower,shortname=mixed,utf8=1,iocharset=cp1251,nonumtail=0,rodir,shortname=win95,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,errors=remount-ro,shortname=winnt,shortname=win95,uni_xlate=0,nonumtail=0,discard,nnonumtail=1,codepage=865,nonumtail=0,shortname=winnt,shortname=win95,Cscontext=unconfined_u,\x00'], 0x1, 0x37d, &(0x7f0000000e00)="$eJzs3U1vG1UXAOCTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhT4oCVaRzZVpArBN2x5XdULNkhIf5AFrBnxy4bll1UHRSP3XzUhKLWGQWeR7Luse899p07ntHdjM7Bre/ubG9161tZL6avpZiOiOkHEUuDqDQ1bKcH8Wwcdy/eqt367bUPP/7kvbX19esbKd1Yu/n2akrpyus/ffnV91d/7v3/ox+u/DgX+0ufHvyx+vv+S/svHzy6+UWrm1rdtNPupSzdbrd72e28mTZb3e16Sh/kzazbTK2dbrNzon8rb+/u9lO2s7m4sNtpdrsp2+mn7WY/9dqp1+mn7POstZPq9XpaXAj+TuP+xka2VsbzZ4y7dl4TYgI6nbXs8Bqee6Kncb+SCQEAlXrW/f/sc93/z8SE9//F1GSX84I5vv/n3+pw/z87vH5Psv8HAAAAAAAAAAAAAICL4EFR1IqiqI3aYvSQ8PB9xdNjwp44/6deVc+PyTr24N58RP7tXmOvUbZl/9pWtCKPZixHLR4e3hZGyvjGu+vXl9PAUize+WaQf/WXiMb/TuavRC2WxuevlPnpcX4ctjOxcDx/NWrx4vj81bH5s/HmG8fy61GLXz+LduSxObi9HeV/vZLSO++vn8qfG4wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L+hnkZejbLu/V4j4nLsDev3148GLJ2sj1/mP66vvxy1eDi+Pv/y2Pr8l+KVS9UeOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMdPt3t7M8b3bOKxjV/B98MjsK/jprqhx+71TX5TjHOed5c/p5feGjoigmNdX5cnmfZvBTrPxEg5mIs85gMfyXPPtvvRARZ4yZi4jKFuHcgqnhVfdPsiq5HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECljop+Vz0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqtTt393O8rzZmWBQ9TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcJH8GAAD//21xC6A=") r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x0, 0x1, 0x7f}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, &(0x7f0000000040)) r1 = syz_io_uring_setup(0xa28, &(0x7f00000000c0)={0x0, 0x211a, 0x20, 0x2, 0x356}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000040)=0x80000000, 0x4) sendmmsg(r4, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[], 0x38}}, 0x4000) r6 = io_uring_setup(0x623b, &(0x7f00000001c0)={0x0, 0x6155, 0x400, 0x3, 0x242}) fcntl$lock(r6, 0x24, &(0x7f0000000040)={0x0, 0x3, 0xa, 0x5}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0xae0de4de5957c72c, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x4b6d51c016548914}, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f4, &(0x7f0000000740)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='gadgetfs\x00', 0x200000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@generic={&(0x7f0000000d80)='./file0\x00', 0x0, 0x10}, 0x18) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x50, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x2) dup3(r8, r10, 0x80000) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 3.058825942s ago: executing program 1 (id=2773): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000018007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.420030169s ago: executing program 1 (id=2787): connect$inet6(0xffffffffffffffff, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r0 = syz_io_uring_setup(0xbc0, &(0x7f0000000280)={0x0, 0x5568, 0x10000, 0x2, 0x282}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5", 0x2}], 0x1, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 2.419307119s ago: executing program 35 (id=2787): connect$inet6(0xffffffffffffffff, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) r0 = syz_io_uring_setup(0xbc0, &(0x7f0000000280)={0x0, 0x5568, 0x10000, 0x2, 0x282}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5", 0x2}], 0x1, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 2.277784177s ago: executing program 5 (id=2799): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) ioctl$int_out(r0, 0x5460, &(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2}, 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delneigh={0x1c, 0x1a, 0x401, 0x0, 0xfffffffc, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, 0x1c}}, 0x20040800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r3 = socket(0x1, 0x803, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=ANY=[], 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x168b}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000040)={r8, &(0x7f0000000140), &(0x7f00000002c0)=""/4095}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001800)={{r8}, &(0x7f0000001780), &(0x7f00000017c0)='%-010d \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r8, &(0x7f0000000080), 0x0}, 0x20) syz_read_part_table(0x5f2, &(0x7f0000000000)="$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") 1.848790852s ago: executing program 5 (id=2808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x3a, 0x1, &(0x7f0000000140), 0x4) 1.502019193s ago: executing program 6 (id=2813): unshare(0x28000600) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x3a, 0x1, &(0x7f0000000140), 0x4) 1.444852166s ago: executing program 5 (id=2814): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x2c, r2, 0xc4fc9e906872338b, 0x70bd2b, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}}, 0x2004c084) 1.444620136s ago: executing program 6 (id=2815): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="84002900", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x298, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f00000001c0), &(0x7f00000003c0)}, 0x20) 1.414156998s ago: executing program 6 (id=2818): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x6144, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') preadv2(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/179, 0xb3}], 0x1, 0xfffffff0, 0x7fffffff, 0x1c) r1 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), &(0x7f00000003c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x9, @dev, @remote}}}}}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a"], 0x38}, 0x1, 0x7}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a000000000000fe800000000000000000690d7d520d25cab2d69003e61f0000000000aa00004e220000000000000000000000000000000095254982e2e26f3ccd83f966237a0f649a7e795a9bab3c1f2bc1cb20747115cc806bcaadfa4eaa0897b719ac74b3b65e885446a40a9773ced20718123c0e8759fa9f814cda8d0e95d529adf66cd0b8f713b0d06bf364f335a613dc61ab1eb0fea8d8fc25f4105f94dacbf54c770d58c10a335c657ab7dcb967094a97155062adcf3a58a9"], 0x0) ioctl$EVIOCGBITSND(r2, 0x40044591, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x3c, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4d36}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008010}, 0x20000001) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000000c0)=ANY=[]) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) 1.149546153s ago: executing program 5 (id=2820): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800714, &(0x7f0000000100), 0x2, 0x48f, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) syz_clone(0x40002000, &(0x7f00000000c0)="bf670486880b33bd4c65b2a526e59b510e43d8c6ea581ee1fb658d3cfa35d62b2420a8430d81e800924bb1e0439469084f6ddf9b937ecef5f242a3d4b17cc093c8506ce28b", 0x45, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180)="805160312becb84e75a7ff88b6e66ccd67ef6a1faa78edb5ee2599679b1823976ac45a5a6837bcd475d9125df9c1ec3d8dde2d8eae166540f3") 1.137286824s ago: executing program 7 (id=2821): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac0200000000000000000004000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 1.085200497s ago: executing program 7 (id=2823): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x3a, 0x1, &(0x7f0000000140), 0x4) 1.055253378s ago: executing program 6 (id=2824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 903.000297ms ago: executing program 7 (id=2827): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="84002900", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f00000001c0), &(0x7f00000003c0)}, 0x20) 855.48368ms ago: executing program 7 (id=2828): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x1, 0xf, 0x0, 0x8, 0x0, 0xff0, 0x24011, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x3, 0x6}, 0x410, 0xf2, 0x7, 0x3, 0x2, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0xd) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = memfd_secret(0x0) write$UHID_CREATE2(r3, &(0x7f0000000580)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x89, 0xe, 0x7, 0x5, 0xfffffff0, 0x3, "27b987ab4b8ca1bb85350d365f7a0947364dfb4234c07b61d156676cabb640422d1efee33ef0fb76a3895a3b199b9a090b8ec3c297264840daff716a9cff70c2decdde3f4718e6389ed9f3065da8c5a78ca521728abeecfd3ed27d64be7ea21cf18fc5a6ebc36715bc3e153dd2b80319dd8bfae6b75eaf1baa8cdeb1dd9b8155313420580becf0ee36"}}, 0x1a1) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000, r0}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00f1ff68703667726500001c00028006000207000000000800040001feffff06000e000000000014002b8008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x60}}, 0x0) 786.846324ms ago: executing program 6 (id=2829): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf25070000", @ANYRES32=r2, @ANYBLOB="8000260b0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 784.871064ms ago: executing program 6 (id=2832): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="010025bd70000000000001000000040007800c000600000000000000000c"], 0x30}}, 0x24000044) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000100), 0x1, 0x2b, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', r6, 0x40, 0x40, 0x4, 0x1, {{0xa, 0x4, 0x3, 0x2c, 0x28, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast1, @rand_addr=0x64010100, {[@generic={0xb, 0x8, "2165382387c1"}, @generic={0x88, 0xc, "17046cf8e077f452d7cd"}]}}}}}) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001aa542b149ce246e6000500000a5c000000060a010400000000000000000a0000010900010073797a3100000000300004802c00018008000100636d700020000280080001401100000408000240000000010c00038006000100407300000900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @private0}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x4, 0x85, 0x7, 0x7ffc0001}]}) epoll_create1(0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1000]}, 0x8, 0x80000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21620}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0x2d, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048020}, 0x8024) 783.435694ms ago: executing program 5 (id=2833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x9}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r5 = eventfd(0x0) io_submit(r4, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r5, &(0x7f0000000180)="0000000402feff00", 0x8, 0x36}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x2, 0x0, 0x1, r5}]) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000100)="040000"}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x20d, 0x0, &(0x7f0000000180)="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", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x50) r8 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040)=0x85) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r3}, 0x20) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0xb, 0x1, 0xd, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r9, @ANYBLOB='\x00\x00\t\x00(\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r11, @ANYRES64=r10], 0x20) 758.997756ms ago: executing program 7 (id=2834): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac0200000000000000000004000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 730.687687ms ago: executing program 7 (id=2835): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000007c0)={&(0x7f00000002c0)={0xa, 0x4e22, 0x46d74c6e, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000002900000004000000320000000000000014000000000000002900000034000000000000000000000014"], 0x48}, 0x46830) 602.956735ms ago: executing program 5 (id=2836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x3a, 0x1, &(0x7f0000000140), 0x4) 586.050306ms ago: executing program 36 (id=2836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x3a, 0x1, &(0x7f0000000140), 0x4) 399.499406ms ago: executing program 3 (id=2841): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf25070000", @ANYRES32=r2, @ANYBLOB="8000260b0a00020001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040010) 352.116419ms ago: executing program 3 (id=2842): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc00000000000000140000000000000001"], 0x4c}, 0x20001850) 335.33047ms ago: executing program 3 (id=2843): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc00000000000000140000000000000001"], 0x4c}, 0x20001850) (fail_nth: 1) 62.878336ms ago: executing program 3 (id=2844): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x4, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0xff90, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 62.641826ms ago: executing program 3 (id=2845): openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x8300) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000830704ac14140f0011000000000000000000000001000000fc00000000000000140000000000000001"], 0x4c}, 0x20001850) 0s ago: executing program 3 (id=2846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20006005bbbbbbbbbbbb00000000000086dd6a5420bd0000327a00000000000000000000000000000000ff020000000000000036000000000001"], 0x3a) kernel console output (not intermixed with test programs): 4-fs: Ignoring removed nomblk_io_submit option [ 124.146157][ T8381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.166300][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1621'. [ 124.233839][ T5897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.289923][ T8405] loop5: detected capacity change from 0 to 1024 [ 124.305378][ T8405] EXT4-fs: Ignoring removed bh option [ 124.327088][ T8405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.330584][ T8411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1630'. [ 124.348657][ T8411] tipc: Invalid UDP bearer configuration [ 124.348708][ T8411] tipc: Enabling of bearer rejected, failed to enable media [ 124.535078][ T8420] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1625: Allocating blocks 449-513 which overlap fs metadata [ 124.570869][ T8405] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1625: Allocating blocks 497-513 which overlap fs metadata [ 124.612032][ T8405] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1625: Allocating blocks 497-513 which overlap fs metadata [ 124.661045][ T8403] EXT4-fs (loop5): pa ffff8881079c0310: logic 48, phys. 177, len 21 [ 124.669147][ T8403] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 124.744115][ T5897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.968306][ T8479] loop5: detected capacity change from 0 to 1024 [ 124.991685][ T8479] EXT4-fs: Mount option(s) incompatible with ext3 [ 124.995347][ T8486] bridge0: port 3(veth0_to_bridge) entered blocking state [ 125.005413][ T8486] bridge0: port 3(veth0_to_bridge) entered disabled state [ 125.028931][ T8486] veth0_to_bridge: entered allmulticast mode [ 125.038476][ T8486] veth0_to_bridge: entered promiscuous mode [ 125.072313][ T8486] loop2: detected capacity change from 0 to 512 [ 125.125198][ T8486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.161956][ T8499] loop1: detected capacity change from 0 to 512 [ 125.217727][ T8486] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.325271][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.424059][ T8528] netlink: 'syz.2.1670': attribute type 1 has an invalid length. [ 125.812460][ T8569] EXT4-fs: inline encryption not supported [ 125.857149][ T8569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.884336][ T8581] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 15: block 385:freeing already freed block (bit 24); block bitmap corrupt. [ 125.922705][ T8581] EXT4-fs (loop5): Remounting filesystem read-only [ 125.947588][ T8586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.001626][ T8586] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.069179][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.100939][ T8616] EXT4-fs: dax option not supported [ 126.115894][ T8617] EXT4-fs: dax option not supported [ 126.404755][ T8646] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.446999][ T8666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.490752][ T8673] netlink: 'syz.2.1711': attribute type 1 has an invalid length. [ 126.512132][ T8666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.520820][ T8646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.534769][ T8646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.619344][ T8670] __nla_validate_parse: 11 callbacks suppressed [ 126.619363][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1710'. [ 126.658740][ T5897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.678961][ T41] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.716461][ T41] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.727964][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.730169][ T41] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.745399][ T41] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.771753][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1714'. [ 126.789243][ T8678] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.819970][ T8678] EXT4-fs (loop2): 1 truncate cleaned up [ 126.841446][ T8678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.866820][ T8708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.902940][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 126.922300][ T8673] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 126.930462][ T8673] bond3: (slave batadv1): making interface the new active one [ 126.939111][ T8673] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 126.956919][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 126.971710][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.980990][ T8673] bond3 (unregistering): (slave batadv1): Releasing active interface [ 126.990437][ T8673] bond3 (unregistering): Released all slaves [ 127.014834][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 127.014850][ T29] audit: type=1400 audit(1769701547.288:2768): avc: denied { setopt } for pid=8712 comm="syz.1.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.043451][ T29] audit: type=1400 audit(1769701547.288:2769): avc: denied { getopt } for pid=8712 comm="syz.1.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 127.103826][ T29] audit: type=1400 audit(1769701547.378:2770): avc: denied { bind } for pid=8714 comm="syz.0.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.123976][ T29] audit: type=1400 audit(1769701547.398:2771): avc: denied { write } for pid=8714 comm="syz.0.1718" path="socket:[22488]" dev="sockfs" ino=22488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.246401][ T8720] set_capacity_and_notify: 8 callbacks suppressed [ 127.246421][ T8720] loop1: detected capacity change from 0 to 2048 [ 127.293233][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.306443][ T8720] EXT4-fs: Mount option(s) incompatible with ext2 [ 127.365586][ T8734] loop5: detected capacity change from 0 to 1024 [ 127.379136][ T8734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.400627][ T29] audit: type=1400 audit(1769701547.668:2772): avc: denied { setopt } for pid=8718 comm="syz.0.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 127.443777][ T8734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.532950][ T5897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.552931][ T8750] dummy0: entered promiscuous mode [ 127.814363][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1724'. [ 127.832572][ T29] audit: type=1400 audit(1769701548.108:2773): avc: denied { mounton } for pid=8762 comm="syz.5.1730" path=2F3136372FFFFFFFFF dev="tmpfs" ino=881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 128.058247][ T8781] nr0: tun_chr_ioctl cmd 1074025677 [ 128.063797][ T8781] nr0: linktype set to 804 [ 128.096208][ T8786] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1743'. [ 128.105275][ T8786] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1743'. [ 128.145897][ T29] audit: type=1400 audit(1769701548.408:2774): avc: denied { connect } for pid=8780 comm="syz.5.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.225847][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1747'. [ 128.266133][ T29] audit: type=1400 audit(1769701548.538:2775): avc: denied { read append } for pid=8810 comm="syz.2.1749" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 128.289612][ T29] audit: type=1400 audit(1769701548.538:2776): avc: denied { open } for pid=8810 comm="syz.2.1749" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 128.295120][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 128.330753][ T29] audit: type=1400 audit(1769701548.548:2777): avc: denied { ioctl } for pid=8810 comm="syz.2.1749" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 128.392835][ T8820] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 128.426555][ T8822] netlink: 'syz.0.1754': attribute type 10 has an invalid length. [ 128.434564][ T8822] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1754'. [ 128.466033][ T8822] bond0: entered promiscuous mode [ 128.471136][ T8822] bond_slave_0: entered promiscuous mode [ 128.476879][ T8822] bond_slave_1: entered promiscuous mode [ 128.496045][ T8822] bridge0: port 1(bond0) entered blocking state [ 128.502437][ T8822] bridge0: port 1(bond0) entered disabled state [ 128.508407][ T8838] netlink: 'syz.2.1758': attribute type 4 has an invalid length. [ 128.509584][ T8822] bond0: entered allmulticast mode [ 128.521726][ T8822] bond_slave_0: entered allmulticast mode [ 128.525442][ T8840] loop1: detected capacity change from 0 to 256 [ 128.527437][ T8822] bond_slave_1: entered allmulticast mode [ 128.542750][ T8822] bridge0: port 1(bond0) entered blocking state [ 128.542882][ T8840] FAT-fs (loop1): bogus number of FAT sectors [ 128.549070][ T8822] bridge0: port 1(bond0) entered forwarding state [ 128.561701][ T8840] FAT-fs (loop1): Can't find a valid FAT filesystem [ 128.644183][ T8847] batadv0: entered promiscuous mode [ 128.657640][ T8847] vlan3: entered promiscuous mode [ 128.662951][ T8847] vlan3: entered allmulticast mode [ 128.668083][ T8847] batadv0: entered allmulticast mode [ 128.680392][ T8847] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 128.736266][ T8861] loop2: detected capacity change from 0 to 512 [ 128.757372][ T8861] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 128.773196][ T8861] EXT4-fs (loop2): 1 truncate cleaned up [ 128.780032][ T8861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.806848][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.816040][ T8873] loop0: detected capacity change from 0 to 512 [ 129.060661][ T8920] loop2: detected capacity change from 0 to 128 [ 129.070641][ T8920] ext4: Unknown parameter 'func' [ 129.094083][ T8928] loop0: detected capacity change from 0 to 512 [ 129.103267][ T8928] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 129.171157][ T8935] vhci_hcd vhci_hcd.2: invalid port number 96 [ 129.177297][ T8935] vhci_hcd vhci_hcd.2: default hub control req: 2000 vfffc i0060 l7 [ 129.186008][ T8935] SELinux: policydb version 1136856770 does not match my version range 15-35 [ 129.203565][ T8935] SELinux: failed to load policy [ 129.271486][ T8952] netlink: 'syz.0.1798': attribute type 5 has an invalid length. [ 129.512914][ T8973] loop5: detected capacity change from 0 to 512 [ 129.547891][ T8970] loop0: detected capacity change from 0 to 2048 [ 129.554992][ T8973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.598627][ T8973] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.611750][ T8973] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 4294967295 (only 1 groups) [ 129.636769][ T8970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.663825][ T5897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.694261][ T8988] bond0: entered promiscuous mode [ 129.699384][ T8988] bond_slave_0: entered promiscuous mode [ 129.705097][ T8988] bond_slave_1: entered promiscuous mode [ 129.731742][ T8988] ipvlan1: entered promiscuous mode [ 129.740897][ T8988] ipvlan1: left promiscuous mode [ 129.747418][ T8988] bond0: left promiscuous mode [ 129.752312][ T8988] bond_slave_0: left promiscuous mode [ 129.757780][ T8988] bond_slave_1: left promiscuous mode [ 129.775418][ T7430] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 129.797144][ T7430] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 129.809748][ T7430] EXT4-fs (loop0): This should not happen!! Data will be lost [ 129.809748][ T7430] [ 129.819596][ T7430] EXT4-fs (loop0): Total free blocks count 0 [ 129.825697][ T7430] EXT4-fs (loop0): Free/Dirty block details [ 129.831655][ T7430] EXT4-fs (loop0): free_blocks=4096 [ 129.836874][ T7430] EXT4-fs (loop0): dirty_blocks=160 [ 129.842080][ T7430] EXT4-fs (loop0): Block reservation details [ 129.848044][ T7430] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 129.860014][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.892704][ T8997] program syz.5.1815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.947253][ T9004] loop0: detected capacity change from 0 to 512 [ 129.964975][ T9006] delete_channel: no stack [ 129.969808][ T9008] netlink: 'syz.2.1819': attribute type 21 has an invalid length. [ 129.972770][ T9004] EXT4-fs (loop0): orphan cleanup on readonly fs [ 129.977633][ T9008] IPv6: NLM_F_CREATE should be specified when creating new route [ 129.983973][ T9004] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 130.016116][ T9008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.023362][ T9008] IPv6: NLM_F_CREATE should be set when creating new route [ 130.030567][ T9008] IPv6: NLM_F_CREATE should be set when creating new route [ 130.037749][ T9008] IPv6: NLM_F_CREATE should be set when creating new route [ 130.041044][ T9004] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 130.064118][ T9004] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1817: attempt to clear invalid blocks 2 len 1 [ 130.091539][ T9004] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1817: invalid indirect mapped block 1819239214 (level 0) [ 130.106562][ T9004] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1817: invalid indirect mapped block 1819239214 (level 1) [ 130.135177][ T9004] EXT4-fs (loop0): 1 truncate cleaned up [ 130.143803][ T9004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.167247][ T9023] netlink: 'syz.2.1825': attribute type 12 has an invalid length. [ 130.198406][ T9004] 9p: Bad value for 'rfdno' [ 130.209228][ T9004] EXT4-fs: user quota file already specified [ 130.254727][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.311856][ T9043] netlink: 'syz.3.1831': attribute type 30 has an invalid length. [ 130.323016][ T41] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.334595][ T9043] team0: Port device team_slave_0 removed [ 130.342189][ T41] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.350718][ T41] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.359102][ T41] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.435531][ T9058] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.466199][ T9066] EXT4-fs: Ignoring removed bh option [ 130.476264][ T9058] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.505382][ T9066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.561672][ T5897] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.618911][ T3318] EXT4-fs error (device loop0): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 130.641555][ T3318] EXT4-fs error (device loop0): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 130.686944][ T8848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.716936][ T7436] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.726843][ T7436] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.742733][ T9113] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 130.780599][ T7436] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.790523][ T7436] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.833584][ T9130] bond2: (slave bond_slave_1): Device is not our slave [ 130.840538][ T9130] bond2: option active_slave: invalid value (bond_slave_1) [ 130.891393][ T9130] bond2 (unregistering): Released all slaves [ 130.917845][ T7436] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.927656][ T7436] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.984575][ T9149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.029930][ T7436] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.039780][ T7436] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.063712][ T9149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.148497][ T7436] bond0: left allmulticast mode [ 131.153420][ T7436] bond_slave_0: left allmulticast mode [ 131.159116][ T7436] bond_slave_1: left allmulticast mode [ 131.164568][ T7436] vlan3: left allmulticast mode [ 131.169436][ T7436] batadv0: left allmulticast mode [ 131.174694][ T7436] bridge0: port 1(bond0) entered disabled state [ 131.199001][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.208772][ T7436] bridge_slave_1: left allmulticast mode [ 131.214541][ T7436] bridge_slave_1: left promiscuous mode [ 131.220286][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.240590][ T7436] batman_adv: batadv0: Interface deactivated: ip6gretap0 [ 131.293280][ T7436] batman_adv: batadv0: Removing interface: ip6gretap0 [ 131.317790][ T7436] bond1 (unregistering): (slave erspan0): Releasing active interface [ 131.343891][ T7436] bond2 (unregistering): (slave gretap1): Releasing active interface [ 131.521123][ T7436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.530396][ T7436] bond_slave_0: left promiscuous mode [ 131.538358][ T7436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.560504][ T7436] bond_slave_1: left promiscuous mode [ 131.567138][ T7436] bond0 (unregistering): (slave vlan3): Releasing backup interface [ 131.582168][ T7436] vlan3: left promiscuous mode [ 131.587545][ T7436] batadv0: left promiscuous mode [ 131.598133][ T7436] bond0 (unregistering): Released all slaves [ 131.606266][ T9186] xt_TCPMSS: Only works on TCP SYN packets [ 131.613210][ T7436] bond1 (unregistering): Released all slaves [ 131.621364][ T9186] sctp: [Deprecated]: syz.3.1872 (pid 9186) Use of int in maxseg socket option. [ 131.621364][ T9186] Use struct sctp_assoc_value instead [ 131.636283][ T7436] bond2 (unregistering): Released all slaves [ 131.648665][ T9176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.658856][ T9185] __nla_validate_parse: 15 callbacks suppressed [ 131.658872][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1878'. [ 131.712164][ T7436] tipc: Left network mode [ 131.731404][ T9192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1880'. [ 131.742744][ T7436] hsr_slave_0: left promiscuous mode [ 131.749623][ T7436] hsr_slave_1: left promiscuous mode [ 131.755304][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.762720][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.815566][ T7436] batman_adv: batadv0: Removing interface: macvtap1 [ 131.854209][ T7436] batman_adv: batadv0: Removing interface: macvtap2 [ 131.883773][ T7436] veth0_virt_wifi: left promiscuous mode [ 131.897603][ T7436] veth1_macvtap: left promiscuous mode [ 131.903272][ T7436] veth0_macvtap: left promiscuous mode [ 131.995516][ T9135] chnl_net:caif_netlink_parms(): no params data found [ 132.049477][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 132.049493][ T29] audit: type=1400 audit(1769701552.328:2967): avc: denied { read open } for pid=9229 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.055738][ T9135] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.088086][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.088918][ T29] audit: type=1400 audit(1769701552.358:2968): avc: denied { getattr } for pid=9229 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.123809][ T9135] bridge_slave_0: entered allmulticast mode [ 132.153399][ T9135] bridge_slave_0: entered promiscuous mode [ 132.160413][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1891'. [ 132.182237][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.189423][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.196693][ T9135] bridge_slave_1: entered allmulticast mode [ 132.196935][ T29] audit: type=1400 audit(1769701552.468:2969): avc: denied { add_name } for pid=9227 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.225121][ T29] audit: type=1400 audit(1769701552.468:2970): avc: denied { create } for pid=9227 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.225806][ T9135] bridge_slave_1: entered promiscuous mode [ 132.247490][ T29] audit: type=1400 audit(1769701552.468:2971): avc: denied { write } for pid=9227 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=9864 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.279434][ T29] audit: type=1400 audit(1769701552.468:2972): avc: denied { append } for pid=9227 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=9864 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.338218][ T29] audit: type=1400 audit(1769701552.598:2973): avc: denied { remove_name } for pid=9253 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=9864 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.361699][ T29] audit: type=1400 audit(1769701552.598:2974): avc: denied { unlink } for pid=9253 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=9864 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 132.386063][ T9249] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1894'. [ 132.396447][ T9135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.412039][ T9135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.431840][ T29] audit: type=1326 audit(1769701552.708:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.5.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 132.476808][ T9135] team0: Port device team_slave_0 added [ 132.493253][ T9135] team0: Port device team_slave_1 added [ 132.503972][ T29] audit: type=1326 audit(1769701552.708:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9255 comm="syz.5.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 132.536705][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.543699][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.569752][ T9135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.586279][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 132.586804][ T9135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.602205][ T9135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.628140][ T9135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.639887][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'. [ 132.689056][ T7436] IPVS: stop unused estimator thread 0... [ 132.712588][ T9135] hsr_slave_0: entered promiscuous mode [ 132.729235][ T9135] hsr_slave_1: entered promiscuous mode [ 132.735976][ T9135] debugfs: 'hsr0' already exists in 'hsr' [ 132.741774][ T9135] Cannot create hsr debugfs directory [ 132.779240][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1905'. [ 132.986788][ T9327] set_capacity_and_notify: 4 callbacks suppressed [ 132.986802][ T9327] loop5: detected capacity change from 0 to 1024 [ 132.989714][ T9135] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 133.005921][ T9327] EXT4-fs: Ignoring removed bh option [ 133.036983][ T9135] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 133.044251][ T9327] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 133.069554][ T9135] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 133.092430][ T9135] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 133.113169][ T9327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.143043][ T5897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.231541][ T9135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.259281][ T9135] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.306954][ T7430] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.314074][ T7430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.350313][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.357408][ T7430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.413984][ T9135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.543264][ T9135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.583218][ T9416] Process accounting resumed [ 133.669723][ T9390] loop1: detected capacity change from 0 to 1024 [ 133.811692][ T9135] veth0_vlan: entered promiscuous mode [ 133.825513][ T9454] loop1: detected capacity change from 0 to 1024 [ 133.830892][ T9135] veth1_vlan: entered promiscuous mode [ 133.869893][ T9135] veth0_macvtap: entered promiscuous mode [ 133.881141][ T9135] veth1_macvtap: entered promiscuous mode [ 133.887591][ T9454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.904798][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.919639][ T9135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.953842][ T7436] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.962829][ T7436] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.971624][ T7436] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.989273][ T7430] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.085309][ T9471] netlink: 'syz.5.1946': attribute type 15 has an invalid length. [ 134.203573][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.339790][ T9495] netlink: 'syz.5.1956': attribute type 9 has an invalid length. [ 134.350857][ T9495] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 134.474321][ T9515] netlink: 'syz.5.1963': attribute type 10 has an invalid length. [ 134.494355][ T9515] veth0_vlan: entered allmulticast mode [ 134.507998][ T9515] veth0_vlan: left promiscuous mode [ 134.514119][ T9515] veth0_vlan: entered promiscuous mode [ 134.522173][ T9515] team0: Device veth0_vlan failed to register rx_handler [ 134.599999][ T9522] loop1: detected capacity change from 0 to 512 [ 134.609978][ T9522] EXT4-fs: Ignoring removed bh option [ 134.615399][ T9522] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.629416][ T9522] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 134.641634][ T9522] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 134.659603][ T9522] EXT4-fs (loop1): orphan cleanup on readonly fs [ 134.682064][ T9522] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1951: Failed to acquire dquot type 1 [ 134.696439][ T9522] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1951: Invalid block bitmap block 0 in block_group 0 [ 134.710345][ T9522] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1951: Invalid block bitmap block 0 in block_group 0 [ 134.710641][ T9522] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1951: Invalid block bitmap block 0 in block_group 0 [ 134.710798][ T9522] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1951: Failed to acquire dquot type 1 [ 134.711159][ T9522] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1951: Failed to acquire dquot type 1 [ 134.717112][ T9522] EXT4-fs (loop1): 1 orphan inode deleted [ 134.791313][ T9552] loop6: detected capacity change from 0 to 512 [ 134.803325][ T9552] EXT4-fs: Mount option(s) incompatible with ext2 [ 134.926621][ T9568] loop6: detected capacity change from 0 to 512 [ 134.934654][ T9568] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 135.063880][ T9583] loop5: detected capacity change from 0 to 512 [ 135.075632][ T9583] EXT4-fs: Ignoring removed nobh option [ 135.118657][ T9583] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.270141][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1996'. [ 135.307557][ T9616] loop1: detected capacity change from 0 to 2048 [ 135.317705][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1998'. [ 135.337775][ T9609] loop6: detected capacity change from 0 to 512 [ 135.356520][ T9609] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 135.417870][ T9609] EXT4-fs (loop6): 1 truncate cleaned up [ 135.478253][ T9640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 135.502235][ T9644] loop5: detected capacity change from 0 to 1024 [ 135.513165][ T9640] msdos: Unknown parameter 'nodts' [ 135.627218][ T9662] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2021'. [ 135.649712][ T9670] netlink: 'syz.1.2023': attribute type 10 has an invalid length. [ 135.840677][ T9706] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 135.841746][ T9706] @0Ù: renamed from bond_slave_1 (while UP) [ 136.017536][ T9716] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2040: iget: bad i_size value: 38620345925642 [ 136.056302][ T9723] FAULT_INJECTION: forcing a failure. [ 136.056302][ T9723] name failslab, interval 1, probability 0, space 0, times 0 [ 136.056583][ T9716] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2040: couldn't read orphan inode 15 (err -117) [ 136.069205][ T9723] CPU: 0 UID: 0 PID: 9723 Comm: syz.1.2043 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 136.069248][ T9723] Tainted: [W]=WARN [ 136.069255][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.069269][ T9723] Call Trace: [ 136.069277][ T9723] [ 136.069285][ T9723] __dump_stack+0x1d/0x30 [ 136.069366][ T9723] dump_stack_lvl+0x95/0xd0 [ 136.069389][ T9723] dump_stack+0x15/0x1b [ 136.069411][ T9723] should_fail_ex+0x263/0x280 [ 136.069447][ T9723] should_failslab+0x8c/0xb0 [ 136.069471][ T9723] kmem_cache_alloc_noprof+0x68/0x490 [ 136.069498][ T9723] ? audit_log_start+0x34c/0x730 [ 136.069644][ T9723] audit_log_start+0x34c/0x730 [ 136.069673][ T9723] ? kstrtouint+0x76/0xc0 [ 136.069764][ T9723] audit_seccomp+0x47/0x100 [ 136.069850][ T9723] ? __seccomp_filter+0x8db/0x1350 [ 136.069873][ T9723] __seccomp_filter+0x8ec/0x1350 [ 136.069896][ T9723] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.069968][ T9723] ? vfs_write+0x86e/0x9f0 [ 136.070044][ T9723] ? __rcu_read_unlock+0x4e/0x70 [ 136.070075][ T9723] ? __fget_files+0x184/0x1c0 [ 136.070101][ T9723] __secure_computing+0x81/0x150 [ 136.070177][ T9723] syscall_trace_enter+0xce/0x1e0 [ 136.070211][ T9723] do_syscall_64+0x9a/0x2a0 [ 136.070263][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.070305][ T9723] RIP: 0033:0x7f7f6725aeb9 [ 136.070322][ T9723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.070374][ T9723] RSP: 002b:00007f7f65cb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.070395][ T9723] RAX: ffffffffffffffda RBX: 00007f7f674d5fa0 RCX: 00007f7f6725aeb9 [ 136.070411][ T9723] RDX: 0000000000000001 RSI: 0000200000001ec0 RDI: 0000000000000003 [ 136.070425][ T9723] RBP: 00007f7f65cb7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.070439][ T9723] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 136.070453][ T9723] R13: 00007f7f674d6038 R14: 00007f7f674d5fa0 R15: 00007ffe78b6e0b8 [ 136.070489][ T9723] [ 136.314511][ T41] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 136.333548][ T41] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 131075 with max blocks 1 with error 28 [ 136.346299][ T41] EXT4-fs (loop5): This should not happen!! Data will be lost [ 136.346299][ T41] [ 136.355968][ T41] EXT4-fs (loop5): Total free blocks count 0 [ 136.362177][ T41] EXT4-fs (loop5): Free/Dirty block details [ 136.368099][ T41] EXT4-fs (loop5): free_blocks=0 [ 136.373235][ T41] EXT4-fs (loop5): dirty_blocks=1 [ 136.378261][ T41] EXT4-fs (loop5): Block reservation details [ 136.384268][ T41] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 136.416796][ T9736] xt_CT: No such helper "snmp_trap" [ 136.840078][ T9819] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2080: inode has both inline data and extents flags [ 136.856889][ T9819] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2080: couldn't read orphan inode 15 (err -117) [ 136.980642][ T9844] netlink: 'syz.3.2088': attribute type 2 has an invalid length. [ 137.243781][ T7436] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.253635][ T7436] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.300614][ T7436] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.310473][ T7436] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.373632][ T7436] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.383450][ T7436] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.450845][ T7436] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.460672][ T7436] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.511491][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 137.511505][ T29] audit: type=1326 audit(1769701557.788:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6725aeb9 code=0x7ffc0000 [ 137.549681][ T9848] chnl_net:caif_netlink_parms(): no params data found [ 137.575564][ T29] audit: type=1326 audit(1769701557.818:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7f6725aeb9 code=0x7ffc0000 [ 137.599029][ T29] audit: type=1326 audit(1769701557.818:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6725aeb9 code=0x7ffc0000 [ 137.622430][ T29] audit: type=1326 audit(1769701557.818:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f6725aeb9 code=0x7ffc0000 [ 137.645932][ T29] audit: type=1326 audit(1769701557.818:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6725aeb9 code=0x7ffc0000 [ 137.669387][ T29] audit: type=1326 audit(1769701557.818:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7f6725aeb9 code=0x7ffc0000 [ 137.692813][ T29] audit: type=1326 audit(1769701557.818:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6725aeb9 code=0x7ffc0000 [ 137.716301][ T29] audit: type=1326 audit(1769701557.818:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7f6725aeb9 code=0x7ffc0000 [ 137.739711][ T29] audit: type=1326 audit(1769701557.818:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f6725aeb9 code=0x7ffc0000 [ 137.763080][ T29] audit: type=1326 audit(1769701557.818:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.1.