last executing test programs: 15.959138919s ago: executing program 1 (id=2612): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x649e452c, 0xe}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x4a2, &(0x7f0000000740)="$eJzs3M9vFFUcAPDvbFt+yI9WRBQEraCR+KOlBZWDBzWaeNDERA948FDbgshCDa2JkEaLMXg0JN6NRxP/Am9ejHowJl418WhIiDYmFE9r5hddlt3SlrYr3c8n2e57O2/2ve/MvN038zobQMfqT/8kEVsj4reI6M2zNxboz5/mZqdHr81OjyZRq73xV5KVuzo7PVoWLdfbUmQOViIqnybxfLng7fm3nTx3/tRItTp+tsgPTp1+f3Dy3PmnTp4eOTF+YvzM8NGjRw4PPfvM8NMrEmca19U9H03s3f3KW5deGz126Z0fv0mbtWtfvrw+jlu6liyqWH+61f6uZRqXPbqEtt8JttWlk+42NoQl6YqIdHf1ZP2/N7pifuf1xsuftF5z49o0EFg16XfTAj15pgasY0m0uwVAe5Rf9On5b/lYo6HH/8KVFyI2FOm52enRuevxd0eleL1nFevvj4hjM/9+mT5iqdchAACWIRvbPNls/FeJXdlzPtexvZhD6YuIuyNiR0TcExE7I+LeiKzsfRFxf75yrXeR9fc35G8e/1QuN23zCknHf8/Vjf3m6uIvnvq6ity2LP6e5PjJ6vihYpscjJ6NaX5ogTq+e+nXz1stqx//pY+0/nIsWDTgcnfDBbqxkamRldoIVy5E7OluFn9yfSYgPQJ2R8Sepb319jJx8vGv97YqdOv4F7AC80y1ryIey/f/TDTEX0oWnp8c3BTV8UOD5VFxs59+ufh6q/pvK/4VcGX/A3lifv83lOj9J8nna3uiWh0/O7n0Oi7+/lnLc5plHP/dMTI1siF5M5uz/vnd/MUPR6amzg5FbEhezfLlOV32+vD8ymW+LJ8e/wcPNO//O4p10vjTrZQexPsi4sGIeKho+8MRsT8iDiwQ/w8vPvLeAvEnkUT79v+FiLGmn3/Xj/++pH6+fhmJrlPff9tqxrx+/9eSVvv/SMxkn7W57PPvFhbbwNvcfAAAAHBHqETE1kgqA3m6f2tUKgMD+f/w74y7KtWJyaknjk98cGYsv0egL3oq5ZWu3rrroUPJTPGOeX64uFZcLj9cXDf+omtzlh8YnaiOtTl26HRbbuz/Ufb/1J9d7W4dsOrcrwWdq7H/V9rUDmDtLeb737kArE839v9N6Z/N7WoLsLac/0Pnatb/P27IG//D+nTzDwD90eQn64D1yPgfOpf+D51L/4eOlN8JfymWc1//8hPlzQLLf59Ni77Dv1MS5S9erGZdm2P+lai0PeQOSqQ9Zm0rnf8NFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDvZfwEAAP//IUjljQ==") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c008000", @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf250600000008000b0005000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000586dddcb12ade0f82e9c9bd85e720c17504cd9fde69c0b6cfb7702c071ee8244c0000"], 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffff7}]}]}]}}]}, 0xa8}}, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) ioctl$TCXONC(r2, 0x540a, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x40000000015, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, 0x0, 0x0, 0x111c010, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000080000000000000002000000180100002020702500000000002020207b1af8ff00000000bda000000000000027000000f8ff3f00b702000008000000b7030000000000002500f8ff0600100095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) 15.728019782s ago: executing program 1 (id=2614): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r2, &(0x7f00000000c0)=""/106, 0x6a, 0x100c1, &(0x7f0000000140)=@rc={0x1f, @any, 0x3}, 0x80) 14.797023236s ago: executing program 1 (id=2618): perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) 14.786601456s ago: executing program 1 (id=2619): timer_create(0x8, 0x0, &(0x7f0000bbdffc)) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4081) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 14.583050219s ago: executing program 1 (id=2624): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000002680)={0x1224, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x7}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x200}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x404}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x6}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x11c4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_5GHZ={0x6, 0x1, "eb93"}, @NL80211_BAND_6GHZ={0x53, 0x3, "85f654daede500de6ac577f5b5be90e261f09f0a815bf30ba6d23fc8146a556fa045210a7183cb7974f939ee6e313ef6f0f07d904a6760eec5ae6a39ecc320aaa703610586c5f780621daa1ce57576"}, @NL80211_BAND_5GHZ={0x3a, 0x1, "4c1e9a40113f007e6ad7d391b3895f4607c2fafe0cf3a12783b1df31596eec80ae6ad966cfeb8bcdca2be297a9efeb9fd9d8df90375a"}, @NL80211_BAND_60GHZ={0x44, 0x2, "eaaee7fb060e01771a23b3dc8d65f470d50b0cc0512995cf8a8ec8cac8338454a21bde7f9cbdc5399a67f418c4fb725e12ed06aab2b108080a738f49875a897a"}, @NL80211_BAND_6GHZ={0xde, 0x3, "29b0e45050eaaccf04902cfe03c6618a2d15e55a59a2e27ca066a07873d4c45d0bc99e6d0b3b4f6d225fbdac77d5309bf35938defb9a382534c05520bf19857603353daddc8437f7f7cd202cad7c75aaa2efe0534f9ee9551cd19bdfb0d442d6e2e9f6284c92cb6b59de99a468a45e32105ac8807f3ccfde1e3f7ef3f13e959346f891941173e9f5fa55c364882c6396c91fb8221a1c538d7ab8d2bc86fa81283fc210ea0bdfb0c789de9d35292303d8e6975d2374a1d2cc912b399b92a3ee8e010baf0c8a1be5130f5b6465f794c52147b141c4a50d1d695176"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0x1224}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) syz_clone(0x98210000, &(0x7f0000000280)="95c9b1a681880734a89aaf772cd829e25ec561bbf73197db6fdb2c63b183c1c64967ba7e40a79658d9685db0d34b16e12b4f9c8db263aa96dca72082f37ba3cc99de1cf126f236bec4e5612034e58e4066163b416b625e39a11c692abc68791529e00d512593eb52c31f1023d6c3555a1254372cdf60dff65885ab4656e59f069ed81ff57b62dc82bca49dc87ba2ca86e02903f61007ee529be0cc20f300b89013547379b29ca8463b28f42b69e5744edbec21a40be961f3acaf569b05366e79e845a2a4", 0xc4, &(0x7f0000000380), &(0x7f0000002540), &(0x7f0000002580)="b0f4c60e1275159880da1f8d73dbe9a22eeb329abf5038b12855e686d3e4ba19e35fb76274a2aa0f8d1b72271d43912ce0c770b5190d8877a22fea490038397228c6e3e6ca1edf3ec9028aceef39e90b99d7ff0d1616cc4370a4208aae94349875842acc76d3ede0308345e1a813cb0d1ba3ad55989dfe04013dad90f75dd0d3a04bf62930658c12bd07a35c62218509abed4329aa1bf371018fc8ea4dd0e6e487595bee013f76e3b6e97c6d7f0d2f0073a056bbeb65dc9d0edf3f43f724648e8a979f4146757d4773d1a18f6383ccdfa470278e29eb60ac28b09d382d3e05b15a6425bfa38539") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0x2800092, &(0x7f0000000340)={[{@dioread_lock}, {@noquota}]}, 0x2, 0x50c, &(0x7f0000001000)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0)) creat(&(0x7f0000000140)='./bus/file0\x00', 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x2a, {0x2, 0x0, @multicast1=0xe000cc02}}) splice(r3, 0x0, r4, 0x0, 0x2, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)='m', 0xfffffdfc}]) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x1d, 0x3, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) 14.214785495s ago: executing program 1 (id=2629): openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000000000000000000000000000950000005ad449a2873c329dd0fe9da7553c73d5afde341e09e8ebf4a48119c2532055e0cb86c7251243b38d98712d5627bb441719f0c973e0b906da828d403e2c179fc0417fa80149b147c52197ac2ed735c2a6b2798fa79de51f0cd12796b9aee7ebf3c6508ce39e8ea998e5a74752a88d4d0727541c1c3e28bf38566c95f7b07dc81fb93dc614f1260caf3f894f943f6381b2d33df2db066b94927671a364248d833b129538e771f4f2fb5822b16a01e74f1af9a2d22e4a4120bedcc176e8f420"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r3 = socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x21000e, &(0x7f0000000380), 0x1, 0x52e, &(0x7f0000000e00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000240)={0x3920e, r4, 0x0, 0x0, 0x8, 0x8010000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x8, &(0x7f00000003c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfa}}], &(0x7f0000000400)='GPL\x00', 0x1, 0xbc, &(0x7f0000000780)=""/188, 0x40f00, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0xffffffffffffffff], 0x0, 0x10, 0x7, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000280)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@abort}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x459, &(0x7f0000000900)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000005c0)}) close_range(r9, 0xffffffffffffffff, 0x0) socket(0x11, 0x80a, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) sendmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="2e000c0000000000000080ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121ff3b5e28171f5f755f867a41d67c58a625303d0ebe910e09444c3083b9ac9cd94625db8f1292d2eab2fe327fa1db4bbc57ed386c1585798997f41531b9f58737e4d61599828de3ac76e4733d56b81b274b69c666cfd04712d38a3c3e1b282824eb831b001b076813a90e7c0c4a654d691bfd7e62005798a24613aa3a4b553abc9a1560483762a", 0xb4}], 0x1}, 0x8000) 3.339665449s ago: executing program 0 (id=2792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000240)=0x7, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.28006552s ago: executing program 0 (id=2795): timer_create(0x8, 0x0, &(0x7f0000bbdffc)) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4081) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 3.095896953s ago: executing program 4 (id=2797): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 2.893904256s ago: executing program 0 (id=2800): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000b80)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000", @ANYBLOB="cd3e00000000000000f3010000000800020005000000ce00010043ecf8a077157cd8bc7347043314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f17ae43df88a8ebd26792040200006f64e62cd3404917f3be657330adff7fffffffffffff7412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed2b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000008000700ffffffff080008000000000006000b000a"], 0x104}}, 0x0) process_vm_readv(0x0, &(0x7f00000001c0)=[{&(0x7f0000000880)=""/255, 0xff}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x2, &(0x7f0000000780)=[{&(0x7f0000001280)=""/257, 0xfffffffffffffecf}, {&(0x7f0000000a00)=""/232, 0xe8}, {&(0x7f00000005c0)=""/70, 0x46}, {&(0x7f0000000680)=""/18, 0x12}, {&(0x7f0000000340)=""/3, 0x3}], 0x5, 0x0) 2.844688157s ago: executing program 0 (id=2802): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 2.779930088s ago: executing program 0 (id=2804): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000", @ANYRES16, @ANYBLOB="cd3e00000000000000f3010000000800020005000000ce00010043ecf8a077157cd8bc7347043314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f17ae43df88a8ebd26792040200006f64e62cd3404917f3be657330adff7fffffffffffff7412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed2b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000008000700ffffffff080008000000000006000b00"], 0x104}}, 0x0) 2.696631259s ago: executing program 0 (id=2806): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0xfffffffd, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xfffffffd}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r3}, 0x18) r8 = socket(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11], 0x90}}, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) 2.466963653s ago: executing program 2 (id=2808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0x303, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x20400000) 2.364255184s ago: executing program 2 (id=2809): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 1.759635253s ago: executing program 3 (id=2811): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0xc01, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000004780)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff0000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x3}, 0x18) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x20040, 0x0) fcntl$F_SET_RW_HINT(r7, 0x40c, &(0x7f0000000b00)=0x7) sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r4, 0x30b}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="20a1000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.427508388s ago: executing program 4 (id=2812): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0xd0ab, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 1.385423909s ago: executing program 2 (id=2813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.31685068s ago: executing program 3 (id=2814): socket(0x1d, 0x2, 0x6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa4ebbe25218875b3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x94, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ppoll(0x0, 0x21, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f00000002c0)={[0x11]}, 0x8) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000200), 0x0, 0x469, &(0x7f0000000ac0)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) dup2(0xffffffffffffffff, r7) 1.265493211s ago: executing program 2 (id=2815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x20400000) 1.238526791s ago: executing program 2 (id=2816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000002680)={0x1224, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x7}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x200}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x404}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0x6}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x11c4, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_5GHZ={0x6, 0x1, "eb93"}, @NL80211_BAND_6GHZ={0x53, 0x3, "85f654daede500de6ac577f5b5be90e261f09f0a815bf30ba6d23fc8146a556fa045210a7183cb7974f939ee6e313ef6f0f07d904a6760eec5ae6a39ecc320aaa703610586c5f780621daa1ce57576"}, @NL80211_BAND_5GHZ={0x3a, 0x1, "4c1e9a40113f007e6ad7d391b3895f4607c2fafe0cf3a12783b1df31596eec80ae6ad966cfeb8bcdca2be297a9efeb9fd9d8df90375a"}, @NL80211_BAND_60GHZ={0x44, 0x2, "eaaee7fb060e01771a23b3dc8d65f470d50b0cc0512995cf8a8ec8cac8338454a21bde7f9cbdc5399a67f418c4fb725e12ed06aab2b108080a738f49875a897a"}, @NL80211_BAND_6GHZ={0xde, 0x3, "29b0e45050eaaccf04902cfe03c6618a2d15e55a59a2e27ca066a07873d4c45d0bc99e6d0b3b4f6d225fbdac77d5309bf35938defb9a382534c05520bf19857603353daddc8437f7f7cd202cad7c75aaa2efe0534f9ee9551cd19bdfb0d442d6e2e9f6284c92cb6b59de99a468a45e32105ac8807f3ccfde1e3f7ef3f13e959346f891941173e9f5fa55c364882c6396c91fb8221a1c538d7ab8d2bc86fa81283fc210ea0bdfb0c789de9d35292303d8e6975d2374a1d2cc912b399b92a3ee8e010baf0c8a1be5130f5b6465f794c52147b141c4a50d1d695176"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8}]}, 0x1224}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) syz_clone(0x98210000, &(0x7f0000000280)="95c9b1a681880734a89aaf772cd829e25ec561bbf73197db6fdb2c63b183c1c64967ba7e40a79658d9685db0d34b16e12b4f9c8db263aa96dca72082f37ba3cc99de1cf126f236bec4e5612034e58e4066163b416b625e39a11c692abc68791529e00d512593eb52c31f1023d6c3555a1254372cdf60dff65885ab4656e59f069ed81ff57b62dc82bca49dc87ba2ca86e02903f61007ee529be0cc20f300b89013547379b29ca8463b28f42b69e5744edbec21a40be961f3acaf569b05366e79e845a2a4", 0xc4, &(0x7f0000000380), &(0x7f0000002540), &(0x7f0000002580)="b0f4c60e1275159880da1f8d73dbe9a22eeb329abf5038b12855e686d3e4ba19e35fb76274a2aa0f8d1b72271d43912ce0c770b5190d8877a22fea490038397228c6e3e6ca1edf3ec9028aceef39e90b99d7ff0d1616cc4370a4208aae94349875842acc76d3ede0308345e1a813cb0d1ba3ad55989dfe04013dad90f75dd0d3a04bf62930658c12bd07a35c62218509abed4329aa1bf371018fc8ea4dd0e6e487595bee013f76e3b6e97c6d7f0d2f0073a056bbeb65dc9d0edf3f43f724648e8a979f4146757d4773d1a18f6383ccdfa470278e29eb60ac28b09d382d3e05b15a6425bfa38539") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0x2800092, &(0x7f0000000340)={[{@dioread_lock}, {@noquota}]}, 0x2, 0x50c, &(0x7f0000001000)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2029c1b, 0x0, 0x0, 0x0, &(0x7f00000007c0)) creat(&(0x7f0000000140)='./bus/file0\x00', 