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7f6725aeb9 code=0x7ffc0000 [ 137.809473][ T9848] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.816594][ T9848] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.825620][ T9848] bridge_slave_0: entered allmulticast mode [ 137.832359][ T9848] bridge_slave_0: entered promiscuous mode [ 137.839342][ T9848] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.846472][ T9848] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.853782][ T9848] bridge_slave_1: entered allmulticast mode [ 137.860523][ T9848] bridge_slave_1: entered promiscuous mode [ 137.887407][ T9888] bridge1: entered promiscuous mode [ 137.893329][ T7436] veth0_to_bridge: left allmulticast mode [ 137.899186][ T7436] veth0_to_bridge: left promiscuous mode [ 137.905059][ T7436] bridge0: port 3(veth0_to_bridge) entered disabled state [ 137.936118][ T7436] bridge_slave_1: left allmulticast mode [ 137.941891][ T7436] bridge_slave_1: left promiscuous mode [ 137.947575][ T7436] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.992613][ T7436] bridge_slave_0: left allmulticast mode [ 137.998372][ T7436] bridge_slave_0: left promiscuous mode [ 138.004162][ T7436] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.110656][ T7436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.120939][ T7436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.129918][ T7436] bond0 (unregistering): Released all slaves [ 138.137702][ T7436] bond1 (unregistering): Released all slaves [ 138.145888][ T7436] bond2 (unregistering): Released all slaves [ 138.164854][ T9848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.176724][ T9848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.204280][ T7436] macvlan1: left promiscuous mode [ 138.215038][ T7436] dummy0: left promiscuous mode [ 138.224503][ T7436] hsr_slave_0: left promiscuous mode [ 138.231198][ T9936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9936 comm=syz.1.2112 [ 138.243757][ T7436] hsr_slave_1: left promiscuous mode [ 138.249980][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.257357][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.265312][ T7436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.272731][ T7436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.285512][ T7436] veth0_macvtap: left promiscuous mode [ 138.291374][ T7436] veth1_vlan: left allmulticast mode [ 138.296685][ T7436] veth1_vlan: left promiscuous mode [ 138.301965][ T7436] veth0_vlan: left promiscuous mode [ 138.403676][ T9848] team0: Port device team_slave_0 added [ 138.419565][ T9848] team0: Port device team_slave_1 added [ 138.442008][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.448988][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.474901][ T9848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.486660][ T9848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.493657][ T9848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.519573][ T9848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.554318][ T9848] hsr_slave_0: entered promiscuous mode [ 138.560312][ T9848] hsr_slave_1: entered promiscuous mode [ 138.566200][ T9848] debugfs: 'hsr0' already exists in 'hsr' [ 138.571962][ T9848] Cannot create hsr debugfs directory [ 138.697095][ T9848] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 138.744690][ T9848] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 138.777561][ T9848] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 138.803745][ T9848] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 138.915555][ T9848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.954163][ T9848] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.969629][ T7436] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.976711][ T7436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.005854][T10011] set_capacity_and_notify: 6 callbacks suppressed [ 139.005872][T10011] loop6: detected capacity change from 0 to 736 [ 139.022676][ T7436] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.029818][ T7436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.043689][T10013] __nla_validate_parse: 4 callbacks suppressed [ 139.043708][T10013] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2133'. [ 139.067719][ T9848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.078207][ T9848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.178958][T10030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2137'. [ 139.221387][T10037] batman_adv: batadv0: Adding interface: dummy0 [ 139.227679][T10037] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.298217][T10037] batman_adv: batadv0: Interface activated: dummy0 [ 139.338638][ T9848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.465874][T10077] loop5: detected capacity change from 0 to 512 [ 139.503670][T10077] EXT4-fs: Ignoring removed nobh option [ 139.522599][T10077] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 139.564669][T10077] EXT4-fs (loop5): 1 truncate cleaned up [ 139.594448][T10077] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.2146: corrupted xattr block 33: invalid header [ 139.620139][T10077] EXT4-fs (loop5): Remounting filesystem read-only [ 139.626676][T10077] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 139.667558][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2149'. [ 139.682043][ T9848] veth0_vlan: entered promiscuous mode [ 139.704664][ T9848] veth1_vlan: entered promiscuous mode [ 139.743135][ T9848] veth0_macvtap: entered promiscuous mode [ 139.760492][ T9848] veth1_macvtap: entered promiscuous mode [ 139.777104][ T9848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.798327][ T9848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.798867][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.817820][ T3330] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.828298][ T3330] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.855899][ T3330] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.907544][ T3330] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.008089][T10141] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2159'. [ 140.162509][T10154] loop6: detected capacity change from 0 to 128 [ 140.231787][T10154] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.384077][T10183] netlink: 'syz.3.2173': attribute type 1 has an invalid length. [ 140.403198][T10183] xt_hashlimit: size too large, truncated to 1048576 [ 140.417461][T10186] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2175'. [ 140.558395][T10191] tipc: Can't bind to reserved service type 2 [ 140.669295][T10208] loop6: detected capacity change from 0 to 512 [ 140.686410][T10208] EXT4-fs: test_dummy_encryption option not supported [ 140.766422][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2187'. [ 140.995251][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.004006][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.021330][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2197'. [ 141.095167][T10249] loop7: detected capacity change from 0 to 1024 [ 141.097349][T10251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2200'. [ 141.155779][T10249] EXT4-fs: Mount option(s) incompatible with ext2 [ 141.204742][T10249] netlink: 'syz.7.2198': attribute type 13 has an invalid length. [ 141.212715][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2198'. [ 141.253880][ T3330] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.265149][T10249] netlink: 'syz.7.2198': attribute type 13 has an invalid length. [ 141.271096][T10255] loop5: detected capacity change from 0 to 1764 [ 141.273023][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2198'. [ 141.289812][ T3330] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.298667][ T3330] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.342293][ T3330] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.547149][T10271] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 141.858543][T10293] loop1: detected capacity change from 0 to 512 [ 141.872810][T10293] EXT4-fs: Ignoring removed oldalloc option [ 141.930745][T10293] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.532302][T10325] loop5: detected capacity change from 0 to 512 [ 142.544888][T10325] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.585902][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 142.585919][ T29] audit: type=1326 audit(1769701562.858:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10336 comm="syz.1.2227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f6725aeb9 code=0x0 [ 142.624609][T10325] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2223: invalid indirect mapped block 4294967295 (level 0) [ 142.653030][T10338] loop7: detected capacity change from 0 to 1024 [ 142.675304][T10338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.684605][T10325] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2223: invalid indirect mapped block 4294967295 (level 1) [ 142.699876][T10325] EXT4-fs (loop5): 1 orphan inode deleted [ 142.705625][T10325] EXT4-fs (loop5): 1 truncate cleaned up [ 142.866848][T10353] loop7: detected capacity change from 0 to 128 [ 142.939249][T10353] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.976311][T10353] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.038171][ T29] audit: type=1400 audit(1769701563.308:4012): avc: denied { read } for pid=10351 comm="syz.7.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 143.242490][T10378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.378631][ T29] audit: type=1400 audit(1769701563.628:4013): avc: denied { ioctl } for pid=10379 comm="syz.5.2243" path="socket:[29961]" dev="sockfs" ino=29961 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.468052][T10402] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 143.634088][ T29] audit: type=1400 audit(1769701563.908:4014): avc: denied { create } for pid=10414 comm="syz.1.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.659152][ T29] audit: type=1400 audit(1769701563.938:4015): avc: denied { getopt } for pid=10414 comm="syz.1.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 143.678674][ T29] audit: type=1400 audit(1769701563.938:4016): avc: denied { ioctl } for pid=10414 comm="syz.1.2254" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 143.789756][ T29] audit: type=1326 audit(1769701564.068:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.3.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bc46aeb9 code=0x7ffc0000 [ 143.813300][ T29] audit: type=1326 audit(1769701564.068:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.3.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bc46aeb9 code=0x7ffc0000 [ 143.850454][T10433] netlink: 'syz.3.2260': attribute type 1 has an invalid length. [ 143.862947][ T29] audit: type=1326 audit(1769701564.118:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.3.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41bc46aeb9 code=0x7ffc0000 [ 143.886544][ T29] audit: type=1326 audit(1769701564.118:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10432 comm="syz.3.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bc46aeb9 code=0x7ffc0000 [ 143.977561][T10433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.330425][T10462] __nla_validate_parse: 8 callbacks suppressed [ 144.330444][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2263'. [ 144.493101][T10467] set_capacity_and_notify: 2 callbacks suppressed [ 144.493117][T10467] loop5: detected capacity change from 0 to 128 [ 144.521075][T10467] FAT-fs (loop5): bogus number of FAT structure [ 144.527349][T10467] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 144.536529][T10467] FAT-fs (loop5): Can't find a valid FAT filesystem [ 144.980102][T10525] loop5: detected capacity change from 0 to 256 [ 145.013105][T10503] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 145.023321][T10503] FAT-fs (loop5): Filesystem has been set read-only [ 145.071603][T10503] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 145.114298][T10542] loop1: detected capacity change from 0 to 512 [ 145.120780][T10503] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 145.154896][T10542] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.349366][ T3440] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 145.393159][ T3440] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 145.405548][ T3440] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.405548][ T3440] [ 145.415230][ T3440] EXT4-fs (loop1): Total free blocks count 0 [ 145.421234][ T3440] EXT4-fs (loop1): Free/Dirty block details [ 145.427191][ T3440] EXT4-fs (loop1): free_blocks=65280 [ 145.432515][ T3440] EXT4-fs (loop1): dirty_blocks=1119 [ 145.437797][ T3440] EXT4-fs (loop1): Block reservation details [ 145.443787][ T3440] EXT4-fs (loop1): i_reserved_data_blocks=1119 [ 145.462325][T10572] loop5: detected capacity change from 0 to 512 [ 145.471216][T10572] EXT4-fs: inline encryption not supported [ 145.491732][ T7424] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1118 with error 28 [ 145.504432][ T7424] EXT4-fs (loop1): This should not happen!! Data will be lost [ 145.504432][ T7424] [ 145.521664][T10572] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 145.555301][T10572] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #3: comm syz.5.2286: iget: special inode unallocated [ 145.589525][T10572] EXT4-fs (loop5): no journal found [ 145.599497][T10510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2271'. [ 145.608523][T10510] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2271'. [ 145.729795][T10595] loop1: detected capacity change from 0 to 256 [ 145.736557][T10595] FAT-fs (loop1): bogus sectors per cluster 0 [ 145.742773][T10595] FAT-fs (loop1): Can't find a valid FAT filesystem [ 145.838949][T10605] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2294'. [ 145.847965][T10605] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2294'. [ 145.856978][T10605] netlink: 'syz.7.2294': attribute type 5 has an invalid length. [ 145.864767][T10605] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2294'. [ 146.022877][T10624] loop1: detected capacity change from 0 to 128 [ 146.029792][T10624] vfat: Bad value for 'shortname' [ 146.135648][T10621] netlink: 'syz.3.2301': attribute type 13 has an invalid length. [ 146.143566][T10621] netlink: 'syz.3.2301': attribute type 17 has an invalid length. [ 146.252721][T10621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.288427][T10621] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.297220][T10621] dummy0: left promiscuous mode [ 146.311326][T10660] netlink: 'syz.1.2311': attribute type 3 has an invalid length. [ 146.311343][T10660] netlink: 172620 bytes leftover after parsing attributes in process `syz.1.2311'. [ 146.312288][T10658] loop1: detected capacity change from 0 to 512 [ 146.319533][T10661] netlink: 'syz.6.2309': attribute type 4 has an invalid length. [ 146.341458][T10665] sock: sock_set_timeout: `syz.1.2315' (pid 10665) tries to set negative timeout [ 146.345926][T10621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.353744][T10647] netlink: 'syz.6.2309': attribute type 4 has an invalid length. [ 146.373114][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2314'. [ 146.461548][T10682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10682 comm=syz.6.2320 [ 146.469606][T10684] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 146.473318][T10682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.477342][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2320'. [ 146.477359][T10682] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2320'. [ 146.592105][T10695] loop5: detected capacity change from 0 to 1024 [ 146.909097][T10724] lo speed is unknown, defaulting to 1000 [ 146.914872][T10724] lo speed is unknown, defaulting to 1000 [ 146.921732][T10724] lo speed is unknown, defaulting to 1000 [ 146.927814][T10724] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.953197][T10724] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 146.963049][T10724] lo speed is unknown, defaulting to 1000 [ 146.969280][T10724] lo speed is unknown, defaulting to 1000 [ 146.975427][T10724] lo speed is unknown, defaulting to 1000 [ 146.985423][T10724] lo speed is unknown, defaulting to 1000 [ 146.992056][T10728] loop7: detected capacity change from 0 to 1024 [ 147.047432][T10728] EXT4-fs mount: 24 callbacks suppressed [ 147.047519][T10728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.065562][T10724] lo speed is unknown, defaulting to 1000 [ 147.072415][T10724] lo speed is unknown, defaulting to 1000 [ 147.113155][ T9848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.152674][T10730] loop1: detected capacity change from 0 to 256 [ 147.201895][T10730] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.210692][T10730] FAT-fs (loop1): Filesystem has been set read-only [ 147.222145][T10730] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.251588][T10730] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.264095][T10729] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.272877][T10729] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.281589][T10729] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.290616][T10729] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.299389][T10729] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.308072][T10729] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.308239][T10730] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 147.338214][T10755] netlink: 'syz.5.2344': attribute type 1 has an invalid length. [ 147.390925][T10755] bond2: entered promiscuous mode [ 147.396052][T10755] bond2: entered allmulticast mode [ 147.435488][T10755] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.450757][T10751] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 147.488607][T10755] bridge1: entered promiscuous mode [ 147.494089][T10755] bridge1: entered allmulticast mode [ 147.511032][ T7424] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 147.544267][T10755] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 147.628962][ T7427] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 147.668093][T10751] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8) [ 147.676752][T10751] FAT-fs (loop7): Filesystem has been set read-only [ 147.695044][T10751] FAT-fs (loop7): error, clusters badly computed (0 != 1) [ 147.716665][T10751] FAT-fs (loop7): error, clusters badly computed (1 != 2) [ 147.741857][T10751] FAT-fs (loop7): error, clusters badly computed (2 != 3) [ 147.749701][T10751] FAT-fs (loop7): error, clusters badly computed (3 != 4) [ 147.905769][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 147.905785][ T29] audit: type=1326 audit(1769701568.158:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.5.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 147.935674][ T29] audit: type=1326 audit(1769701568.168:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.5.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 147.959235][ T29] audit: type=1326 audit(1769701568.168:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.5.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 147.982800][ T29] audit: type=1326 audit(1769701568.168:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.5.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 148.006369][ T29] audit: type=1326 audit(1769701568.168:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.5.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 148.029858][ T29] audit: type=1326 audit(1769701568.168:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.5.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 148.053320][ T29] audit: type=1326 audit(1769701568.168:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.5.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 148.076805][ T29] audit: type=1326 audit(1769701568.168:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.5.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 148.100193][ T29] audit: type=1326 audit(1769701568.168:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.5.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 148.123952][ T29] audit: type=1326 audit(1769701568.168:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.5.2355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2bf3c7aeb9 code=0x7ffc0000 [ 148.167632][T10772] Set syz1 is full, maxelem 65536 reached [ 148.183083][T10803] xt_hashlimit: size too large, truncated to 1048576 [ 148.222799][T10807] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.238891][T10807] EXT4-fs: Ignoring removed nobh option [ 148.301866][T10811] iso9660: Unknown parameter 'p' [ 148.307678][T10807] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.418285][ T9848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.434861][ T3394] kernel read not supported for file /183/net/ip6_flowlabel (pid: 3394 comm: kworker/0:4) [ 148.449101][ T8050] loop5: p1 p2 p3 p4 [ 148.454370][ T8050] loop5: p2 start 117440512 is beyond EOD, truncated [ 148.468510][ T8050] loop5: p4 size 589824 extends beyond EOD, truncated [ 148.479189][T10829] loop5: p1 p2 p3 p4 [ 148.482850][T10842] x_tables: duplicate underflow at hook 3 [ 148.486018][T10829] loop5: p2 start 117440512 is beyond EOD, truncated [ 148.505248][T10829] loop5: p4 size 589824 extends beyond EOD, truncated [ 148.568115][ T7636] udevd[7636]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 148.569799][ T8050] udevd[8050]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 148.589248][ T8047] udevd[8047]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 148.630054][ T8047] udevd[8047]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 148.631867][ T7636] udevd[7636]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 148.641747][ T8050] udevd[8050]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 148.678675][T10868] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.678700][T10868] EXT4-fs: Ignoring removed orlov option [ 148.678732][T10868] EXT4-fs: dax option not supported [ 149.226986][T10876] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 149.309889][T10884] netlink: 'syz.6.2386': attribute type 2 has an invalid length. [ 149.357462][T10902] tmpfs: Unknown parameter 'mpotz' [ 149.363211][T10902] __nla_validate_parse: 9 callbacks suppressed [ 149.363262][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2384'. [ 149.439763][T10901] delete_channel: no stack [ 149.552598][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 149.580590][T10931] set_capacity_and_notify: 6 callbacks suppressed [ 149.580606][T10931] loop1: detected capacity change from 0 to 8192 [ 149.632007][T10946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.661138][ T8050] loop1: p1 p2 p4 [ 149.667536][ T8050] loop1: p1 start 2130708480 is beyond EOD, truncated [ 149.674447][ T8050] loop1: p2 size 8388608 extends beyond EOD, truncated [ 149.693774][ T8050] loop1: p4 size 262144 extends beyond EOD, truncated [ 149.713568][T10931] loop1: p1 p2 p4 [ 149.717467][T10931] loop1: p1 start 2130708480 is beyond EOD, truncated [ 149.724364][T10931] loop1: p2 size 8388608 extends beyond EOD, truncated [ 149.750508][T10931] loop1: p4 size 262144 extends beyond EOD, truncated [ 149.797362][T10954] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2409'. [ 149.824849][ T7636] udevd[7636]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 149.825354][ T8050] udevd[8050]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 149.874911][ T7636] udevd[7636]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 149.885564][ T8050] udevd[8050]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 149.897851][T10954] veth3: entered allmulticast mode [ 150.155484][T10984] loop1: detected capacity change from 0 to 128 [ 150.212978][T10957] chnl_net:caif_netlink_parms(): no params data found [ 150.265459][T11000] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 150.277598][T11000] bond0: (slave lo): Error: Device can not be enslaved while up [ 150.299820][T10984] syz.1.2416: attempt to access beyond end of device [ 150.299820][T10984] loop1: rw=8390659, sector=104, nr_sectors = 937 limit=128 [ 150.353785][T10957] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.360970][T10957] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.371790][T10957] bridge_slave_0: entered allmulticast mode [ 150.378548][T10957] bridge_slave_0: entered promiscuous mode [ 150.386480][T10957] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.393579][T10957] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.400895][T10957] bridge_slave_1: entered allmulticast mode [ 150.408876][T10957] bridge_slave_1: entered promiscuous mode [ 150.440485][T10957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.470361][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2427'. [ 150.480479][T10957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.483306][T11026] loop5: detected capacity change from 0 to 512 [ 150.508964][T10957] team0: Port device team_slave_0 added [ 150.517134][T11026] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.2428: corrupted xattr block 95: invalid header [ 150.532933][T10957] team0: Port device team_slave_1 added [ 150.550468][T11026] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2428: bg 0: block 7: invalid block bitmap [ 150.577287][T10957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.581377][T11026] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 150.584351][T10957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.618938][T10957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.619304][T11026] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.2428: corrupted xattr block 95: invalid header [ 150.659593][ T7429] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.683742][T11026] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 150.699729][T10957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.706734][T10957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.712473][T11026] EXT4-fs (loop5): 1 orphan inode deleted [ 150.732724][T10957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.745701][T11026] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.780183][ T7429] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.791080][ T5897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.814418][T11050] loop7: detected capacity change from 0 to 256 [ 150.835571][T11052] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 150.851603][T11052] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36880 sclass=netlink_route_socket pid=11052 comm=syz.5.2435 [ 150.879145][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2434'. [ 150.896360][T10957] hsr_slave_0: entered promiscuous mode [ 150.921475][T10957] hsr_slave_1: entered promiscuous mode [ 150.952804][T10957] debugfs: 'hsr0' already exists in 'hsr' [ 150.958559][T10957] Cannot create hsr debugfs directory [ 150.965986][ T7429] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.993038][T11071] sctp: [Deprecated]: syz.7.2440 (pid 11071) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.993038][T11071] Use struct sctp_sack_info instead [ 151.040183][ T7429] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.101496][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 151.125123][T11081] bond0 (unregistering): Released all slaves [ 151.229509][ T7429] bridge_slave_1: left allmulticast mode [ 151.235199][ T7429] bridge_slave_1: left promiscuous mode [ 151.240928][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.278619][T11100] loop6: detected capacity change from 0 to 512 [ 151.301143][T11100] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 151.320283][ T10] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 151.354083][T11100] EXT4-fs (loop6): orphan cleanup on readonly fs [ 151.371848][T11100] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 151.394881][T11100] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 151.402987][T11100] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2445: corrupted inode contents [ 151.416414][T11100] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.2445: mark_inode_dirty error [ 151.428038][T11100] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2445: corrupted inode contents [ 151.440257][T11100] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.2445: mark_inode_dirty error [ 151.453197][T11100] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2445: corrupted inode contents [ 151.465353][T11100] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 151.474043][T11100] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.2445: corrupted inode contents [ 151.488854][T11100] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.2445: mark_inode_dirty error [ 151.500352][T11100] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 151.512782][ T7429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.521539][T11100] EXT4-fs (loop6): 1 truncate cleaned up [ 151.528611][ T7429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.531266][T11100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.550173][ T7429] bond0 (unregistering): Released all slaves [ 151.559208][ T7429] bond1 (unregistering): Released all slaves [ 151.567710][ T7429] bond2 (unregistering): Released all slaves [ 151.580302][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2445'. [ 151.604329][ T9135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.644367][ T7429] IPVS: stopping backup sync thread 6635 ... [ 151.672536][ T7429] hsr_slave_0: left promiscuous mode [ 151.679042][ T7429] hsr_slave_1: left promiscuous mode [ 151.692355][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.759419][ T7429] team0 (unregistering): Port device team_slave_1 removed [ 151.766426][T11140] loop1: detected capacity change from 0 to 1024 [ 151.776541][T11139] loop5: detected capacity change from 0 to 128 [ 151.778927][T11140] EXT4-fs: Ignoring removed orlov option [ 151.817107][T11139] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 151.825603][T11139] System zones: 1-3, 19-19, 35-36 [ 151.831890][T11139] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 151.845372][T11140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.859472][T11139] ext4 filesystem being mounted at /299/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.920348][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.939314][ T5897] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.129543][T11179] xt_l2tp: invalid flags combination: 0 [ 152.133494][T10957] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.149743][T10957] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.167344][T10957] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.176541][T10957] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.189531][ T7429] IPVS: stop unused estimator thread 0... [ 152.229861][T10957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.241316][T10957] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.260916][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.267993][ T7429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.279604][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.286666][ T7429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.286819][T11196] loop1: detected capacity change from 0 to 512 [ 152.306250][T10957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.316667][T10957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.322389][T11196] ext4: Unknown parameter 'smackfsdef' [ 152.382382][T10957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.473748][T10957] veth0_vlan: entered promiscuous mode [ 152.481694][T10957] veth1_vlan: entered promiscuous mode [ 152.496380][T11224] bridge0: port 3(gretap0) entered blocking state [ 152.503149][T11224] bridge0: port 3(gretap0) entered disabled state [ 152.510696][T11224] gretap0: entered allmulticast mode [ 152.516590][T11224] gretap0: entered promiscuous mode [ 152.523039][T11224] bridge0: port 3(gretap0) entered blocking state [ 152.529508][T11224] bridge0: port 3(gretap0) entered forwarding state [ 152.552849][T11224] loop7: detected capacity change from 0 to 1024 [ 152.554971][T10957] veth0_macvtap: entered promiscuous mode [ 152.572560][T11224] EXT4-fs: Ignoring removed orlov option [ 152.580160][T10957] veth1_macvtap: entered promiscuous mode [ 152.590945][T11224] EXT4-fs (loop7): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.606231][T10957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.615479][T10957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.627005][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.650599][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.659540][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.668280][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.705793][T11241] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2470'. [ 152.857481][T11260] FAULT_INJECTION: forcing a failure. [ 152.857481][T11260] name failslab, interval 1, probability 0, space 0, times 0 [ 152.870207][T11260] CPU: 0 UID: 0 PID: 11260 Comm: syz.3.2476 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 152.870237][T11260] Tainted: [W]=WARN [ 152.870245][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.870258][T11260] Call Trace: [ 152.870263][T11260] [ 152.870274][T11260] __dump_stack+0x1d/0x30 [ 152.870297][T11260] dump_stack_lvl+0x95/0xd0 [ 152.870320][T11260] dump_stack+0x15/0x1b [ 152.870342][T11260] should_fail_ex+0x263/0x280 [ 152.870476][T11260] should_failslab+0x8c/0xb0 [ 152.870502][T11260] __kmalloc_noprof+0xb8/0x580 [ 152.870530][T11260] ? io_cache_alloc_new+0x2a/0xb0 [ 152.870600][T11260] io_cache_alloc_new+0x2a/0xb0 [ 152.870698][T11260] __io_prep_rw+0x118/0x710 [ 152.870721][T11260] ? __rcu_read_unlock+0x4e/0x70 [ 152.870756][T11260] io_prep_rwv+0x33/0x260 [ 152.870843][T11260] io_prep_writev+0x22/0x30 [ 152.870907][T11260] io_submit_sqes+0x70e/0x11b0 [ 152.870986][T11260] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 152.871014][T11260] ? __rcu_read_unlock+0x4e/0x70 [ 152.871162][T11260] ? vfs_write+0x7dd/0x9f0 [ 152.871294][T11260] ? vfs_write+0x86e/0x9f0 [ 152.871314][T11260] ? __rcu_read_unlock+0x4e/0x70 [ 152.871353][T11260] ? __fget_files+0x184/0x1c0 [ 152.871377][T11260] ? mutex_lock+0x57/0x90 [ 152.871397][T11260] ? mutex_unlock+0x4e/0x90 [ 152.871427][T11260] ? fput+0x8f/0xc0 [ 152.871456][T11260] __x64_sys_io_uring_enter+0x78/0x90 [ 152.871486][T11260] x64_sys_call+0x27e4/0x3000 [ 152.871514][T11260] do_syscall_64+0xc0/0x2a0 [ 152.871603][T11260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.871626][T11260] RIP: 0033:0x7fed29a0aeb9 [ 152.871640][T11260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.871657][T11260] RSP: 002b:00007fed28467028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 152.871675][T11260] RAX: ffffffffffffffda RBX: 00007fed29c85fa0 RCX: 00007fed29a0aeb9 [ 152.871729][T11260] RDX: 000000000000d480 RSI: 00000000000029ab RDI: 0000000000000007 [ 152.871744][T11260] RBP: 00007fed28467090 R08: 0000000000000000 R09: 0000000000000000 [ 152.871758][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.871772][T11260] R13: 00007fed29c86038 R14: 00007fed29c85fa0 R15: 00007ffd248d8b98 [ 152.871860][T11260] [ 153.179250][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2481'. [ 153.203601][T11272] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2482'. [ 153.230903][T11274] xt_HMARK: spi-set and port-set can't be combined [ 153.245841][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 153.245853][ T29] audit: type=1400 audit(1769701573.518:4309): avc: denied { create } for pid=11269 comm="syz.1.2481" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=packet_socket permissive=1 [ 153.343342][ T29] audit: type=1326 audit(1769701573.618:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 153.366899][ T29] audit: type=1326 audit(1769701573.618:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 153.390439][ T29] audit: type=1326 audit(1769701573.618:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 153.413932][ T29] audit: type=1326 audit(1769701573.618:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 153.437494][ T29] audit: type=1326 audit(1769701573.618:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 153.461143][ T29] audit: type=1326 audit(1769701573.618:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 153.484648][ T29] audit: type=1326 audit(1769701573.618:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 153.508332][ T29] audit: type=1326 audit(1769701573.618:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 153.531861][ T29] audit: type=1326 audit(1769701573.618:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 153.556018][ T9848] EXT4-fs (loop7): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 153.646322][T11284] FAULT_INJECTION: forcing a failure. [ 153.646322][T11284] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 153.659726][T11284] CPU: 0 UID: 0 PID: 11284 Comm: syz.3.2488 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.659762][T11284] Tainted: [W]=WARN [ 153.659770][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.659783][T11284] Call Trace: [ 153.659788][T11284] [ 153.659797][T11284] __dump_stack+0x1d/0x30 [ 153.659911][T11284] dump_stack_lvl+0x95/0xd0 [ 153.659934][T11284] dump_stack+0x15/0x1b [ 153.659957][T11284] should_fail_ex+0x263/0x280 [ 153.660072][T11284] should_fail_alloc_page+0xf2/0x100 [ 153.660148][T11284] __alloc_frozen_pages_noprof+0x108/0x350 [ 153.660185][T11284] alloc_pages_mpol+0xb3/0x260 [ 153.660221][T11284] alloc_frozen_pages_noprof+0x8f/0x110 [ 153.660254][T11284] ___kmalloc_large_node+0x3f/0xe0 [ 153.660417][T11284] __kmalloc_large_node_noprof+0x16/0xa0 [ 153.660503][T11284] __kmalloc_noprof+0x342/0x580 [ 153.660525][T11284] ? iovec_from_user+0x84/0x200 [ 153.660619][T11284] iovec_from_user+0x84/0x200 [ 153.660644][T11284] __import_iovec+0xf3/0x530 [ 153.660703][T11284] ? io_cache_alloc_new+0x2a/0xb0 [ 153.660791][T11284] io_import_rw_buffer+0x245/0x380 [ 153.660860][T11284] io_prep_rwv+0xae/0x260 [ 153.660889][T11284] io_prep_writev+0x22/0x30 [ 153.660962][T11284] io_submit_sqes+0x70e/0x11b0 [ 153.660995][T11284] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 153.661109][T11284] ? __rcu_read_unlock+0x4e/0x70 [ 153.661138][T11284] ? get_pid_task+0x96/0xd0 [ 153.661163][T11284] ? proc_fail_nth_write+0x13b/0x160 [ 153.661191][T11284] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 153.661224][T11284] ? vfs_write+0x86e/0x9f0 [ 153.661243][T11284] ? __rcu_read_unlock+0x4e/0x70 [ 153.661270][T11284] ? __fget_files+0x184/0x1c0 [ 153.661294][T11284] ? trace_reschedule_exit+0xd/0xb0 [ 153.661329][T11284] __x64_sys_io_uring_enter+0x78/0x90 [ 153.661361][T11284] x64_sys_call+0x27e4/0x3000 [ 153.661385][T11284] do_syscall_64+0xc0/0x2a0 [ 153.661469][T11284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.661494][T11284] RIP: 0033:0x7fed29a0aeb9 [ 153.661512][T11284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.661528][T11284] RSP: 002b:00007fed28467028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 153.661599][T11284] RAX: ffffffffffffffda RBX: 00007fed29c85fa0 RCX: 00007fed29a0aeb9 [ 153.661615][T11284] RDX: 000000000000d480 RSI: 00000000000029ab RDI: 0000000000000007 [ 153.661660][T11284] RBP: 00007fed28467090 R08: 0000000000000000 R09: 0000000000000000 [ 153.661674][T11284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.661693][T11284] R13: 00007fed29c86038 R14: 00007fed29c85fa0 R15: 00007ffd248d8b98 [ 153.661741][T11284] [ 153.946797][T11294] loop5: detected capacity change from 0 to 1764 [ 153.953904][T11294] iso9660: Unknown parameter 'nojid' [ 154.530041][T11344] __nla_validate_parse: 2 callbacks suppressed [ 154.530057][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2506'. [ 154.621501][T11344] vlan2: entered promiscuous mode [ 154.626576][T11344] erspan0: entered promiscuous mode [ 154.688729][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2510'. [ 154.748238][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2510'. [ 154.963495][T11389] set_capacity_and_notify: 2 callbacks suppressed [ 154.963513][T11389] loop6: detected capacity change from 0 to 512 [ 154.979743][T11389] EXT4-fs: Ignoring removed orlov option [ 154.990736][T11389] ext2: Unknown parameter 'dont_hash' [ 155.013938][T11395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.058132][T11395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.136157][T11407] netlink: 'syz.6.2529': attribute type 3 has an invalid length. [ 155.202097][T11420] loop3: detected capacity change from 0 to 1024 [ 155.220534][T11420] EXT4-fs: Ignoring removed bh option [ 155.247702][T11407] loop6: detected capacity change from 0 to 512 [ 155.254466][T11420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.310032][T11407] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.319472][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 155.346305][T11407] EXT4-fs (loop6): orphan cleanup on readonly fs [ 155.355969][T11407] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.2529: Allocating blocks 41-42 which overlap fs metadata [ 155.356029][T10957] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.356294][T11407] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.2529: Allocating blocks 41-42 which overlap fs metadata [ 155.401226][T11407] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2529: Failed to acquire dquot type 1 [ 155.425271][T11435] loop7: detected capacity change from 0 to 512 [ 155.435466][T11407] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 155.451839][T11407] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2529: corrupted inode contents [ 155.464884][T11407] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.2529: mark_inode_dirty error [ 155.476813][T11407] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2529: corrupted inode contents [ 155.476953][T11435] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 155.505771][T11407] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.2529: mark_inode_dirty error [ 155.506135][T11437] netlink: 'syz.3.2538': attribute type 2 has an invalid length. [ 155.527336][T11407] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2529: corrupted inode contents [ 155.531104][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2538'. [ 155.548033][T11437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2538'. [ 155.561330][T11407] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 155.578827][T11437] loop3: detected capacity change from 0 to 2048 [ 155.585390][T11435] EXT4-fs (loop7): 1 truncate cleaned up [ 155.591702][T11435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.605828][T11407] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.2529: corrupted inode contents [ 155.620336][T11407] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.2529: mark_inode_dirty error [ 155.638044][T11407] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 155.654142][T11437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.679436][ T9848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.688948][T11407] EXT4-fs (loop6): 1 truncate cleaned up [ 155.694998][T11407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.743905][T11442] loop7: detected capacity change from 0 to 512 [ 155.763459][T11442] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.790459][T10957] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.810702][T11442] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2541'. [ 155.876723][ T9135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.947328][T11442] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2541'. [ 155.963028][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2546'. [ 156.039916][T11460] program syz.6.2549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.107751][T11465] team_slave_0: entered allmulticast mode [ 156.119808][T11466] program syz.6.2549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.129596][T11466] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 156.156996][ T7424] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.165790][ T7424] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.183385][T11465] team_slave_0: entered promiscuous mode [ 156.217013][ T7424] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.248979][ T7424] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.309866][T11480] lo: entered allmulticast mode [ 156.319015][T11480] lo: left allmulticast mode [ 156.349200][T11484] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2559'. [ 156.384529][T11487] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 156.414228][T11495] loop6: detected capacity change from 0 to 128 [ 156.421612][T11495] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 156.466810][T11495] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.489213][T11495] ext2 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.552755][T11495] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11495 comm=syz.6.2562 [ 156.575070][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'. [ 156.593849][T11510] bond1: option ad_select: invalid value (4) [ 156.601535][T11510] bond1 (unregistering): Released all slaves [ 156.613448][T11512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.628008][T11512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.682361][ T9135] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.801817][T11527] loop6: detected capacity change from 0 to 8192 [ 156.858195][ T9135] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 156.866170][ T9135] FAT-fs (loop6): Filesystem has been set read-only [ 156.981987][T11549] loop7: detected capacity change from 0 to 512 [ 156.991355][T11549] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 157.004082][T11549] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2580: bg 0: block 384: padding at end of block bitmap is not set [ 157.019046][T11549] EXT4-fs (loop7): Remounting filesystem read-only [ 157.025686][T11549] EXT4-fs (loop7): 1 truncate cleaned up [ 157.043975][T11549] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.075342][ T9848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.097000][T11556] loop7: detected capacity change from 0 to 512 [ 157.108062][T11556] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #18: comm syz.7.2584: iget: bad extra_isize 90 (inode size 256) [ 157.122665][T11556] EXT4-fs (loop7): Remounting filesystem read-only [ 157.133882][T11556] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 157.156493][T11556] EXT4-fs (loop7): 1 orphan inode deleted [ 157.177509][T11556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.266406][ T9848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.339599][T11579] netlink: 'syz.5.2587': attribute type 1 has an invalid length. [ 157.384280][T11579] bond3: (slave gretap2): making interface the new active one [ 157.392491][T11579] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 157.401172][ T4001] Bluetooth: hci0: command 0x1003 tx timeout [ 157.401202][ T3588] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 157.607938][T11611] IPv6: sit1: Disabled Multicast RS [ 157.898980][T11653] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 157.909350][T11653] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 157.917526][T11653] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.936584][T11653] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.2624: Unimplemented hash flags: 0x0001 [ 157.948258][T11653] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2624: Corrupt directory, running e2fsck is recommended [ 157.961446][T11653] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.2624: path /328/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 158.011760][ T5897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.070130][T11666] unsupported nlmsg_type 40 [ 158.221311][T11681] ext4: Unknown parameter 'fsuuid' [ 158.359156][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 158.359173][ T29] audit: type=1400 audit(1769701578.628:4778): avc: denied { create } for pid=11695 comm="syz.3.