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x2a, {0x2, 0x0, @multicast1=0xe000cc02}}) splice(r4, 0x0, r5, 0x0, 0x2, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) renameat2(r3, &(0x7f0000000080)='./bus/file0\x00', r3, &(0x7f0000000200)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)='m', 0xfffffdfc}]) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x1d, 0x3, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) 1.081209944s ago: executing program 4 (id=2817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04010000", @ANYRES16, @ANYBLOB="cd3e00000000000000f3010000000800020005000000ce00010043ecf8a077157cd8bc7347043314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f17ae43df88a8ebd26792040200006f64e62cd3404917f3be657330adff7fffffffffffff7412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed2b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000008000700ffffffff080008000000000006000b00"], 0x104}}, 0x0) 1.080634134s ago: executing program 4 (id=2818): syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffedf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000004200)='t', 0x1) 425.772013ms ago: executing program 3 (id=2820): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000b80)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES16=r2, @ANYBLOB="cd3e00000000000000f3010000000800020005000000ce00010043ecf8a077157cd8bc7347043314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f17ae43df88a8ebd26792040200006f64e62cd3404917f3be657330adff7fffffffffffff7412935536f4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed2b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3c932faf89062b965db52beeff385e442adbb8d87480d48f4b3d4530e85283000008000700ffffffff080008000000000006000b000a"], 0x104}}, 0x0) process_vm_readv(0x0, &(0x7f00000001c0)=[{&(0x7f0000000880)=""/255, 0xff}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x2, &(0x7f0000000780)=[{&(0x7f0000001280)=""/257, 0xfffffffffffffecf}, {&(0x7f0000000a00)=""/232, 0xe8}, {&(0x7f00000005c0)=""/70, 0x46}, {&(0x7f0000000680)=""/18, 0x12}, {&(0x7f0000000340)=""/3, 0x3}], 0x5, 0x0) 323.838685ms ago: executing program 3 (id=2821): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2, 0x0, 0x400000000}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 289.430656ms ago: executing program 3 (id=2822): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61780, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 266.081956ms ago: executing program 3 (id=2823): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 238.162347ms ago: executing program 2 (id=2824): creat(&(0x7f0000000040)='./bus\x00', 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000400)={0x0, 0x1, r1, 0xfffffffd}) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 151.022678ms ago: executing program 4 (id=2825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 0s ago: executing program 4 (id=2826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x60}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) readlink(0x0, 0x0, 0x0) syz_clone3(&(0x7f00000002c0)={0x8000080, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) write$binfmt_elf32(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000000000000e000000000020000100050000000000000000000300000008000000f30000007f"], 0x58) close(r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000740)={[&(0x7f0000000200)='veth1_to_team\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000580)='\\\x00', &(0x7f00000005c0)=']@)]\x00', &(0x7f0000000600)=')-#$', &(0x7f0000000640)='@q.+\x00']}, &(0x7f0000000800)={[&(0x7f0000000780)='\x00', &(0x7f00000007c0)='veth1_to_team\x00']}) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000006c0)={r10, 0x3, 0x6, @local}, 0x10) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r10], 0x20}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYRES8=r7], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 0 to 256 [ 123.815602][ T9628] loop0: detected capacity change from 0 to 512 [ 123.824622][ T9628] ext4 filesystem being mounted at /464/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.888607][ T9635] loop4: detected capacity change from 0 to 512 [ 123.896994][ T9636] EXT4-fs error (device loop0): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.0.2144: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 123.918141][ T9636] EXT4-fs error (device loop0): ext4_get_first_dir_block:3538: inode #12: comm syz.0.2144: directory missing '.' [ 123.919094][ T9635] EXT4-fs (loop4): orphan cleanup on readonly fs [ 123.937192][ T9635] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2146: bad orphan inode 13 [ 123.947742][ T9635] ext4_test_bit(bit=12, block=18) = 1 [ 123.953322][ T9635] is_bad_inode(inode)=0 [ 123.957527][ T9635] NEXT_ORPHAN(inode)=2130706432 [ 123.962405][ T9635] max_ino=32 [ 123.965642][ T9635] i_nlink=1 [ 123.977290][ T9635] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 124.013278][ T9635] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 124.138698][ T9654] loop4: detected capacity change from 0 to 512 [ 124.147120][ T9652] loop3: detected capacity change from 0 to 128 [ 124.155390][ T9652] vfat: Bad value for 'shortname' [ 124.161083][ C1] blk_print_req_error: 4 callbacks suppressed [ 124.161102][ C1] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 124.185705][ T9652] tmpfs: Unknown parameter '0xffffffffffffffff' [ 124.196487][ T9654] EXT4-fs (loop4): 1 orphan inode deleted [ 124.203164][ T9654] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.214979][ T3422] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 124.248453][ T9658] 8021q: adding VLAN 0 to HW filter on device bond40 [ 124.256625][ T9658] team0: Port device bond40 added [ 124.365191][ T9665] loop4: detected capacity change from 0 to 128 [ 124.372297][ T9665] vfat: Bad value for 'shortname' [ 124.378776][ C0] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 124.396094][ T9665] tmpfs: Unknown parameter '0xffffffffffffffff' [ 124.756550][ T9673] loop0: detected capacity change from 0 to 128 [ 124.763333][ T9673] vfat: Bad value for 'shortname' [ 124.768855][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 124.803544][ T9673] tmpfs: Unknown parameter '0xffffffffffffffff' [ 124.836919][ T9683] netlink: 'syz.3.2163': attribute type 3 has an invalid length. [ 124.898099][ T9686] 8021q: adding VLAN 0 to HW filter on device bond41 [ 124.919290][ T9686] team0: Port device bond41 added [ 124.986788][ T9697] loop3: detected capacity change from 0 to 1024 [ 125.019194][ T9697] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.058489][ T9702] loop4: detected capacity change from 0 to 512 [ 125.100002][ T9702] ext4 filesystem being mounted at /502/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.185577][ T9711] EXT4-fs error (device loop4): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.4.2168: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 125.206563][ T9711] EXT4-fs error (device loop4): ext4_get_first_dir_block:3538: inode #12: comm syz.4.2168: directory missing '.' [ 125.229669][ T9713] loop3: detected capacity change from 0 to 128 [ 125.236660][ T9713] vfat: Bad value for 'shortname' [ 125.248461][ C0] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 125.267505][ T9713] tmpfs: Unknown parameter '0xffffffffffffffff' [ 125.337411][ T9722] 8021q: adding VLAN 0 to HW filter on device bond30 [ 125.345765][ T9722] team0: Port device bond30 added [ 125.380217][ T9728] 8021q: adding VLAN 0 to HW filter on device bond35 [ 125.388339][ T9728] team0: Port device bond35 added [ 125.449159][ T9743] loop2: detected capacity change from 0 to 512 [ 125.470476][ T9745] loop0: detected capacity change from 0 to 512 [ 125.470551][ T9743] EXT4-fs (loop2): 1 orphan inode deleted [ 125.483415][ T9743] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.495238][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 125.507940][ T9745] ext4 filesystem being mounted at /471/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.533716][ T9753] loop2: detected capacity change from 0 to 1024 [ 125.542512][ T9753] EXT4-fs: Ignoring removed nobh option [ 125.548267][ T9754] loop3: detected capacity change from 0 to 128 [ 125.555439][ T9754] vfat: Bad value for 'shortname' [ 125.560895][ C0] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 125.576209][ T9754] tmpfs: Unknown parameter '0xffffffffffffffff' [ 125.712256][ T9771] 8021q: adding VLAN 0 to HW filter on device bond34 [ 125.720479][ T9771] team0: Port device bond34 added [ 125.983758][ T9799] loop2: detected capacity change from 0 to 128 [ 125.990568][ T9799] EXT4-fs: test_dummy_encryption option not supported [ 126.021504][ T9801] FAULT_INJECTION: forcing a failure. [ 126.021504][ T9801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.034763][ T9801] CPU: 1 UID: 0 PID: 9801 Comm: syz.2.2205 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 126.034821][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 126.034837][ T9801] Call Trace: [ 126.034843][ T9801] [ 126.034852][ T9801] __dump_stack+0x1d/0x30 [ 126.034878][ T9801] dump_stack_lvl+0xe8/0x140 [ 126.034900][ T9801] dump_stack+0x15/0x1b [ 126.034964][ T9801] should_fail_ex+0x265/0x280 [ 126.035009][ T9801] should_fail+0xb/0x20 [ 126.035095][ T9801] should_fail_usercopy+0x1a/0x20 [ 126.035121][ T9801] _copy_from_user+0x1c/0xb0 [ 126.035151][ T9801] __sys_sendto+0x19e/0x330 [ 126.035323][ T9801] __x64_sys_sendto+0x76/0x90 [ 126.035365][ T9801] x64_sys_call+0x2eb6/0x2fb0 [ 126.035438][ T9801] do_syscall_64+0xd0/0x1a0 [ 126.035467][ T9801] ? clear_bhb_loop+0x40/0x90 [ 126.035488][ T9801] ? clear_bhb_loop+0x40/0x90 [ 126.035509][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.035591][ T9801] RIP: 0033:0x7f0d689de969 [ 126.035609][ T9801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.035629][ T9801] RSP: 002b:00007f0d67047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 126.035648][ T9801] RAX: ffffffffffffffda RBX: 00007f0d68c05fa0 RCX: 00007f0d689de969 [ 126.035665][ T9801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 126.035677][ T9801] RBP: 00007f0d67047090 R08: 0000200000000100 R09: 0000000000000010 [ 126.035691][ T9801] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001 [ 126.035707][ T9801] R13: 0000000000000000 R14: 00007f0d68c05fa0 R15: 00007ffc93793788 [ 126.035735][ T9801] [ 126.225782][ T9805] netlink: 'syz.2.2207': attribute type 3 has an invalid length. [ 126.246105][ T9807] 8021q: adding VLAN 0 to HW filter on device bond31 [ 126.254761][ T9807] team0: Port device bond31 added [ 126.271397][ T9810] 8021q: adding VLAN 0 to HW filter on device bond36 [ 126.280207][ T9810] team0: Port device bond36 added [ 126.412894][ T9833] __nla_validate_parse: 39 callbacks suppressed [ 126.412914][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2218'. [ 126.431888][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 126.494226][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2219'. [ 126.640342][ T9845] 8021q: adding VLAN 0 to HW filter on device bond37 [ 126.648535][ T9845] team0: Port device bond37 added [ 126.779729][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2231'. [ 126.805473][ T9869] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2232'. [ 127.034570][ T9879] 8021q: adding VLAN 0 to HW filter on device bond43 [ 127.042914][ T9879] team0: Port device bond43 added [ 127.084314][ T9883] 8021q: adding VLAN 0 to HW filter on device bond42 [ 127.092404][ T9883] team0: Port device bond42 added [ 127.127433][ T9888] loop0: detected capacity change from 0 to 512 [ 127.153171][ T9891] loop4: detected capacity change from 0 to 512 [ 127.162282][ T9888] ext4 filesystem being mounted at /486/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.174969][ T9891] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.190518][ T9891] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 127.205363][ T9891] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 127.217688][ T9891] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.217688][ T9891] [ 127.227571][ T9891] EXT4-fs (loop4): Total free blocks count 0 [ 127.233786][ T9891] EXT4-fs (loop4): Free/Dirty block details [ 127.239768][ T9891] EXT4-fs (loop4): free_blocks=65280 [ 127.245263][ T9891] EXT4-fs (loop4): dirty_blocks=3 [ 127.250300][ T9891] EXT4-fs (loop4): Block reservation details [ 127.256406][ T9891] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 127.294025][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2242'. [ 127.303712][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2242'. [ 127.315859][ T9905] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2243'. [ 127.325634][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2243'. [ 127.413520][ T9913] loop3: detected capacity change from 0 to 128 [ 127.420748][ T9913] vfat: Bad value for 'shortname' [ 127.427017][ C1] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 127.443895][ T9913] tmpfs: Unknown parameter '0xffffffffffffffff' [ 127.457332][ T9915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2248'. [ 127.487878][ T9919] loop4: detected capacity change from 0 to 512 [ 127.507913][ T9919] EXT4-fs (loop4): 1 orphan inode deleted [ 127.514588][ T9919] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.525281][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 127.565290][ T9926] loop3: detected capacity change from 0 to 256 [ 127.601927][ T9930] 8021q: adding VLAN 0 to HW filter on device bond43 [ 127.610726][ T9930] team0: Port device bond43 added [ 127.657913][ T9939] 8021q: adding VLAN 0 to HW filter on device bond44 [ 127.665946][ T9939] team0: Port device bond44 added [ 127.739457][ T9946] tmpfs: Bad value for 'size' [ 127.746590][ T9946] xt_hashlimit: max too large, truncated to 1048576 [ 127.823256][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 127.823271][ T29] audit: type=1400 audit(1747395126.822:10411): avc: denied { map_create } for pid=9948 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 127.831586][ T9946] Cannot find add_set index 3 as target [ 127.848762][ T29] audit: type=1400 audit(1747395126.822:10412): avc: denied { map_read map_write } for pid=9948 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 127.890538][ T29] audit: type=1400 audit(1747395126.882:10413): avc: denied { create } for pid=9948 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.910271][ T29] audit: type=1400 audit(1747395126.882:10414): avc: denied { setopt } for pid=9948 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.930083][ T29] audit: type=1400 audit(1747395126.882:10415): avc: denied { create } for pid=9948 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.951029][ T29] audit: type=1400 audit(1747395126.882:10416): avc: denied { write } for pid=9948 comm="syz.4.2261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 127.971727][ T29] audit: type=1400 audit(1747395126.882:10417): avc: denied { create } for pid=9948 comm="syz.4.2261" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.992620][ T29] audit: type=1400 audit(1747395126.882:10418): avc: denied { read } for pid=9948 comm="syz.4.2261" name="file0" dev="tmpfs" ino=2816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.015199][ T29] audit: type=1400 audit(1747395126.882:10419): avc: denied { open } for pid=9948 comm="syz.4.2261" path="/517/file0" dev="tmpfs" ino=2816 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.038274][ T29] audit: type=1400 audit(1747395126.882:10420): avc: denied { ioctl } for pid=9948 comm="syz.4.2261" path="socket:[25671]" dev="sockfs" ino=25671 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 128.137699][ T9959] loop4: detected capacity change from 0 to 128 [ 128.145193][ T9959] FAT-fs (loop4): Directory bread(block 162) failed [ 128.151839][ T9959] FAT-fs (loop4): Directory bread(block 163) failed [ 128.158633][ T9959] FAT-fs (loop4): Directory bread(block 164) failed [ 128.165378][ T9959] FAT-fs (loop4): Directory bread(block 165) failed [ 128.172038][ T9959] FAT-fs (loop4): Directory bread(block 166) failed [ 128.178757][ T9959] FAT-fs (loop4): Directory bread(block 167) failed [ 128.185545][ T9959] FAT-fs (loop4): Directory bread(block 168) failed [ 128.192210][ T9959] FAT-fs (loop4): Directory bread(block 169) failed [ 128.202335][ T9959] FAT-fs (loop4): Directory bread(block 162) failed [ 128.209086][ T9959] FAT-fs (loop4): Directory bread(block 163) failed [ 128.216474][ T9959] syz.4.2266: attempt to access beyond end of device [ 128.216474][ T9959] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 128.229838][ T9959] syz.4.2266: attempt to access beyond end of device [ 128.229838][ T9959] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 128.249717][ T9962] loop0: detected capacity change from 0 to 512 [ 128.276860][ T9962] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec01c, mo2=0002] [ 128.285691][ T9962] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 128.301349][ T9962] EXT4-fs (loop0): mount failed [ 128.317054][ T9969] 8021q: adding VLAN 0 to HW filter on device bond38 [ 128.341811][ T9962] loop0: detected capacity change from 0 to 8192 [ 128.350165][ T9969] team0: Port device bond38 added [ 128.372039][ T9973] loop4: detected capacity change from 0 to 1024 [ 128.374672][ T9975] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 128.384484][ T9962] loop0: p1 p3 p4 [ 128.386975][ T9975] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 128.390714][ T9962] loop0: p1 size 8390912 extends beyond EOD, truncated [ 128.406281][ T9973] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 128.417244][ T9973] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 128.428148][ T9962] loop0: p3 size 589824 extends beyond EOD, truncated [ 128.437878][ T9975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.447095][ T9975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.448699][ T9973] JBD2: no valid journal superblock found [ 128.460829][ T9973] EXT4-fs (loop4): Could not load journal inode [ 128.527552][ T9973] loop4: detected capacity change from 0 to 2048 [ 128.569240][ T9973] 9pnet_fd: Insufficient options for proto=fd [ 128.593011][ T9996] 8021q: adding VLAN 0 to HW filter on device bond39 [ 128.601141][ T9996] team0: Port device bond39 added [ 128.612801][ T9999] loop4: detected capacity change from 0 to 512 [ 128.637759][ T9999] EXT4-fs (loop4): 1 orphan inode deleted [ 128.649889][ T9999] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.660541][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 128.725562][T10012] 8021q: adding VLAN 0 to HW filter on device bond45 [ 128.733706][T10012] team0: Port device bond45 added [ 128.805727][T10025] 8021q: adding VLAN 0 to HW filter on device bond46 [ 128.813730][T10025] team0: Port device bond46 added [ 128.863834][T10028] 8021q: adding VLAN 0 to HW filter on device bond44 [ 128.872245][T10028] team0: Port device bond44 added [ 128.917827][T10036] loop4: detected capacity change from 0 to 512 [ 128.937669][T10039] loop0: detected capacity change from 0 to 512 [ 128.947262][T10036] EXT4-fs (loop4): 1 orphan inode deleted [ 128.953644][T10036] EXT4-fs mount: 60 callbacks suppressed [ 128.953712][T10036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.967033][T10039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.973644][T10036] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.985100][T10039] ext4 filesystem being mounted at /505/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.995577][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 129.034498][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.045596][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.062653][T10045] loop0: detected capacity change from 0 to 512 [ 129.087020][T10045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.099863][T10045] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.117028][T10053] loop4: detected capacity change from 0 to 512 [ 129.136102][T10053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.149145][T10053] ext4 filesystem being mounted at /530/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.160994][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.189839][T10056] 8021q: adding VLAN 0 to HW filter on device bond45 [ 129.198067][T10056] team0: Port device bond45 added [ 129.221145][T10059] EXT4-fs error (device loop4): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.4.2299: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 129.241749][T10059] EXT4-fs error (device loop4): ext4_get_first_dir_block:3538: inode #12: comm syz.4.2299: directory missing '.' [ 129.273843][T10064] 8021q: adding VLAN 0 to HW filter on device bond46 [ 129.281901][T10064] team0: Port device bond46 added [ 129.336918][T10071] tmpfs: Bad value for 'size' [ 129.344339][T10071] xt_hashlimit: max too large, truncated to 1048576 [ 129.352549][T10073] 8021q: adding VLAN 0 to HW filter on device bond32 [ 129.360977][T10073] team0: Port device bond32 added [ 129.435676][T10071] Cannot find add_set index 3 as target [ 129.538511][T10083] loop1: detected capacity change from 0 to 512 [ 129.577146][T10083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.604999][T10083] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.645125][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.694561][T10092] loop1: detected capacity change from 0 to 512 [ 129.726901][T10092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.739888][T10092] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.766755][T10090] loop0: detected capacity change from 0 to 1024 [ 129.773630][T10090] EXT4-fs: Ignoring removed orlov option [ 129.781638][T10092] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 129.796716][T10092] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 129.809051][T10092] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.809051][T10092] [ 129.811495][T10090] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 129.818720][T10092] EXT4-fs (loop1): Total free blocks count 0 [ 129.818740][T10092] EXT4-fs (loop1): Free/Dirty block details [ 129.818754][T10092] EXT4-fs (loop1): free_blocks=65280 [ 129.845977][T10092] EXT4-fs (loop1): dirty_blocks=3 [ 129.851038][T10092] EXT4-fs (loop1): Block reservation details [ 129.857132][T10092] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 129.868674][T10090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.907828][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.956748][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.993287][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.036296][T10108] loop0: detected capacity change from 0 to 1024 [ 130.058790][T10117] loop1: detected capacity change from 0 to 128 [ 130.066509][T10117] vfat: Bad value for 'shortname' [ 130.072374][T10108] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.083373][T10108] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 130.089214][ C1] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 130.096651][T10108] JBD2: no valid journal superblock found [ 130.111140][T10108] EXT4-fs (loop0): Could not load journal inode [ 130.120646][T10117] tmpfs: Unknown parameter '0xffffffffffffffff' [ 130.128978][T10120] loop3: detected capacity change from 0 to 128 [ 130.136031][T10120] vfat: Bad value for 'shortname' [ 130.142108][ C1] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 130.154938][T10108] loop0: detected capacity change from 0 to 2048 [ 130.177978][T10120] tmpfs: Unknown parameter '0xffffffffffffffff' [ 130.189380][T10108] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.203689][T10108] 9pnet_fd: Insufficient options for proto=fd [ 130.218449][T10126] batadv_slave_0: entered promiscuous mode [ 130.230766][T10126] batadv_slave_0 (unregistering): left promiscuous mode [ 130.232789][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.249779][T10128] loop3: detected capacity change from 0 to 512 [ 130.274342][T10128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.287665][T10128] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.335662][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.443678][T10149] 8021q: adding VLAN 0 to HW filter on device bond47 [ 130.457108][T10149] team0: Port device bond47 added [ 130.562310][T10163] loop4: detected capacity change from 0 to 1024 [ 130.569368][T10162] batadv_slave_0: entered promiscuous mode [ 130.574312][T10163] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 130.586330][T10163] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 130.600977][T10163] JBD2: no valid journal superblock found [ 130.605543][T10162] batadv_slave_0 (unregistering): left promiscuous mode [ 130.606807][T10163] EXT4-fs (loop4): Could not load journal inode [ 130.635265][T10163] loop4: detected capacity change from 0 to 2048 [ 130.660683][T10169] loop1: detected capacity change from 0 to 512 [ 130.673535][T10163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.690504][T10169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.703747][T10163] 9pnet_fd: Insufficient options for proto=fd [ 130.713217][T10169] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.736970][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.750938][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.763027][T10178] netlink: 'syz.2.2340': attribute type 3 has an invalid length. [ 130.869860][T10195] loop4: detected capacity change from 0 to 512 [ 130.887773][T10195] EXT4-fs (loop4): 1 orphan inode deleted [ 130.890962][T10199] loop1: detected capacity change from 0 to 128 [ 130.900391][T10199] vfat: Bad value for 'shortname' [ 130.903310][T10195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.906065][ C1] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 130.923414][T10195] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.941414][T10199] tmpfs: Unknown parameter '0xffffffffffffffff' [ 130.947964][ T1742] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 130.967619][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.994311][T10205] loop4: detected capacity change from 0 to 512 [ 131.000793][T10204] loop1: detected capacity change from 0 to 128 [ 131.007973][T10204] vfat: Bad value for 'shortname' [ 131.013901][ C0] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 131.022970][T10207] 8021q: adding VLAN 0 to HW filter on device bond48 [ 131.033569][T10205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.034461][T10207] team0: Port device bond48 added [ 131.047310][T10204] tmpfs: Unknown parameter '0xffffffffffffffff' [ 131.060965][T10205] ext4 filesystem being mounted at /540/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.114363][T10212] loop1: detected capacity change from 0 to 1024 [ 131.121914][T10212] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 131.132984][T10212] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 131.144018][T10212] JBD2: no valid journal superblock found [ 131.149932][T10212] EXT4-fs (loop1): Could not load journal inode [ 131.161836][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.172065][T10212] loop1: detected capacity change from 0 to 2048 [ 131.186368][T10212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.200398][T10212] 9pnet_fd: Insufficient options for proto=fd [ 131.217356][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.292570][T10231] netlink: 'syz.4.2359': attribute type 3 has an invalid length. [ 131.315452][T10233] loop0: detected capacity change from 0 to 128 [ 131.322399][T10233] vfat: Bad value for 'shortname' [ 131.328088][ C1] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 131.342719][T10233] tmpfs: Unknown parameter '0xffffffffffffffff' [ 131.369990][T10235] 8021q: adding VLAN 0 to HW filter on device bond47 [ 131.378134][T10235] team0: Port device bond47 added [ 131.445630][T10249] __nla_validate_parse: 51 callbacks suppressed [ 131.445650][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2366'. [ 131.483673][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2367'. [ 131.497651][T10254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2367'. [ 131.512412][T10255] 8021q: adding VLAN 0 to HW filter on device bond48 [ 131.521270][T10255] team0: Port device bond48 added [ 131.687526][T10269] 8021q: adding VLAN 0 to HW filter on device bond40 [ 131.705873][T10269] team0: Port device bond40 added [ 131.719131][T10251] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.810323][T10281] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2376'. [ 131.841417][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2377'. [ 131.909912][T10286] loop4: detected capacity change from 0 to 512 [ 132.026289][T10286] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.038990][T10286] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.055083][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2374'. [ 132.064028][T10286] bridge_slave_1: left allmulticast mode [ 132.069795][T10286] bridge_slave_1: left promiscuous mode [ 132.075680][T10286] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.083719][T10286] bridge_slave_0: left allmulticast mode [ 132.089496][T10286] bridge_slave_0: left promiscuous mode [ 132.095232][T10286] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.130312][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2378'. [ 132.452872][T10301] 8021q: adding VLAN 0 to HW filter on device bond33 [ 132.512354][T10301] team0: Port device bond33 added [ 132.939521][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 132.939537][ T29] audit: type=1400 audit(1747395131.942:10755): avc: denied { bind } for pid=10320 comm="syz.1.