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 158.406827][ T29] audit: type=1400 audit(1769701578.638:4779): avc: denied { wake_alarm } for pid=11695 comm="syz.3.2643" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.428248][ T29] audit: type=1400 audit(1769701578.638:4780): avc: denied { name_bind } for pid=11697 comm="syz.6.2644" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 158.450063][ T29] audit: type=1400 audit(1769701578.638:4781): avc: denied { node_bind } for pid=11697 comm="syz.6.2644" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 158.479776][T11707] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 158.491265][T11706] netlink: 'syz.3.2648': attribute type 1 has an invalid length. [ 158.547888][ T29] audit: type=1400 audit(1769701578.818:4782): avc: denied { create } for pid=11713 comm="syz.5.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 158.567479][ T29] audit: type=1400 audit(1769701578.818:4783): avc: denied { write } for pid=11713 comm="syz.5.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 158.587606][ T29] audit: type=1400 audit(1769701578.818:4784): avc: denied { accept } for pid=11714 comm="syz.1.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.608432][ T29] audit: type=1400 audit(1769701578.818:4785): avc: denied { getopt } for pid=11714 comm="syz.1.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 158.694197][ T29] audit: type=1400 audit(1769701578.968:4786): avc: denied { append } for pid=11717 comm="syz.1.2653" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 158.737579][ T29] audit: type=1400 audit(1769701579.008:4787): avc: denied { bind } for pid=11734 comm="syz.5.2661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.136176][T11761] IPv6: NLM_F_REPLACE set, but no existing node found! [ 159.254650][T11770] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 159.257399][T11773] 9p: Could not find request transport: ð±ê$^$Y‹ðÑ™V}fd [ 159.276839][T11770] bond2 (unregistering): Released all slaves [ 159.484446][ T8684] IPVS: starting estimator thread 0... [ 159.528095][T11793] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2684: bg 0: block 248: padding at end of block bitmap is not set [ 159.543383][T11793] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2684: Failed to acquire dquot type 1 [ 159.570540][T11793] EXT4-fs (loop1): 1 truncate cleaned up [ 159.585601][T11793] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.598340][T11793] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.608909][T11791] IPVS: using max 2064 ests per chain, 103200 per kthread [ 159.633263][T11800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 159.645977][T11800] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.660428][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.679701][ T7429] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 1 [ 159.732035][ T5897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 159.812296][T11822] __nla_validate_parse: 26 callbacks suppressed [ 159.812313][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2693'. [ 159.908389][T11833] EXT4-fs: Ignoring removed orlov option [ 159.946270][T11811] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 159.956427][T11833] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 159.957695][T11833] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8040c118, mo2=0002] [ 159.978200][T11833] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.2697: corrupted in-inode xattr: e_value size too large [ 159.993198][T11833] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2697: couldn't read orphan inode 15 (err -117) [ 159.996208][T11811] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.2690: lblock 2 mapped to illegal pblock 2 (length 1) [ 160.006240][T11833] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.020219][T11811] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.2690: lblock 0 mapped to illegal pblock 48 (length 1) [ 160.047555][T11811] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2690: Failed to acquire dquot type 0 [ 160.061869][T11811] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 160.072788][T11811] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.2690: mark_inode_dirty error [ 160.089792][T11811] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 160.101030][T11811] EXT4-fs (loop6): 1 orphan inode deleted [ 160.112906][T11811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.147096][ T7429] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 160.171547][ T7429] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:28: Failed to release dquot type 0 [ 160.218999][T11842] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2699'. [ 160.345750][ T9135] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.355553][ T58] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 160.370358][ T58] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 160.383009][ T9135] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 160.396159][ T9135] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 160.414692][ T9135] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 160.440320][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2707'. [ 160.463351][T11861] set_capacity_and_notify: 8 callbacks suppressed [ 160.463441][T11861] loop6: detected capacity change from 0 to 1024 [ 160.539702][T11865] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2708'. [ 160.629797][T11882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2715'. [ 160.666325][T11883] netlink: 360 bytes leftover after parsing attributes in process `syz.6.2711'. [ 160.685538][ T9848] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.736510][T11891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2719'. [ 160.750587][T11893] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2720'. [ 160.759646][T11893] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2720'. [ 160.768585][T11893] netlink: 'syz.5.2720': attribute type 3 has an invalid length. [ 160.808238][T11893] delete_channel: no stack [ 160.833805][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2724'. [ 160.843097][T11905] netlink: 'syz.5.2724': attribute type 1 has an invalid length. [ 160.850944][T11905] netlink: 'syz.5.2724': attribute type 2 has an invalid length. [ 160.975153][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11928 comm=syz.7.2734 [ 161.098126][T11944] loop5: detected capacity change from 0 to 1024 [ 161.110346][T11944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.203626][ T5897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.216659][T11947] team0 (unregistering): Port device team_slave_0 removed [ 161.226597][T11947] team0 (unregistering): Port device team_slave_1 removed [ 161.432909][T11979] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 161.448897][T11979] bond2 (unregistering): Released all slaves [ 161.754157][T12011] loop7: detected capacity change from 0 to 256 [ 161.777798][T12011] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 161.786628][T12011] FAT-fs (loop7): Filesystem has been set read-only [ 161.803929][T12011] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 161.818136][T12011] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 161.828595][T12011] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 161.840190][T12011] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 161.865321][T12011] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 161.876196][T12011] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 161.886864][T12011] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 161.915365][T12011] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 161.924949][T12011] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 162.059148][T12027] loop1: detected capacity change from 0 to 512 [ 162.097059][T12027] loop1: detected capacity change from 0 to 512 [ 162.105008][T12027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 162.116184][T12027] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2772: invalid indirect mapped block 4294967295 (level 1) [ 162.139247][T12027] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2772: invalid indirect mapped block 4294967295 (level 1) [ 162.165592][T12027] EXT4-fs (loop1): 2 truncates cleaned up [ 162.171962][T12027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.209918][ T3311] EXT4-fs error (device loop1): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 162.259198][ T3311] EXT4-fs error (device loop1): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 162.425530][T12030] syz_tun: entered allmulticast mode [ 162.444246][T12030] syz_tun: left allmulticast mode [ 162.513418][T12030] loop5: detected capacity change from 0 to 2048 [ 162.513750][T12000] syz.3.2762 (12000) used greatest stack depth: 6296 bytes left [ 162.571796][T12030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.673448][ T5897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.757775][ T9523] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.768224][T12045] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 162.779771][T12045] bond3 (unregistering): Released all slaves [ 163.089625][T12092] netlink: 'syz.6.2800': attribute type 1 has an invalid length. [ 163.103216][T12092] pim6reg: tun_chr_ioctl cmd 1074025677 [ 163.111846][T12092] pim6reg: linktype set to 776 [ 163.117109][T12100] FAULT_INJECTION: forcing a failure. [ 163.117109][T12100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.130299][T12100] CPU: 0 UID: 0 PID: 12100 Comm: syz.3.2802 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.130351][T12100] Tainted: [W]=WARN [ 163.130357][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.130427][T12100] Call Trace: [ 163.130434][T12100] [ 163.130442][T12100] __dump_stack+0x1d/0x30 [ 163.130501][T12100] dump_stack_lvl+0x95/0xd0 [ 163.130523][T12100] dump_stack+0x15/0x1b [ 163.130566][T12100] should_fail_ex+0x263/0x280 [ 163.130594][T12100] should_fail+0xb/0x20 [ 163.130620][T12100] should_fail_usercopy+0x1a/0x20 [ 163.130665][T12100] _copy_from_user+0x1c/0xb0 [ 163.130688][T12100] ___sys_sendmsg+0xc1/0x1e0 [ 163.130763][T12100] __x64_sys_sendmsg+0xd4/0x160 [ 163.130849][T12100] x64_sys_call+0x17ba/0x3000 [ 163.130876][T12100] do_syscall_64+0xc0/0x2a0 [ 163.130907][T12100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.130931][T12100] RIP: 0033:0x7fed29a0aeb9 [ 163.130957][T12100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.130977][T12100] RSP: 002b:00007fed28467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.131005][T12100] RAX: ffffffffffffffda RBX: 00007fed29c85fa0 RCX: 00007fed29a0aeb9 [ 163.131018][T12100] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 163.131031][T12100] RBP: 00007fed28467090 R08: 0000000000000000 R09: 0000000000000000 [ 163.131043][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.131057][T12100] R13: 00007fed29c86038 R14: 00007fed29c85fa0 R15: 00007ffd248d8b98 [ 163.131155][T12100] [ 163.315778][T12080] loop7: detected capacity change from 0 to 1024 [ 163.333637][T12090] loop5: detected capacity change from 0 to 2048 [ 163.413978][ T7636] loop5: p4 < > [ 163.420378][T12075] chnl_net:caif_netlink_parms(): no params data found [ 163.439333][T12090] loop5: p4 < > [ 163.468246][ T3000] loop5: p4 < > [ 163.488005][ T8050] udevd[8050]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 163.522369][ T8050] udevd[8050]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 163.536279][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 163.536294][ T29] audit: type=1326 audit(1769701583.808:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 163.566075][ T29] audit: type=1326 audit(1769701583.808:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 163.589800][ T29] audit: type=1326 audit(1769701583.808:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 163.613379][ T29] audit: type=1326 audit(1769701583.808:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 163.636759][ T29] audit: type=1326 audit(1769701583.808:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 163.646292][ T8050] udevd[8050]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 163.660353][ T29] audit: type=1326 audit(1769701583.808:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 163.660383][ T29] audit: type=1326 audit(1769701583.808:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 163.717076][ T29] audit: type=1326 audit(1769701583.808:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 163.740590][ T29] audit: type=1326 audit(1769701583.808:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 163.764151][ T29] audit: type=1326 audit(1769701583.808:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12117 comm="syz.3.2810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed29a0aeb9 code=0x7ffc0000 [ 163.805284][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.812528][T12075] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.834490][T12075] bridge_slave_0: entered allmulticast mode [ 163.842520][T12075] bridge_slave_0: entered promiscuous mode [ 163.849789][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.856870][T12075] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.867034][T12075] bridge_slave_1: entered allmulticast mode [ 163.873303][T12137] netlink: 'syz.5.2814': attribute type 21 has an invalid length. [ 163.921584][T12075] bridge_slave_1: entered promiscuous mode [ 163.927823][T12146] FAULT_INJECTION: forcing a failure. [ 163.927823][T12146] name failslab, interval 1, probability 0, space 0, times 0 [ 163.939524][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.940532][T12146] CPU: 0 UID: 0 PID: 12146 Comm: syz.7.2817 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.940589][T12146] Tainted: [W]=WARN [ 163.940597][T12146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.940609][T12146] Call Trace: [ 163.940615][T12146] [ 163.940623][T12146] __dump_stack+0x1d/0x30 [ 163.940649][T12146] dump_stack_lvl+0x95/0xd0 [ 163.940672][T12146] dump_stack+0x15/0x1b [ 163.940739][T12146] should_fail_ex+0x263/0x280 [ 163.940770][T12146] should_failslab+0x8c/0xb0 [ 163.940847][T12146] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 163.940881][T12146] ? __alloc_skb+0x2f0/0x4b0 [ 163.940969][T12146] __alloc_skb+0x2f0/0x4b0 [ 163.941066][T12146] ? __alloc_skb+0x219/0x4b0 [ 163.941139][T12146] netlink_alloc_large_skb+0xbf/0xf0 [ 163.941202][T12146] netlink_sendmsg+0x40c/0x6f0 [ 163.941225][T12146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.941246][T12146] ____sys_sendmsg+0x5af/0x600 [ 163.941269][T12146] ___sys_sendmsg+0x195/0x1e0 [ 163.941298][T12146] __x64_sys_sendmsg+0xd4/0x160 [ 163.941393][T12146] x64_sys_call+0x17ba/0x3000 [ 163.941420][T12146] do_syscall_64+0xc0/0x2a0 [ 163.941480][T12146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.941523][T12146] RIP: 0033:0x7f46f63aaeb9 [ 163.941540][T12146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.941559][T12146] RSP: 002b:00007f46f4e07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.941581][T12146] RAX: ffffffffffffffda RBX: 00007f46f6625fa0 RCX: 00007f46f63aaeb9 [ 163.941596][T12146] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 163.941652][T12146] RBP: 00007f46f4e07090 R08: 0000000000000000 R09: 0000000000000000 [ 163.941665][T12146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.941679][T12146] R13: 00007f46f6626038 R14: 00007f46f6625fa0 R15: 00007ffc24bd2778 [ 163.941699][T12146] [ 164.144227][T12137] netlink: 'syz.5.2814': attribute type 1 has an invalid length. [ 164.153590][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.201892][T12075] team0: Port device team_slave_0 added [ 164.208676][T12075] team0: Port device team_slave_1 added [ 164.215156][T12154] loop5: detected capacity change from 0 to 512 [ 164.223738][T12154] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2820: inode has both inline data and extents flags [ 164.253031][T12154] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2820: couldn't read orphan inode 15 (err -117) [ 164.278532][T12154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.298492][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.305495][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.331567][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.349743][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.356724][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.382713][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.415419][T12075] hsr_slave_0: entered promiscuous mode [ 164.423702][T12075] hsr_slave_1: entered promiscuous mode [ 164.429950][T12075] debugfs: 'hsr0' already exists in 'hsr' [ 164.435691][T12075] Cannot create hsr debugfs directory [ 164.577497][T11163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.623798][T12075] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 164.632867][T12075] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 164.643837][T12075] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 164.654796][T12075] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 164.689400][T12195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.730954][T12075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.757868][T12075] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.789770][ T7432] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.796848][ T7432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.819347][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.826485][ T7424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.942892][T12246] __nla_validate_parse: 16 callbacks suppressed [ 164.942928][T12246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2841'. [ 164.977699][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.010994][T12256] FAULT_INJECTION: forcing a failure. [ 165.010994][T12256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.024146][T12256] CPU: 0 UID: 0 PID: 12256 Comm: syz.3.2843 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.024262][T12256] Tainted: [W]=WARN [ 165.024271][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.024285][T12256] Call Trace: [ 165.024292][T12256] [ 165.024300][T12256] __dump_stack+0x1d/0x30 [ 165.024330][T12256] dump_stack_lvl+0x95/0xd0 [ 165.024350][T12256] dump_stack+0x15/0x1b [ 165.024368][T12256] should_fail_ex+0x263/0x280 [ 165.024403][T12256] should_fail+0xb/0x20 [ 165.024457][T12256] should_fail_usercopy+0x1a/0x20 [ 165.024492][T12256] _copy_from_user+0x1c/0xb0 [ 165.024581][T12256] ___sys_sendmsg+0xc1/0x1e0 [ 165.024615][T12256] __x64_sys_sendmsg+0xd4/0x160 [ 165.024640][T12256] x64_sys_call+0x17ba/0x3000 [ 165.024668][T12256] do_syscall_64+0xc0/0x2a0 [ 165.024748][T12256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.024773][T12256] RIP: 0033:0x7fed29a0aeb9 [ 165.024791][T12256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.024812][T12256] RSP: 002b:00007fed28467028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.024864][T12256] RAX: ffffffffffffffda RBX: 00007fed29c85fa0 RCX: 00007fed29a0aeb9 [ 165.024947][T12256] RDX: 0000000020001850 RSI: 00002000000000c0 RDI: 0000000000000003 [ 165.025033][T12256] RBP: 00007fed28467090 R08: 0000000000000000 R09: 0000000000000000 [ 165.025045][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.025057][T12256] R13: 00007fed29c86038 R14: 00007fed29c85fa0 R15: 00007ffd248d8b98 [ 165.025126][T12256] [ 165.295976][ T7429] bridge_slave_1: left allmulticast mode [ 165.301823][ T7429] bridge_slave_1: left promiscuous mode [ 165.307604][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.335756][ T7429] bridge_slave_0: left allmulticast mode [ 165.341537][ T7429] bridge_slave_0: left promiscuous mode [ 165.347188][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.389360][ T1035] SELinux: failure in sel_netif_sid_slow(), invalid network interface (101) [ 165.414006][ T7429] bond3 (unregistering): (slave gretap2): Releasing active interface [ 165.436180][ T2] ================================================================== [ 165.444282][ T2] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 165.451309][ T2] [ 165.453619][ T2] write to 0xffff8881001d9638 of 8 bytes by task 12315 on cpu 0: [ 165.461318][ T2] release_task+0x76f/0xb60 [ 165.465809][ T2] do_exit+0xd56/0x1590 [ 165.469949][ T2] kthread_exit+0x93/0x190 [ 165.474354][ T2] kthread+0xc6/0x510 [ 165.478324][ T2] ret_from_fork+0x148/0x280 [ 165.482901][ T2] ret_from_fork_asm+0x1a/0x30 [ 165.487655][ T2] [ 165.489959][ T2] read to 0xffff8881001d9080 of 3264 bytes by task 2 on cpu 1: [ 165.497485][ T2] memcpy_and_pad+0x48/0x80 [ 165.501978][ T2] arch_dup_task_struct+0x2c/0x40 [ 165.506990][ T2] dup_task_struct+0x6e/0x940 [ 165.511660][ T2] copy_process+0x37e/0x1f10 [ 165.516247][ T2] kernel_clone+0x16b/0x5b0 [ 165.520736][ T2] kernel_thread+0xe5/0x120 [ 165.525224][ T2] kthreadd+0x26b/0x330 [ 165.529367][ T2] ret_from_fork+0x148/0x280 [ 165.533944][ T2] ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.538693][ T2] [ 165.540997][ T2] Reported by Kernel Concurrency Sanitizer on: [ 165.547129][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.557964][ T2] Tainted: [W]=WARN [ 165.561748][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.571785][ T2] ================================================================== [ 165.681713][ T7429] bond2 (unregistering): (slave bridge1): Removing an active aggregator [ 165.715139][ T7429] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 165.738220][ T7429] bridge1 (unregistering): left promiscuous mode [ 165.744675][ T7429] bridge1 (unregistering): left allmulticast mode [ 165.802140][ T7429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.811281][ T7429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.820243][ T7429] bond0 (unregistering): Released all slaves [ 165.827325][ T7429] bond1 (unregistering): Released all slaves [ 165.835351][ T7429] bond2 (unregistering): Released all slaves [ 165.843370][ T7429] bond3 (unregistering): Released all slaves [ 165.857718][T12220] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 165.910931][ T7429] hsr_slave_0: left promiscuous mode [ 165.924979][ T7429] hsr_slave_1: left promiscuous mode [ 165.930729][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.938155][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.970965][ T7429] team0 (unregistering): Port device team_slave_1 removed [ 165.980507][ T7429] team0 (unregistering): Port device team_slave_0 removed [ 166.402182][ T7429] IPVS: stop unused estimator thread 0... [ 166.454169][ T7429] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.491517][ T7429] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.551637][ T7429] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.591162][ T7429] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.670059][ T7429] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.680707][ T7429] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.741587][ T7429] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.752073][ T7429] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.791781][ T7429] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.802117][ T7429] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.851813][ T7429] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.862180][ T7429] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.964582][ T7429] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.974924][ T7429] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.012722][ T7429] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.023086][ T7429] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.072591][ T7429] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.082949][ T7429] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.122120][ T7429] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.132429][ T7429] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.206179][ T7429] bridge_slave_1: left allmulticast mode [ 167.211983][ T7429] bridge_slave_1: left promiscuous mode [ 167.217647][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.225766][ T7429] bridge_slave_0: left allmulticast mode [ 167.231469][ T7429] bridge_slave_0: left promiscuous mode [ 167.237128][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.246319][ T7429] gretap0: left allmulticast mode [ 167.251590][ T7429] gretap0: left promiscuous mode [ 167.256600][ T7429] bridge0: port 3(gretap0) entered disabled state [ 167.263704][ T7429] bridge_slave_1: left allmulticast mode [ 167.269445][ T7429] bridge_slave_1: left promiscuous mode [ 167.275028][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.283257][ T7429] bridge_slave_0: left allmulticast mode [ 167.288971][ T7429] bridge_slave_0: left promiscuous mode [ 167.294552][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.303026][ T7429] bridge_slave_1: left allmulticast mode [ 167.308707][ T7429] bridge_slave_1: left promiscuous mode [ 167.314474][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.322685][ T7429] bridge_slave_0: left allmulticast mode [ 167.328364][ T7429] bridge_slave_0: left promiscuous mode [ 167.334067][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.451055][ T7429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.460686][ T7429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.470316][ T7429] bond0 (unregistering): Released all slaves [ 167.477507][ T7429] bond1 (unregistering): Released all slaves [ 167.530749][ T7429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.540372][ T7429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.550272][ T7429] bond0 (unregistering): Released all slaves [ 167.557597][ T7429] bond1 (unregistering): Released all slaves [ 167.565698][ T7429] bond2 (unregistering): Released all slaves [ 167.730895][ T7429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.740562][ T7429] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 167.749583][ T7429] bond0 (unregistering): Released all slaves [ 167.756996][ T7429] bond1 (unregistering): Released all slaves [ 167.802298][ T7429] hsr_slave_0: left promiscuous mode [ 167.808114][ T7429] hsr_slave_1: left promiscuous mode [ 167.814124][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.821537][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.829425][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.836851][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.847966][ T7429] hsr_slave_0: left promiscuous mode [ 167.853715][ T7429] hsr_slave_1: left promiscuous mode [ 167.859685][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.867098][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.876669][ T7429] hsr_slave_0: left promiscuous mode [ 167.882784][ T7429] hsr_slave_1: left promiscuous mode [ 167.888390][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.895810][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.903827][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.911259][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.919073][ T7429] batman_adv: batadv0: Interface deactivated: dummy0 [ 167.925739][ T7429] batman_adv: batadv0: Removing interface: dummy0 [ 167.940168][ T7429] veth1_macvtap: left promiscuous mode [ 167.945701][ T7429] veth0_macvtap: left promiscuous mode [ 167.951240][ T7429] veth1_vlan: left promiscuous mode [ 167.956449][ T7429] veth0_vlan: left promiscuous mode [ 167.962518][ T7429] veth1_macvtap: left promiscuous mode [ 167.967978][ T7429] veth0_macvtap: left promiscuous mode [ 167.973702][ T7429] veth1_vlan: left promiscuous mode [ 167.979004][ T7429] veth0_vlan: left promiscuous mode [ 167.984523][ T7429] veth1_macvtap: left promiscuous mode [ 167.990072][ T7429] veth0_macvtap: left promiscuous mode [ 167.995687][ T7429] veth1_vlan: left promiscuous mode [ 168.001023][ T7429] veth0_vlan: left promiscuous mode [ 168.155181][ T7429] team0 (unregistering): Port device team_slave_1 removed [ 168.164581][ T7429] team0 (unregistering): Port device team_slave_0 removed [ 168.216675][ T7429] team0 (unregistering): Port device team_slave_1 removed [ 168.226184][ T7429] team0 (unregistering): Port device team_slave_0 removed [ 169.070795][ T7429] bridge_slave_1: left allmulticast mode [ 169.076503][ T7429] bridge_slave_1: left promiscuous mode [ 169.082131][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.090164][ T7429] bridge_slave_0: left allmulticast mode [ 169.095785][ T7429] bridge_slave_0: left promiscuous mode [ 169.101472][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.160844][ T7429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.170449][ T7429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.179803][ T7429] bond0 (unregistering): Released all slaves [ 169.212497][ T7429] hsr_slave_0: left promiscuous mode [ 169.218962][ T7429] hsr_slave_1: left promiscuous mode [ 169.224581][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.232808][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.291927][ T7429] team0 (unregistering): Port device team_slave_1 removed [ 169.300849][ T7429] team0 (unregistering): Port device team_slave_0 removed