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.965603][ T29] audit: type=1400 audit(1747395131.942:10756): avc: denied { name_bind } for pid=10320 comm="syz.1.2385" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 132.987558][ T29] audit: type=1400 audit(1747395131.942:10757): avc: denied { node_bind } for pid=10320 comm="syz.1.2385" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 133.031383][ T3422] team0: Failed to send port change of device bond33 via netlink (err -105) [ 133.180208][T10324] 8021q: adding VLAN 0 to HW filter on device bond41 [ 133.232627][T10324] team0: Port device bond41 added [ 133.240113][ T29] audit: type=1400 audit(1747395132.192:10758): avc: denied { prog_load } for pid=10326 comm="syz.1.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.259517][ T29] audit: type=1400 audit(1747395132.192:10759): avc: denied { bpf } for pid=10326 comm="syz.1.2387" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.280371][ T29] audit: type=1400 audit(1747395132.212:10760): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.304675][ T29] audit: type=1400 audit(1747395132.212:10761): avc: denied { open } for pid=3319 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.328898][ T29] audit: type=1400 audit(1747395132.212:10762): avc: denied { ioctl } for pid=3319 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.354742][ T29] audit: type=1400 audit(1747395132.222:10763): avc: denied { create } for pid=10323 comm="syz.2.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.374697][ T29] audit: type=1400 audit(1747395132.222:10764): avc: denied { map_create } for pid=10323 comm="syz.2.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.399430][T10333] loop3: detected capacity change from 0 to 256 [ 133.593466][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2389'. [ 133.657040][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'. [ 133.767847][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'. [ 134.313809][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.373150][T10369] tmpfs: Bad value for 'size' [ 134.443683][T10373] loop3: detected capacity change from 0 to 1024 [ 134.451882][T10373] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 134.462986][T10373] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 134.474617][T10373] JBD2: no valid journal superblock found [ 134.480546][T10373] EXT4-fs (loop3): Could not load journal inode [ 134.508101][T10373] loop3: detected capacity change from 0 to 2048 [ 134.547408][T10373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.561905][T10373] 9pnet_fd: Insufficient options for proto=fd [ 134.579480][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.668053][T10388] vti0: left promiscuous mode [ 134.674071][T10388] ip6gretap1: left promiscuous mode [ 134.679930][T10388] ip6gretap1: left allmulticast mode [ 134.699849][T10390] loop0: detected capacity change from 0 to 512 [ 134.718072][T10390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.732327][T10390] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.761872][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.826875][T10404] loop3: detected capacity change from 0 to 1024 [ 134.834184][T10404] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 134.845270][T10404] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 134.856152][T10404] JBD2: no valid journal superblock found [ 134.861944][T10404] EXT4-fs (loop3): Could not load journal inode [ 134.877562][T10404] loop3: detected capacity change from 0 to 2048 [ 134.897026][T10404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.910693][T10404] 9pnet_fd: Insufficient options for proto=fd [ 134.927794][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.963634][T10413] FAULT_INJECTION: forcing a failure. [ 134.963634][T10413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.977019][T10413] CPU: 0 UID: 0 PID: 10413 Comm: syz.3.2421 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 134.977046][T10413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 134.977059][T10413] Call Trace: [ 134.977066][T10413] [ 134.977125][T10413] __dump_stack+0x1d/0x30 [ 134.977152][T10413] dump_stack_lvl+0xe8/0x140 [ 134.977177][T10413] dump_stack+0x15/0x1b [ 134.977334][T10413] should_fail_ex+0x265/0x280 [ 134.977366][T10413] should_fail+0xb/0x20 [ 134.977437][T10413] should_fail_usercopy+0x1a/0x20 [ 134.977454][T10413] _copy_from_user+0x1c/0xb0 [ 134.977477][T10413] __sys_bpf+0x178/0x790 [ 134.977513][T10413] __x64_sys_bpf+0x41/0x50 [ 134.977595][T10413] x64_sys_call+0x2478/0x2fb0 [ 134.977613][T10413] do_syscall_64+0xd0/0x1a0 [ 134.977634][T10413] ? clear_bhb_loop+0x40/0x90 [ 134.977693][T10413] ? clear_bhb_loop+0x40/0x90 [ 134.977759][T10413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.977781][T10413] RIP: 0033:0x7f4ba69be969 [ 134.977795][T10413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.977836][T10413] RSP: 002b:00007f4ba5027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.977859][T10413] RAX: ffffffffffffffda RBX: 00007f4ba6be5fa0 RCX: 00007f4ba69be969 [ 134.977875][T10413] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 134.977890][T10413] RBP: 00007f4ba5027090 R08: 0000000000000000 R09: 0000000000000000 [ 134.977903][T10413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.977914][T10413] R13: 0000000000000001 R14: 00007f4ba6be5fa0 R15: 00007ffe95cafc68 [ 134.978005][T10413] [ 135.206284][T10419] loop1: detected capacity change from 0 to 1024 [ 135.207858][T10423] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.217039][T10419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.252956][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.310889][T10440] tmpfs: Bad value for 'size' [ 135.338679][T10442] loop1: detected capacity change from 0 to 512 [ 135.380709][T10442] EXT4-fs (loop1): 1 orphan inode deleted [ 135.389288][T10442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.402092][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 135.414036][T10442] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.445207][T10453] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 135.466644][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.508916][T10457] 8021q: adding VLAN 0 to HW filter on device bond35 [ 135.517637][T10457] team0: Port device bond35 added [ 135.759968][T10484] loop3: detected capacity change from 0 to 1024 [ 135.767856][T10484] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 135.778814][T10484] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 135.789917][T10484] JBD2: no valid journal superblock found [ 135.795850][T10484] EXT4-fs (loop3): Could not load journal inode [ 135.815722][T10484] loop3: detected capacity change from 0 to 2048 [ 135.838580][T10484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.857109][T10484] 9pnet_fd: Insufficient options for proto=fd [ 135.884143][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.934171][T10492] lo speed is unknown, defaulting to 1000 [ 135.970441][T10499] loop0: detected capacity change from 0 to 128 [ 135.979786][T10499] vfat: Bad value for 'shortname' [ 135.985528][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 136.001554][T10499] tmpfs: Unknown parameter '0xffffffffffffffff' [ 136.236368][T10517] 8021q: adding VLAN 0 to HW filter on device bond34 [ 136.244391][T10517] team0: Port device bond34 added [ 136.357661][T10492] loop1: detected capacity change from 0 to 512 [ 136.364638][T10492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.376060][T10492] EXT4-fs (loop1): 1 truncate cleaned up [ 136.382517][T10492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.430167][T10492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=10492 comm=syz.1.2450 [ 136.472354][T10534] netlink: 'syz.2.2465': attribute type 3 has an invalid length. [ 136.488242][T10536] loop4: detected capacity change from 0 to 128 [ 136.495241][T10536] vfat: Bad value for 'shortname' [ 136.500824][ C0] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 136.519187][T10536] tmpfs: Unknown parameter '0xffffffffffffffff' [ 136.546610][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.588015][T10544] 8021q: adding VLAN 0 to HW filter on device bond35 [ 136.596431][T10544] team0: Port device bond35 added [ 136.662598][T10551] 8021q: adding VLAN 0 to HW filter on device bond49 [ 136.671004][T10551] team0: Port device bond49 added [ 136.684122][T10554] 8021q: adding VLAN 0 to HW filter on device bond36 [ 136.693995][T10554] team0: Port device bond36 added [ 136.776328][T10570] loop4: detected capacity change from 0 to 512 [ 136.792765][T10572] FAULT_INJECTION: forcing a failure. [ 136.792765][T10572] name failslab, interval 1, probability 0, space 0, times 0 [ 136.798478][T10570] EXT4-fs (loop4): 1 orphan inode deleted [ 136.805631][T10572] CPU: 0 UID: 0 PID: 10572 Comm: syz.2.2478 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 136.805670][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 136.805687][T10572] Call Trace: [ 136.805696][T10572] [ 136.805707][T10572] __dump_stack+0x1d/0x30 [ 136.805735][T10572] dump_stack_lvl+0xe8/0x140 [ 136.805798][T10572] dump_stack+0x15/0x1b [ 136.805818][T10572] should_fail_ex+0x265/0x280 [ 136.805863][T10572] should_failslab+0x8c/0xb0 [ 136.805903][T10572] __kmalloc_noprof+0xa5/0x3e0 [ 136.805928][T10572] ? ip_options_get+0x52/0x350 [ 136.805992][T10572] ip_options_get+0x52/0x350 [ 136.806023][T10572] do_ip_setsockopt+0x19d4/0x2240 [ 136.806065][T10572] ip_setsockopt+0x58/0x110 [ 136.806100][T10572] ipv6_setsockopt+0xfb/0x130 [ 136.806180][T10572] tcp_setsockopt+0x98/0xb0 [ 136.806220][T10572] sock_common_setsockopt+0x69/0x80 [ 136.806258][T10572] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 136.806312][T10572] __sys_setsockopt+0x184/0x200 [ 136.806340][T10572] __x64_sys_setsockopt+0x64/0x80 [ 136.806366][T10572] x64_sys_call+0x2bd5/0x2fb0 [ 136.806394][T10572] do_syscall_64+0xd0/0x1a0 [ 136.806425][T10572] ? clear_bhb_loop+0x40/0x90 [ 136.806529][T10572] ? clear_bhb_loop+0x40/0x90 [ 136.806557][T10572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.806644][T10572] RIP: 0033:0x7f0d689de969 [ 136.806664][T10572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.806712][T10572] RSP: 002b:00007f0d67047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 136.806736][T10572] RAX: ffffffffffffffda RBX: 00007f0d68c05fa0 RCX: 00007f0d689de969 [ 136.806754][T10572] RDX: 0000000000000004 RSI: 0004000000000000 RDI: 0000000000000004 [ 136.806770][T10572] RBP: 00007f0d67047090 R08: 0000000000000000 R09: 0000000000000000 [ 136.806786][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.806802][T10572] R13: 0000000000000000 R14: 00007f0d68c05fa0 R15: 00007ffc93793788 [ 136.806831][T10572] [ 136.823994][ T1742] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 136.852436][T10570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.045830][T10570] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.082090][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.101317][T10590] netlink: 'syz.2.2485': attribute type 3 has an invalid length. [ 137.118590][T10592] loop4: detected capacity change from 0 to 512 [ 137.131706][T10588] 8021q: adding VLAN 0 to HW filter on device bond49 [ 137.139911][T10588] team0: Port device bond49 added [ 137.152981][T10592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.167073][T10592] ext4 filesystem being mounted at /566/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.203577][T10592] __nla_validate_parse: 38 callbacks suppressed [ 137.203596][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2486'. [ 137.236823][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.333994][T10614] lo speed is unknown, defaulting to 1000 [ 137.346055][T10619] loop1: detected capacity change from 0 to 128 [ 137.353304][T10619] vfat: Bad value for 'shortname' [ 137.353695][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'. [ 137.367475][ C1] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 137.390484][T10619] tmpfs: Unknown parameter '0xffffffffffffffff' [ 137.419105][T10622] loop4: detected capacity change from 0 to 512 [ 137.432781][T10624] loop1: detected capacity change from 0 to 512 [ 137.457582][T10624] EXT4-fs (loop1): 1 orphan inode deleted [ 137.465730][T10622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.478411][T10622] ext4 filesystem being mounted at /569/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.482682][T10624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.508994][ T1742] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 137.515336][T10624] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.541150][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2496'. [ 137.572037][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.594239][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.699684][T10633] 8021q: adding VLAN 0 to HW filter on device bond36 [ 137.708440][T10633] team0: Port device bond36 added [ 137.793046][T10638] netlink: 'syz.4.2500': attribute type 3 has an invalid length. [ 137.839961][T10640] 8021q: adding VLAN 0 to HW filter on device bond37 [ 137.863853][T10643] loop4: detected capacity change from 0 to 1024 [ 137.871890][T10640] team0: Port device bond37 added [ 137.877326][T10643] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 137.888429][T10643] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 137.900063][T10643] JBD2: no valid journal superblock found [ 137.905957][T10643] EXT4-fs (loop4): Could not load journal inode [ 137.955078][T10643] loop4: detected capacity change from 0 to 2048 [ 137.988964][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 137.988980][ T29] audit: type=1400 audit(1747395136.992:11124): avc: denied { mount } for pid=10647 comm="syz.1.2503" name="/" dev="configfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 138.018578][ T29] audit: type=1400 audit(1747395137.002:11125): avc: denied { search } for pid=10647 comm="syz.1.2503" name="/" dev="configfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.041141][ T29] audit: type=1400 audit(1747395137.002:11126): avc: denied { read } for pid=10647 comm="syz.1.2503" name="/" dev="configfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.063681][ T29] audit: type=1400 audit(1747395137.002:11127): avc: denied { open } for pid=10647 comm="syz.1.2503" path="/" dev="configfs" ino=1736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 138.064609][T10643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.085941][ T29] audit: type=1326 audit(1747395137.002:11128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.1.2503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cdfb6e969 code=0x0 [ 138.104079][T10643] 9pnet_fd: Insufficient options for proto=fd [ 138.131914][ T29] audit: type=1400 audit(1747395137.102:11129): avc: denied { mount } for pid=10642 comm="syz.4.2502" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 138.153917][ T29] audit: type=1400 audit(1747395137.102:11130): avc: denied { mounton } for pid=10642 comm="syz.4.2502" path="/572/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.177516][ T29] audit: type=1400 audit(1747395137.132:11131): avc: denied { create } for pid=10642 comm="syz.4.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.197535][ T29] audit: type=1400 audit(1747395137.132:11132): avc: denied { create } for pid=10647 comm="syz.1.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 138.217385][ T29] audit: type=1400 audit(1747395137.182:11133): avc: denied { getopt } for pid=10647 comm="syz.1.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 138.255844][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.296328][T10655] loop3: detected capacity change from 0 to 128 [ 138.303226][T10655] vfat: Bad value for 'shortname' [ 138.346440][ C1] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 138.363975][T10655] tmpfs: Unknown parameter '0xffffffffffffffff' [ 138.399293][T10659] loop3: detected capacity change from 0 to 512 [ 138.414395][T10659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.427539][T10659] ext4 filesystem being mounted at /486/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.505796][T10668] EXT4-fs error (device loop3): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.3.2508: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 138.526731][T10668] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #12: comm syz.3.2508: directory missing '.' [ 138.748984][T10680] 8021q: adding VLAN 0 to HW filter on device bond42 [ 138.757237][T10680] team0: Port device bond42 added [ 139.010859][T10692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2516'. [ 139.040700][T10692] loop0: detected capacity change from 0 to 512 [ 139.047779][T10692] ext4: Unknown parameter 'fsuuid' [ 139.474277][T10697] 8021q: adding VLAN 0 to HW filter on device bond50 [ 139.499635][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.543637][T10697] team0: Port device bond50 added [ 139.806315][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2526'. [ 139.889367][T10717] 8021q: adding VLAN 0 to HW filter on device bond51 [ 139.904937][T10717] team0: Port device bond51 added [ 140.098599][T10731] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2532'. [ 140.113556][T10732] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2532'. [ 140.131497][T10731] loop4: detected capacity change from 0 to 1024 [ 140.156633][T10731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.169267][T10731] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.187656][T10731] dvmrp5: entered allmulticast mode [ 140.193566][T10732] dvmrp5: left allmulticast mode [ 140.264042][T10743] loop1: detected capacity change from 0 to 512 [ 140.393498][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.899430][T10743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.912908][T10743] ext4 filesystem being mounted at /454/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.944825][T10752] 8021q: adding VLAN 0 to HW filter on device bond50 [ 140.952775][T10752] team0: Port device bond50 added [ 140.992282][T10760] EXT4-fs error (device loop1): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.1.2534: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 141.019364][T10754] 8021q: adding VLAN 0 to HW filter on device bond43 [ 141.030565][T10754] team0: Port device bond43 added [ 141.094449][T10771] loop3: detected capacity change from 0 to 2048 [ 141.102115][T10760] EXT4-fs error (device loop1): ext4_get_first_dir_block:3538: inode #12: comm syz.1.2534: directory missing '.' [ 141.187461][T10771] Alternate GPT is invalid, using primary GPT. [ 141.193927][T10771] loop3: p2 p3 p7 [ 141.239442][T10783] tmpfs: Bad value for 'size' [ 141.249949][T10783] xt_hashlimit: max too large, truncated to 1048576 [ 141.289975][T10785] binfmt_misc: register: failed to install interpreter file ./file2 [ 141.307239][T10787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2547'. [ 141.344652][T10783] Cannot find add_set index 3 as target [ 141.414114][T10791] loop3: detected capacity change from 0 to 512 [ 141.435971][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.448351][T10793] 8021q: adding VLAN 0 to HW filter on device bond52 [ 141.456763][T10793] team0: Port device bond52 added [ 141.470079][T10791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.495110][T10791] ext4 filesystem being mounted at /493/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.511781][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2550'. [ 141.537586][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.603817][T10807] 9pnet_virtio: no channels available for device 127.0.0.1 [ 141.607087][T10816] 9pnet_virtio: no channels available for device 127.0.0.1 [ 141.642101][T10820] loop4: detected capacity change from 0 to 512 [ 141.656245][T10820] ext4: Unknown parameter 'measure' [ 141.679437][T10822] loop0: detected capacity change from 0 to 512 [ 141.711975][T10822] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 141.730709][T10820] loop4: detected capacity change from 0 to 2048 [ 141.741936][T10822] EXT4-fs (loop0): invalid journal inode [ 141.792579][T10830] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2564'. [ 141.957322][T10844] loop4: detected capacity change from 0 to 512 [ 141.993718][T10844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.010005][T10844] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.036861][T10852] tmpfs: Bad value for 'size' [ 142.043222][T10852] xt_hashlimit: max too large, truncated to 1048576 [ 142.052422][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.082952][T10850] 8021q: adding VLAN 0 to HW filter on device bond38 [ 142.092238][T10850] team0: Port device bond38 added [ 142.133315][T10852] Cannot find add_set index 3 as target [ 142.156431][T10858] loop4: detected capacity change from 0 to 512 [ 142.190545][T10858] EXT4-fs (loop4): 1 orphan inode deleted [ 142.200611][T10858] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.211400][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 142.375140][T10881] loop1: detected capacity change from 0 to 128 [ 142.383061][T10881] vfat: Bad value for 'shortname' [ 142.397449][ C1] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 142.418857][T10881] tmpfs: Unknown parameter '0xffffffffffffffff' [ 142.446870][T10884] __nla_validate_parse: 2 callbacks suppressed [ 142.446887][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2583'. [ 142.462737][T10884] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2583'. [ 142.487747][T10887] tmpfs: Bad value for 'size' [ 142.506079][T10887] xt_hashlimit: max too large, truncated to 1048576 [ 142.520380][T10890] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2586'. [ 142.536009][T10890] loop4: detected capacity change from 0 to 164 [ 142.546140][T10890] syz.4.2586: attempt to access beyond end of device [ 142.546140][T10890] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 142.561006][T10890] syz.4.2586: attempt to access beyond end of device [ 142.561006][T10890] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 142.576552][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'. [ 142.597424][T10887] Cannot find add_set index 3 as target [ 142.656502][T10897] loop4: detected capacity change from 0 to 512 [ 142.689925][T10897] EXT4-fs (loop4): 1 orphan inode deleted [ 142.698997][T10897] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.734262][T10906] loop1: detected capacity change from 0 to 128 [ 142.741066][T10906] vfat: Bad value for 'shortname' [ 142.747713][ C1] operation not supported error, dev loop1, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 142.773686][T10906] tmpfs: Unknown parameter '0xffffffffffffffff' [ 142.782200][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2596'. [ 142.805124][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 142.986312][T10922] lo speed is unknown, defaulting to 1000 [ 143.824481][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 143.824502][ T29] audit: type=1400 audit(1747395142.802:11565): avc: denied { write } for pid=10915 comm="syz.1.2598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 144.041241][ T29] audit: type=1400 audit(1747395143.002:11566): avc: denied { module_request } for pid=10918 comm="syz.2.2599" kmod="arptable_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 144.120216][T10927] loop0: detected capacity change from 0 to 128 [ 144.225342][T10927] vfat: Bad value for 'shortname' [ 144.230730][T10934] tmpfs: Bad value for 'size' [ 144.236999][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 144.250605][T10934] xt_hashlimit: max too large, truncated to 1048576 [ 144.276359][ T29] audit: type=1326 audit(1747395143.082:11567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.3.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba69be969 code=0x7ffc0000 [ 144.300132][ T29] audit: type=1326 audit(1747395143.082:11568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.3.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4ba69be969 code=0x7ffc0000 [ 144.323717][ T29] audit: type=1326 audit(1747395143.082:11569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.3.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba69be969 code=0x7ffc0000 [ 144.347512][ T29] audit: type=1326 audit(1747395143.082:11570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.3.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4ba69be969 code=0x7ffc0000 [ 144.371083][ T29] audit: type=1326 audit(1747395143.082:11571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.3.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba69be969 code=0x7ffc0000 [ 144.394814][ T29] audit: type=1326 audit(1747395143.082:11572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.3.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ba69be969 code=0x7ffc0000 [ 144.418625][ T29] audit: type=1326 audit(1747395143.082:11573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.3.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ba69be969 code=0x7ffc0000 [ 144.442384][ T29] audit: type=1326 audit(1747395143.082:11574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10929 comm="syz.3.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ba69be969 code=0x7ffc0000 [ 144.470763][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2602'. [ 144.482342][T10934] Cannot find add_set index 3 as target [ 144.499144][T10927] tmpfs: Unknown parameter '0xffffffffffffffff' [ 144.631452][T10947] loop3: detected capacity change from 0 to 512 [ 144.767313][T10947] ext4 filesystem being mounted at /506/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.026383][T10963] FAULT_INJECTION: forcing a failure. [ 145.026383][T10963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.039835][T10963] CPU: 0 UID: 0 PID: 10963 Comm: syz.1.2611 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 145.039863][T10963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 145.039875][T10963] Call Trace: [ 145.039882][T10963] [ 145.039890][T10963] __dump_stack+0x1d/0x30 [ 145.039917][T10963] dump_stack_lvl+0xe8/0x140 [ 145.039943][T10963] dump_stack+0x15/0x1b [ 145.039968][T10963] should_fail_ex+0x265/0x280 [ 145.040076][T10963] should_fail+0xb/0x20 [ 145.040193][T10963] should_fail_usercopy+0x1a/0x20 [ 145.040219][T10963] _copy_from_iter+0xcf/0xdd0 [ 145.040244][T10963] ? __build_skb_around+0x1a0/0x200 [ 145.040286][T10963] ? __alloc_skb+0x223/0x320 [ 145.040371][T10963] netlink_sendmsg+0x471/0x6b0 [ 145.040404][T10963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.040431][T10963] __sock_sendmsg+0x145/0x180 [ 145.040528][T10963] ____sys_sendmsg+0x31e/0x4e0 [ 145.040561][T10963] ___sys_sendmsg+0x17b/0x1d0 [ 145.040605][T10963] __x64_sys_sendmsg+0xd4/0x160 [ 145.040636][T10963] x64_sys_call+0x2999/0x2fb0 [ 145.040689][T10963] do_syscall_64+0xd0/0x1a0 [ 145.040720][T10963] ? clear_bhb_loop+0x40/0x90 [ 145.040746][T10963] ? clear_bhb_loop+0x40/0x90 [ 145.040766][T10963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.040862][T10963] RIP: 0033:0x7f2cdfb6e969 [ 145.040877][T10963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.040899][T10963] RSP: 002b:00007f2cde1d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.040923][T10963] RAX: ffffffffffffffda RBX: 00007f2cdfd95fa0 RCX: 00007f2cdfb6e969 [ 145.040939][T10963] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 145.040956][T10963] RBP: 00007f2cde1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.040972][T10963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.041026][T10963] R13: 0000000000000000 R14: 00007f2cdfd95fa0 R15: 00007ffc46787ee8 [ 145.041053][T10963] [ 145.269156][T10970] loop1: detected capacity change from 0 to 128 [ 145.349558][T10957] lo speed is unknown, defaulting to 1000 [ 145.414277][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.427133][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.436406][ T37] bond0 (unregistering): Released all slaves [ 145.445091][ T37] bond1 (unregistering): Released all slaves [ 145.454010][ T37] team0: Port device bond2 removed [ 145.461425][ T37] bond2 (unregistering): Released all slaves [ 145.471225][ T37] team0: Port device bond3 removed [ 145.482047][ T37] bond3 (unregistering): Released all slaves [ 145.491695][ T37] team0: Port device bond4 removed [ 145.497871][ T37] bond4 (unregistering): Released all slaves [ 145.506957][ T37] team0: Port device bond5 removed [ 145.512816][ T37] bond5 (unregistering): Released all slaves [ 145.521939][ T37] team0: Port device bond6 removed [ 145.528135][ T37] bond6 (unregistering): Released all slaves [ 145.536604][ T37] team0: Port device bond7 removed [ 145.542591][ T37] bond7 (unregistering): Released all slaves [ 145.552526][ T37] team0: Port device bond8 removed [ 145.561052][ T37] bond8 (unregistering): Released all slaves [ 145.570733][ T37] team0: Port device bond9 removed [ 145.576725][ T37] bond9 (unregistering): Released all slaves [ 145.586419][ T37] team0: Port device bond10 removed [ 145.592467][ T37] bond10 (unregistering): Released all slaves [ 145.602172][ T37] team0: Port device bond11 removed [ 145.608297][ T37] bond11 (unregistering): Released all slaves [ 145.621103][ T37] team0: Port device bond12 removed [ 145.626702][T10989] loop0: detected capacity change from 0 to 128 [ 145.627293][ T37] bond12 (unregistering): Released all slaves [ 145.633481][T10989] vfat: Bad value for 'shortname' [ 145.644535][ T37] team0: Port device bond13 removed [ 145.645560][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 145.650922][ T37] bond13 (unregistering): Released all slaves [ 145.670838][T10989] tmpfs: Unknown parameter '0xffffffffffffffff' [ 145.689400][ T37] team0: Port device bond14 removed [ 145.699785][ T37] bond14 (unregistering): Released all slaves [ 145.715082][ T37] team0: Port device bond15 removed [ 145.721147][ T37] bond15 (unregistering): Released all slaves [ 145.734374][ T37] team0: Port device bond16 removed [ 145.741590][ T37] bond16 (unregistering): Released all slaves [ 145.751260][ T37] team0: Port device bond17 removed [ 145.757207][ T37] bond17 (unregistering): Released all slaves [ 145.772807][T10990] netlink: 'syz.3.2615': attribute type 10 has an invalid length. [ 145.783390][ T37] team0: Port device bond18 removed [ 145.789592][ T37] bond18 (unregistering): Released all slaves [ 145.800217][ T37] team0: Port device bond19 removed [ 145.806412][ T37] bond19 (unregistering): Released all slaves [ 145.829455][ T37] team0: Port device bond20 removed [ 145.835324][ T37] bond20 (unregistering): Released all slaves [ 145.849231][ T37] team0: Port device bond21 removed [ 145.855248][ T37] bond21 (unregistering): Released all slaves [ 145.864751][ T37] team0: Port device bond22 removed [ 145.870850][ T37] bond22 (unregistering): Released all slaves [ 145.881250][ T37] team0: Port device bond23 removed [ 145.889481][ T37] bond23 (unregistering): Released all slaves [ 145.898589][ T37] team0: Port device bond24 removed [ 145.904680][ T37] bond24 (unregistering): Released all slaves [ 145.913982][ T37] team0: Port device bond25 removed [ 145.920161][ T37] bond25 (unregistering): Released all slaves [ 145.929215][ T37] team0: Port device bond26 removed [ 145.938259][ T37] bond26 (unregistering): Released all slaves [ 145.948319][ T37] team0: Port device bond27 removed [ 145.954183][ T37] bond27 (unregistering): Released all slaves [ 145.963920][ T37] team0: Port device bond28 removed [ 145.970009][ T37] bond28 (unregistering): Released all slaves [ 145.980094][ T37] team0: Port device bond29 removed [ 145.986082][ T37] bond29 (unregistering): Released all slaves [ 145.996111][ T37] team0: Port device bond30 removed [ 146.002152][ T37] bond30 (unregistering): Released all slaves [ 146.011643][ T37] bond31 (unregistering): Released all slaves [ 146.021391][ T37] team0: Port device bond32 removed [ 146.027731][ T37] bond32 (unregistering): Released all slaves [ 146.036737][ T37] bond33 (unregistering): Released all slaves [ 146.047939][ T37] team0: Port device bond34 removed [ 146.053897][ T37] bond34 (unregistering): Released all slaves [ 146.063908][ T37] team0: Port device bond35 removed [ 146.069854][ T37] bond35 (unregistering): Released all slaves [ 146.081484][ T37] team0: Port device bond36 removed [ 146.087730][ T37] bond36 (unregistering): Released all slaves [ 146.097579][ T37] team0: Port device bond37 removed [ 146.103516][ T37] bond37 (unregistering): Released all slaves [ 146.113579][ T37] team0: Port device bond38 removed [ 146.119830][ T37] bond38 (unregistering): Released all slaves [ 146.130191][ T37] team0: Port device bond39 removed [ 146.136152][ T37] bond39 (unregistering): Released all slaves [ 146.145955][ T37] team0: Port device bond40 removed [ 146.151770][ T37] bond40 (unregistering): Released all slaves [ 146.162061][ T37] team0: Port device bond41 removed [ 146.167979][ T37] bond41 (unregistering): Released all slaves [ 146.179233][ T37] team0: Port device bond42 removed [ 146.185463][ T37] bond42 (unregistering): Released all slaves [ 146.196365][ T37] team0: Port device bond43 removed [ 146.202292][ T37] bond43 (unregistering): Released all slaves [ 146.212238][ T37] team0: Port device bond44 removed [ 146.219133][ T37] bond44 (unregistering): Released all slaves [ 146.229027][ T37] team0: Port device bond45 removed [ 146.234945][ T37] bond45 (unregistering): Released all slaves [ 146.247951][ T37] team0: Port device bond46 removed [ 146.253792][ T37] bond46 (unregistering): Released all slaves [ 146.263216][ T37] team0: Port device bond47 removed [ 146.269637][ T37] bond47 (unregistering): Released all slaves [ 146.279814][ T37] team0: Port device bond48 removed [ 146.286606][ T37] bond48 (unregistering): Released all slaves [ 146.295760][ T37] team0: Port device bond49 removed [ 146.301637][ T37] bond49 (unregistering): Released all slaves [ 146.313012][ T37] team0: Port device bond50 removed [ 146.319260][ T37] bond50 (unregistering): Released all slaves [ 146.329182][ T37] team0: Port device bond51 removed [ 146.335285][ T37] bond51 (unregistering): Released all slaves [ 146.344556][ T37] team0: Port device bond52 removed [ 146.350366][ T37] bond52 (unregistering): Released all slaves [ 146.390025][T10992] 8021q: adding VLAN 0 to HW filter on device bond51 [ 146.399186][T10992] team0: Port device bond51 added [ 146.438331][T10990] team0: Device hsr_slave_0 failed to register rx_handler [ 146.457032][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'. [ 146.477935][T11012] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2620'. [ 146.510666][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2621'. [ 146.546816][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2621'. [ 146.681175][T10957] chnl_net:caif_netlink_parms(): no params data found [ 146.689619][T11023] loop1: detected capacity change from 0 to 512 [ 146.711546][T11029] loop0: detected capacity change from 0 to 128 [ 146.725512][ T37] hsr_slave_0: left promiscuous mode [ 146.726967][T11023] ext4 filesystem being mounted at /474/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.743317][ T37] hsr_slave_1: left promiscuous mode [ 146.749379][T11029] vfat: Bad value for 'shortname' [ 146.788394][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 146.826735][T11029] tmpfs: Unknown parameter '0xffffffffffffffff' [ 146.885025][ T37] team0 (unregistering): Port device team_slave_0 removed [ 147.031961][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 147.159446][T10957] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.166908][T10957] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.174247][T10957] bridge_slave_0: entered allmulticast mode [ 147.181093][T10957] bridge_slave_0: entered promiscuous mode [ 147.191271][T10957] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.192773][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 147.198448][T10957] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.226424][T10957] bridge_slave_1: entered allmulticast mode [ 147.232863][T10957] bridge_slave_1: entered promiscuous mode [ 147.311834][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 147.332088][T10957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.341913][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 147.375978][T10957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.429397][T11048] 8021q: adding VLAN 0 to HW filter on device bond52 [ 147.453095][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 147.459976][T11048] team0: Port device bond52 added [ 147.478369][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 147.494990][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 147.518158][T10957] team0: Port device team_slave_0 added [ 147.557390][T10957] team0: Port device team_slave_1 added [ 147.588791][T11053] tmpfs: Bad value for 'size' [ 147.605004][T10957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.612010][T10957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.638065][T10957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.650060][T11053] xt_hashlimit: max too large, truncated to 1048576 [ 147.704631][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 147.746738][T11053] Cannot find add_set index 3 as target [ 147.746901][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 147.782778][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 147.806426][ T37] IPVS: stop unused estimator thread 0... [ 147.813746][T10957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.820765][T10957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.846848][T10957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.881895][T11061] __nla_validate_parse: 1 callbacks suppressed [ 147.881913][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2634'. [ 147.904358][T10957] hsr_slave_0: entered promiscuous mode [ 147.917453][T10957] hsr_slave_1: entered promiscuous mode [ 147.923834][T11061] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2634'. [ 147.930286][T10957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.949602][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 147.969312][T10957] Cannot create hsr debugfs directory [ 147.998987][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 148.015138][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 148.042833][T11066] 8021q: adding VLAN 0 to HW filter on device bond37 [ 148.050978][T11066] team0: Port device bond37 added [ 148.075843][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2635'. [ 148.113890][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2635'. [ 148.224097][T11073] loop0: detected capacity change from 0 to 512 [ 148.236804][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 148.271336][T11073] ext4 filesystem being mounted at /565/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.282344][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 148.314568][T11078] 8021q: adding VLAN 0 to HW filter on device bond38 [ 148.322989][T11078] team0: Port device bond38 added [ 148.351972][T10957] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 148.356023][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 148.372720][T10957] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 148.384045][T10957] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 148.403372][T10957] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.454735][T10957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.455359][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 148.468461][T10957] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.516043][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.523185][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.556657][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.563790][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.581041][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 148.670135][T10957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.699101][T11094] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2642'. [ 148.706399][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 148.708587][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2642'. [ 148.791882][T11094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2642'. [ 148.831007][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 148.831022][ T29] audit: type=1400 audit(1747395147.832:11861): avc: denied { write } for pid=3314 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.860751][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 148.872420][ T29] audit: type=1400 audit(1747395147.862:11862): avc: denied { remove_name } for pid=3314 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.895425][ T29] audit: type=1400 audit(1747395147.862:11863): avc: denied { rmdir } for pid=3314 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.937293][T10957] veth0_vlan: entered promiscuous mode [ 148.953050][T10957] veth1_vlan: entered promiscuous mode [ 148.986658][T11108] tmpfs: Bad value for 'size' [ 148.992394][ T29] audit: type=1400 audit(1747395147.992:11864): avc: denied { mounton } for pid=11107 comm="syz.2.2643" path="/484" dev="tmpfs" ino=2618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 149.000973][T11108] xt_hashlimit: max too large, truncated to 1048576 [ 149.018510][T10957] veth0_macvtap: entered promiscuous mode [ 149.039527][T10957] veth1_macvtap: entered promiscuous mode [ 149.066809][ T29] audit: type=1400 audit(1747395148.002:11865): avc: denied { prog_load } for pid=11107 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 149.086216][ T29] audit: type=1400 audit(1747395148.002:11866): avc: denied { bpf } for pid=11107 comm="syz.2.2643" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.107098][ T29] audit: type=1400 audit(1747395148.002:11867): avc: denied { perfmon } for pid=11107 comm="syz.2.2643" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 149.109847][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2643'. [ 149.140258][T10957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.148522][T11108] Cannot find add_set index 3 as target [ 149.156437][T10957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.176995][T10957] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.185815][T10957] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.194613][T10957] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.203521][T10957] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.219226][ T29] audit: type=1400 audit(1747395148.112:11868): avc: denied { create } for pid=11107 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.239896][ T29] audit: type=1400 audit(1747395148.112:11869): avc: denied { write } for pid=11107 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.260307][ T29] audit: type=1400 audit(1747395148.112:11870): avc: denied { nlmsg_write } for pid=11107 comm="syz.2.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.336290][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2645'. [ 149.363613][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2609'. [ 149.410538][T11124] tmpfs: Bad value for 'size' [ 149.420243][T11124] xt_hashlimit: max too large, truncated to 1048576 [ 149.482303][T11126] loop4: detected capacity change from 0 to 512 [ 149.510894][T11124] Cannot find add_set index 3 as target [ 149.518087][T11126] EXT4-fs (loop4): 1 orphan inode deleted [ 149.575090][T11126] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.586037][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 149.598175][T11133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11133 comm=syz.3.2649 [ 149.656562][T11141] loop0: detected capacity change from 0 to 512 [ 149.782915][T11141] EXT4-fs (loop0): 1 orphan inode deleted [ 149.790278][T11141] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.801599][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 149.893371][T11148] loop4: detected capacity change from 0 to 512 [ 149.904712][T11148] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 150.385100][T11148] EXT4-fs (loop4): 1 truncate cleaned up [ 150.439883][T11157] loop0: detected capacity change from 0 to 128 [ 150.450463][T11157] ext4 filesystem being mounted at /568/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 150.630738][T11161] loop3: detected capacity change from 0 to 128 [ 150.755521][T11161] vfat: Bad value for 'shortname' [ 150.822832][ C1] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 150.853254][T11161] tmpfs: Unknown parameter '0xffffffffffffffff' [ 150.903135][T11168] loop3: detected capacity change from 0 to 128 [ 150.910623][T11168] vfat: Bad value for 'shortname' [ 150.935217][ C0] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 150.951414][T11168] tmpfs: Unknown parameter '0xffffffffffffffff' [ 150.957061][T11173] loop0: detected capacity change from 0 to 512 [ 150.996420][T11177] tmpfs: Bad value for 'size' [ 151.008273][T11173] EXT4-fs (loop0): 1 orphan inode deleted [ 151.015499][T11177] xt_hashlimit: max too large, truncated to 1048576 [ 151.026046][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 151.039588][T11173] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.066418][T11181] 8021q: adding VLAN 0 to HW filter on device bond39 [ 151.145288][T11181] team0: Port device bond39 added [ 151.162074][T11177] Cannot find add_set index 3 as target [ 151.342921][T11192] loop3: detected capacity change from 0 to 512 [ 151.410314][T11192] ext4 filesystem being mounted at /524/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.664379][T11209] loop3: detected capacity change from 0 to 128 [ 151.671225][T11209] vfat: Bad value for 'shortname' [ 151.676776][ C1] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 151.698584][T11209] tmpfs: Unknown parameter '0xffffffffffffffff' [ 151.748631][T11212] loop0: detected capacity change from 0 to 512 [ 151.766308][T11212] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 151.786173][T11208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.801977][T11212] EXT4-fs (loop0): 1 truncate cleaned up [ 152.116049][T11208] team0: Port device bond1 added [ 152.248356][ T3314] EXT4-fs error: 53 callbacks suppressed [ 152.248372][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 152.276783][T11222] veth1_to_team: entered promiscuous mode [ 152.284612][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 152.301749][T11225] loop3: detected capacity change from 0 to 128 [ 152.315884][T11208] team0: Port device team_slave_1 removed [ 152.382798][T11225] vfat: Bad value for 'shortname' [ 152.444790][ C0] operation not supported error, dev loop3, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 152.466545][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 152.467131][T11225] tmpfs: Unknown parameter '0xffffffffffffffff' [ 152.509113][ T3314] EXT4-fs warning: 22 callbacks suppressed [ 152.509132][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 152.526882][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 152.619584][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 152.639999][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 152.651876][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 152.721369][T11239] FAULT_INJECTION: forcing a failure. [ 152.721369][T11239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.734659][T11239] CPU: 0 UID: 0 PID: 11239 Comm: syz.4.2683 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 152.734692][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 152.734705][T11239] Call Trace: [ 152.734712][T11239] [ 152.734720][T11239] __dump_stack+0x1d/0x30 [ 152.734741][T11239] dump_stack_lvl+0xe8/0x140 [ 152.734791][T11239] dump_stack+0x15/0x1b [ 152.734806][T11239] should_fail_ex+0x265/0x280 [ 152.734970][T11239] should_fail+0xb/0x20 [ 152.735037][T11239] should_fail_usercopy+0x1a/0x20 [ 152.735058][T11239] _copy_from_user+0x1c/0xb0 [ 152.735085][T11239] bpf_obj_get_info_by_fd+0x31c/0x1ee0 [ 152.735126][T11239] ? audit_log_end+0x1d7/0x1f0 [ 152.735236][T11239] ? __traceiter_kmem_cache_free+0x38/0x60 [ 152.735287][T11239] __sys_bpf+0x6bb/0x790 [ 152.735335][T11239] __x64_sys_bpf+0x41/0x50 [ 152.735437][T11239] x64_sys_call+0x2478/0x2fb0 [ 152.735460][T11239] do_syscall_64+0xd0/0x1a0 [ 152.735490][T11239] ? clear_bhb_loop+0x40/0x90 [ 152.735511][T11239] ? clear_bhb_loop+0x40/0x90 [ 152.735654][T11239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.735719][T11239] RIP: 0033:0x7fcfb740e969 [ 152.735735][T11239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.735753][T11239] RSP: 002b:00007fcfb5a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 152.735771][T11239] RAX: ffffffffffffffda RBX: 00007fcfb7635fa0 RCX: 00007fcfb740e969 [ 152.735786][T11239] RDX: 0000000000000010 RSI: 0000200000000d00 RDI: 000000000000000f [ 152.735802][T11239] RBP: 00007fcfb5a77090 R08: 0000000000000000 R09: 0000000000000000 [ 152.735869][T11239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.735945][T11239] R13: 0000000000000000 R14: 00007fcfb7635fa0 R15: 00007ffc88b2b498 [ 152.735977][T11239] [ 152.752635][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 152.890400][T11250] loop0: detected capacity change from 0 to 512 [ 152.897812][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 152.916335][T11250] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 152.921439][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 152.939458][T11250] EXT4-fs (loop0): invalid journal inode [ 153.021910][T11242] 8021q: adding VLAN 0 to HW filter on device bond40 [ 153.044049][T11242] team0: Port device bond40 added [ 153.116472][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 153.198356][T11265] __nla_validate_parse: 17 callbacks suppressed [ 153.198370][T11265] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2693'. [ 153.220576][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 153.234976][T11264] 8021q: adding VLAN 0 to HW filter on device bond41 [ 153.241962][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 153.243268][T11264] team0: Port device bond41 added [ 153.346149][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 153.350079][T11271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2695'. [ 153.366739][T11271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'. [ 153.432086][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 153.489583][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 153.559848][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 153.626124][T11283] loop0: detected capacity change from 0 to 512 [ 153.665577][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 153.682535][T11283] EXT4-fs (loop0): 1 orphan inode deleted [ 153.689163][T11283] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.700180][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 153.794089][T11297] 8021q: adding VLAN 0 to HW filter on device bond53 [ 153.810527][T11297] team0: Port device bond53 added [ 153.821281][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 153.863582][T11300] FAULT_INJECTION: forcing a failure. [ 153.863582][T11300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.876828][T11300] CPU: 1 UID: 0 PID: 11300 Comm: syz.2.2703 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 153.876864][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 153.876880][T11300] Call Trace: [ 153.876889][T11300] [ 153.876898][T11300] __dump_stack+0x1d/0x30 [ 153.876922][T11300] dump_stack_lvl+0xe8/0x140 [ 153.876948][T11300] dump_stack+0x15/0x1b [ 153.876965][T11300] should_fail_ex+0x265/0x280 [ 153.877011][T11300] should_fail+0xb/0x20 [ 153.877043][T11300] should_fail_usercopy+0x1a/0x20 [ 153.877101][T11300] _copy_from_user+0x1c/0xb0 [ 153.877130][T11300] ___sys_sendmsg+0xc1/0x1d0 [ 153.877235][T11300] __x64_sys_sendmsg+0xd4/0x160 [ 153.877266][T11300] x64_sys_call+0x2999/0x2fb0 [ 153.877286][T11300] do_syscall_64+0xd0/0x1a0 [ 153.877392][T11300] ? clear_bhb_loop+0x40/0x90 [ 153.877425][T11300] ? clear_bhb_loop+0x40/0x90 [ 153.877450][T11300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.877477][T11300] RIP: 0033:0x7f0d689de969 [ 153.877495][T11300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.877514][T11300] RSP: 002b:00007f0d67047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.877546][T11300] RAX: ffffffffffffffda RBX: 00007f0d68c05fa0 RCX: 00007f0d689de969 [ 153.877562][T11300] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000004 [ 153.877579][T11300] RBP: 00007f0d67047090 R08: 0000000000000000 R09: 0000000000000000 [ 153.877595][T11300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.877610][T11300] R13: 0000000000000000 R14: 00007f0d68c05fa0 R15: 00007ffc93793788 [ 153.877632][T11300] [ 153.909257][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 154.111291][T11306] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2704'. [ 154.200982][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 154.201000][ T29] audit: type=1326 audit(1747395153.202:12331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.2.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 154.256988][ T29] audit: type=1326 audit(1747395153.242:12332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.2.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 154.280663][ T29] audit: type=1326 audit(1747395153.242:12333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.2.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 154.304326][ T29] audit: type=1326 audit(1747395153.242:12334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.2.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 154.327606][T11323] loop0: detected capacity change from 0 to 128 [ 154.328210][ T29] audit: type=1326 audit(1747395153.242:12335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.2.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 154.334469][T11323] vfat: Bad value for 'shortname' [ 154.357835][ T29] audit: type=1326 audit(1747395153.242:12336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.2.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 154.386497][ T29] audit: type=1326 audit(1747395153.242:12337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.2.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 154.410362][ T29] audit: type=1326 audit(1747395153.242:12338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.2.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 154.434070][ T29] audit: type=1326 audit(1747395153.242:12339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.2.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 154.458670][ T29] audit: type=1326 audit(1747395153.242:12340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11318 comm="syz.2.2709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 154.489677][T11325] loop4: detected capacity change from 0 to 512 [ 154.499187][ C0] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 154.516802][T11323] tmpfs: Unknown parameter '0xffffffffffffffff' [ 154.543642][T11325] EXT4-fs (loop4): 1 orphan inode deleted [ 154.544473][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2715'. [ 154.550332][T11325] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.566446][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2715'. [ 154.569338][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 154.598465][T11329] 8021q: adding VLAN 0 to HW filter on device bond42 [ 154.607166][T11329] team0: Port device bond42 added [ 154.667637][T11342] 8021q: adding VLAN 0 to HW filter on device bond54 [ 154.676257][T11342] team0: Port device bond54 added [ 154.680428][T11343] loop4: detected capacity change from 0 to 512 [ 154.740021][T11343] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 154.751113][T11343] System zones: 0-2, 18-18, 34-34 [ 154.757503][T11343] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2717: bg 0: block 248: padding at end of block bitmap is not set [ 154.772315][T11343] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2717: Failed to acquire dquot type 1 [ 154.773596][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'. [ 154.792760][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'. [ 154.793071][T11343] EXT4-fs (loop4): 1 truncate cleaned up [ 154.808204][T11343] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.825256][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'. [ 154.887243][T11359] bridge: RTM_NEWNEIGH with invalid ether address [ 154.900843][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 154.937708][T11366] loop0: detected capacity change from 0 to 128 [ 154.944573][T11366] vfat: Bad value for 'shortname' [ 154.950199][ C1] operation not supported error, dev loop0, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 154.993392][T11366] tmpfs: Unknown parameter '0xffffffffffffffff' [ 155.041436][T11377] 8021q: adding VLAN 0 to HW filter on device bond55 [ 155.050094][T11377] team0: Port device bond55 added [ 155.319039][T11396] loop0: detected capacity change from 0 to 512 [ 155.346256][T11396] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 155.397101][T11396] EXT4-fs (loop0): invalid journal inode [ 155.500617][T11404] loop4: detected capacity change from 0 to 128 [ 155.517283][T11404] vfat: Bad value for 'shortname' [ 155.528283][ C0] operation not supported error, dev loop4, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 155.563537][T11404] tmpfs: Unknown parameter '0xffffffffffffffff' [ 155.624426][T11407] tmpfs: Bad value for 'size' [ 155.640534][T11407] xt_hashlimit: max too large, truncated to 1048576 [ 155.657643][T11381] loop3: detected capacity change from 0 to 512 [ 155.677211][T11381] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.742786][T11407] Cannot find add_set index 3 as target [ 155.902167][T11415] netlink: 'syz.2.2742': attribute type 3 has an invalid length. [ 155.952794][T11419] FAULT_INJECTION: forcing a failure. [ 155.952794][T11419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.966184][T11419] CPU: 1 UID: 0 PID: 11419 Comm: syz.2.2744 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 155.966210][T11419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 155.966282][T11419] Call Trace: [ 155.966289][T11419] [ 155.966299][T11419] __dump_stack+0x1d/0x30 [ 155.966334][T11419] dump_stack_lvl+0xe8/0x140 [ 155.966353][T11419] dump_stack+0x15/0x1b [ 155.966373][T11419] should_fail_ex+0x265/0x280 [ 155.966414][T11419] should_fail+0xb/0x20 [ 155.966444][T11419] should_fail_usercopy+0x1a/0x20 [ 155.966464][T11419] _copy_from_user+0x1c/0xb0 [ 155.966566][T11419] __copy_msghdr+0x244/0x300 [ 155.966594][T11419] ___sys_sendmsg+0x109/0x1d0 [ 155.966644][T11419] __x64_sys_sendmsg+0xd4/0x160 [ 155.966705][T11419] x64_sys_call+0x2999/0x2fb0 [ 155.966732][T11419] do_syscall_64+0xd0/0x1a0 [ 155.966760][T11419] ? clear_bhb_loop+0x40/0x90 [ 155.966818][T11419] ? clear_bhb_loop+0x40/0x90 [ 155.966852][T11419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.966930][T11419] RIP: 0033:0x7f0d689de969 [ 155.966949][T11419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.966978][T11419] RSP: 002b:00007f0d67047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.967001][T11419] RAX: ffffffffffffffda RBX: 00007f0d68c05fa0 RCX: 00007f0d689de969 [ 155.967015][T11419] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 155.967026][T11419] RBP: 00007f0d67047090 R08: 0000000000000000 R09: 0000000000000000 [ 155.967039][T11419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.967123][T11419] R13: 0000000000000000 R14: 00007f0d68c05fa0 R15: 00007ffc93793788 [ 155.967146][T11419] [ 156.261145][T11421] SELinux: failed to load policy [ 156.285870][T11421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.303894][T11421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.343528][T11437] tmpfs: Bad value for 'size' [ 156.346247][T11421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.370029][T11421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.384883][T11437] xt_hashlimit: max too large, truncated to 1048576 [ 156.501019][T11437] Cannot find add_set index 3 as target [ 156.599804][T11443] loop3: detected capacity change from 0 to 512 [ 156.609074][T11443] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 156.619091][T11443] EXT4-fs (loop3): invalid journal inode [ 156.671570][T11454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.679766][T11454] team0: Port device bond2 added [ 156.856040][T11475] tmpfs: Bad value for 'size' [ 156.856361][T11476] FAULT_INJECTION: forcing a failure. [ 156.856361][T11476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.874328][T11476] CPU: 1 UID: 0 PID: 11476 Comm: syz.2.2767 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 156.874361][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 156.874378][T11476] Call Trace: [ 156.874386][T11476] [ 156.874395][T11476] __dump_stack+0x1d/0x30 [ 156.874460][T11476] dump_stack_lvl+0xe8/0x140 [ 156.874563][T11476] dump_stack+0x15/0x1b [ 156.874584][T11476] should_fail_ex+0x265/0x280 [ 156.874642][T11476] should_fail_alloc_page+0xf2/0x100 [ 156.874725][T11476] __alloc_frozen_pages_noprof+0xff/0x360 [ 156.874756][T11476] alloc_pages_mpol+0xb3/0x250 [ 156.874784][T11476] alloc_pages_noprof+0x90/0x130 [ 156.874874][T11476] get_free_pages_noprof+0xc/0x30 [ 156.874906][T11476] __se_sys_mincore+0xd9/0x490 [ 156.874934][T11476] __x64_sys_mincore+0x43/0x50 [ 156.874972][T11476] x64_sys_call+0x2c2d/0x2fb0 [ 156.874999][T11476] do_syscall_64+0xd0/0x1a0 [ 156.875029][T11476] ? clear_bhb_loop+0x40/0x90 [ 156.875056][T11476] ? clear_bhb_loop+0x40/0x90 [ 156.875135][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.875216][T11476] RIP: 0033:0x7f0d689de969 [ 156.875231][T11476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.875248][T11476] RSP: 002b:00007f0d67047038 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 156.875269][T11476] RAX: ffffffffffffffda RBX: 00007f0d68c05fa0 RCX: 00007f0d689de969 [ 156.875285][T11476] RDX: 0000200000afaf0a RSI: 0000000000002000 RDI: 0000200000ece000 [ 156.875366][T11476] RBP: 00007f0d67047090 R08: 0000000000000000 R09: 0000000000000000 [ 156.875382][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.875397][T11476] R13: 0000000000000000 R14: 00007f0d68c05fa0 R15: 00007ffc93793788 [ 156.875426][T11476] [ 156.875683][T11475] xt_hashlimit: max too large, truncated to 1048576 [ 157.043806][T11482] ip6gretap1: entered allmulticast mode [ 157.135533][T11475] Cannot find add_set index 3 as target [ 157.136615][T11484] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 157.230294][T11489] loop0: detected capacity change from 0 to 512 [ 157.262528][T11489] EXT4-fs (loop0): 1 orphan inode deleted [ 157.279687][T11489] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.291211][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 157.332211][ T3314] EXT4-fs error: 72 callbacks suppressed [ 157.332232][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 157.371099][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 157.420525][T11508] FAULT_INJECTION: forcing a failure. [ 157.420525][T11508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.433720][T11508] CPU: 1 UID: 0 PID: 11508 Comm: syz.2.2781 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 157.433761][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 157.433777][T11508] Call Trace: [ 157.433785][T11508] [ 157.433795][T11508] __dump_stack+0x1d/0x30 [ 157.433884][T11508] dump_stack_lvl+0xe8/0x140 [ 157.433910][T11508] dump_stack+0x15/0x1b [ 157.433931][T11508] should_fail_ex+0x265/0x280 [ 157.433974][T11508] should_fail+0xb/0x20 [ 157.434019][T11508] should_fail_usercopy+0x1a/0x20 [ 157.434044][T11508] _copy_from_user+0x1c/0xb0 [ 157.434072][T11508] restore_altstack+0x4b/0x2d0 [ 157.434104][T11508] ? __set_task_blocked+0x23a/0x2a0 [ 157.434128][T11508] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 157.434304][T11508] ? _raw_spin_unlock_irq+0x26/0x50 [ 157.434332][T11508] ? signal_setup_done+0x266/0x290 [ 157.434500][T11508] ? fpu__clear_user_states+0x3b/0x280 [ 157.434540][T11508] ? arch_do_signal_or_restart+0x2ed/0x480 [ 157.434613][T11508] ? __rcu_read_unlock+0x4f/0x70 [ 157.434635][T11508] ? fpregs_assert_state_consistent+0x84/0xa0 [ 157.434666][T11508] x64_sys_call+0x2e8a/0x2fb0 [ 157.434688][T11508] do_syscall_64+0xd0/0x1a0 [ 157.434771][T11508] ? clear_bhb_loop+0x40/0x90 [ 157.434797][T11508] ? clear_bhb_loop+0x40/0x90 [ 157.434822][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.434911][T11508] RIP: 0033:0x7f0d6897ab39 [ 157.434930][T11508] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 157.434952][T11508] RSP: 002b:00007f0d67046a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 157.434973][T11508] RAX: ffffffffffffffda RBX: 00007f0d68c05fa0 RCX: 00007f0d6897ab39 [ 157.434987][T11508] RDX: 00007f0d67046a80 RSI: 00007f0d67046bb0 RDI: 0000000000000021 [ 157.435003][T11508] RBP: 00007f0d67047090 R08: 0000000000000000 R09: 0000000000000000 [ 157.435018][T11508] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 157.435114][T11508] R13: 0000000000000000 R14: 00007f0d68c05fa0 R15: 00007ffc93793788 [ 157.435143][T11508] [ 157.457840][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 157.608067][T11514] loop3: detected capacity change from 0 to 512 [ 157.610261][ T3314] EXT4-fs warning: 31 callbacks suppressed [ 157.610278][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 157.621328][T11514] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 157.626586][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 157.665437][T11514] EXT4-fs (loop3): invalid journal inode [ 157.858083][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 157.888628][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 157.910673][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 157.971870][T11535] loop4: detected capacity change from 0 to 2048 [ 157.992786][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 158.025582][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 158.036081][T11535] Alternate GPT is invalid, using primary GPT. [ 158.038659][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 158.043330][T11535] loop4: p1 p2 p3 [ 158.148598][ T3314] EXT4-fs error (device loop1): ext4_empty_dir:3086: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 158.173544][T11548] loop4: detected capacity change from 0 to 512 [ 158.174110][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 158.182038][T11548] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.191610][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #12: block 32: comm syz-executor: path /474/file2/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 158.204331][T11548] EXT4-fs (loop4): 1 truncate cleaned up [ 158.283356][T11551] netlink: 'syz.2.2799': attribute type 3 has an invalid length. [ 158.299988][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 158.393563][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 158.412541][T11557] loop3: detected capacity change from 0 to 1024 [ 158.500542][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 158.560483][T11572] 8021q: adding VLAN 0 to HW filter on device bond44 [ 158.582282][T11572] team0: Port device bond44 added [ 158.622682][T11571] __nla_validate_parse: 21 callbacks suppressed [ 158.622711][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2806'. [ 158.659120][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 158.673993][T11574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2806'. [ 158.786189][T11571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.817018][T11571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.830271][T11571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2806'. [ 158.840920][T11571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2806'. [ 158.879825][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 158.895190][T11574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2806'. [ 158.904204][T11574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2806'. [ 158.924686][T11571] team0: entered promiscuous mode [ 158.930737][T11571] team_slave_0: entered promiscuous mode [ 158.938297][T11571] bond1: entered promiscuous mode [ 158.945277][T11571] bond2: entered promiscuous mode [ 158.952297][T11571] bond4: entered promiscuous mode [ 158.959334][T11571] bond5: entered promiscuous mode [ 158.965990][T11571] bond6: entered promiscuous mode [ 158.972447][T11571] bond7: entered promiscuous mode [ 158.979757][T11571] bond8: entered promiscuous mode [ 158.986277][T11571] bond9: entered promiscuous mode [ 158.992588][T11571] bond10: entered promiscuous mode [ 159.001628][T11571] bond11: entered promiscuous mode [ 159.008937][T11571] bond12: entered promiscuous mode [ 159.015908][T11571] bond13: entered promiscuous mode [ 159.022207][T11571] bond14: entered promiscuous mode [ 159.029997][T11571] bond15: entered promiscuous mode [ 159.037137][T11571] bond16: entered promiscuous mode [ 159.044337][T11571] bond17: entered promiscuous mode [ 159.051746][T11571] bond18: entered promiscuous mode [ 159.058808][T11571] bond19: entered promiscuous mode [ 159.065718][T11571] bond20: entered promiscuous mode [ 159.072987][T11571] bond22: entered promiscuous mode [ 159.080287][T11571] bond23: entered promiscuous mode [ 159.088337][T11571] bond24: entered promiscuous mode [ 159.096747][T11571] bond25: entered promiscuous mode [ 159.103387][T11571] bond27: entered promiscuous mode [ 159.110557][T11571] bond28: entered promiscuous mode [ 159.117708][T11571] bond29: entered promiscuous mode [ 159.124756][T11571] bond30: entered promiscuous mode [ 159.132387][T11571] bond31: entered promiscuous mode [ 159.139227][T11571] bond32: entered promiscuous mode [ 159.145450][T11584] netlink: 'syz.0.2806': attribute type 21 has an invalid length. [ 159.145469][T11584] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2806'. [ 159.167087][T11571] bond33: entered promiscuous mode [ 159.174735][T11571] bond34: entered promiscuous mode [ 159.182210][T11571] bond35: entered promiscuous mode [ 159.190027][T11571] bond36: entered promiscuous mode [ 159.197808][T11571] bond37: entered promiscuous mode [ 159.205968][T11571] bond38: entered promiscuous mode [ 159.214537][T11571] bond40: entered promiscuous mode [ 159.222177][T11571] bond41: entered promiscuous mode [ 159.230060][T11571] bond42: entered promiscuous mode [ 159.237767][T11571] bond43: entered promiscuous mode [ 159.245617][T11571] bond44: entered promiscuous mode [ 159.253357][T11571] bond45: entered promiscuous mode [ 159.262018][T11571] bond46: entered promiscuous mode [ 159.269587][T11571] bond47: entered promiscuous mode [ 159.277378][T11571] bond48: entered promiscuous mode [ 159.283966][T11571] bond49: entered promiscuous mode [ 159.292454][T11571] bond50: entered promiscuous mode [ 159.300117][T11571] bond51: entered promiscuous mode [ 159.308167][T11571] bond52: entered promiscuous mode [ 159.315228][T11571] bond53: entered promiscuous mode [ 159.322917][T11571] bond54: entered promiscuous mode [ 159.330728][T11571] bond55: entered promiscuous mode [ 159.400577][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2810'. [ 159.409714][ T3314] EXT4-fs warning (device loop1): ext4_empty_dir:3088: inode #12: comm syz-executor: directory missing '.' [ 159.689188][T11571] batadv_slave_1: entered promiscuous mode [ 159.723199][T11571] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 159.734277][T11571] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.762997][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 159.763014][ T29] audit: type=1400 audit(1747395158.762:12869): avc: denied { unmount } for pid=10957 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.790898][T10957] EXT4-fs unmount: 34 callbacks suppressed [ 159.790912][T10957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.806633][T11584] netlink: 'syz.0.2806': attribute type 5 has an invalid length. [ 159.814461][T11584] netlink: 'syz.0.2806': attribute type 6 has an invalid length. [ 159.822298][T11584] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2806'. [ 159.871292][ T29] audit: type=1400 audit(1747395158.872:12870): avc: denied { create } for pid=11590 comm="syz.3.2814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 159.876074][T11593] netlink: 'syz.2.2813': attribute type 3 has an invalid length. [ 159.902334][ T29] audit: type=1400 audit(1747395158.902:12871): avc: denied { read } for pid=11594 comm="syz.4.2812" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.926842][ T29] audit: type=1400 audit(1747395158.902:12872): avc: denied { open } for pid=11594 comm="syz.4.2812" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.951935][ T29] audit: type=1400 audit(1747395158.902:12873): avc: denied { ioctl } for pid=11594 comm="syz.4.2812" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 159.986715][ T29] audit: type=1326 audit(1747395158.962:12874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 160.010514][ T29] audit: type=1326 audit(1747395158.962:12875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 160.034216][ T29] audit: type=1326 audit(1747395158.962:12876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 160.057801][ T29] audit: type=1326 audit(1747395158.962:12877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 160.081436][ T29] audit: type=1326 audit(1747395158.962:12878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.2.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d689de969 code=0x7ffc0000 [ 160.143427][T11598] loop3: detected capacity change from 0 to 512 [ 160.150698][T11598] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 160.160080][T11598] EXT4-fs (loop3): invalid journal inode [ 160.407737][T11611] loop4: detected capacity change from 0 to 512 [ 160.423079][T11611] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.488743][T11611] EXT4-fs (loop4): 1 truncate cleaned up [ 160.495433][T11611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.960402][T11626] loop3: detected capacity change from 0 to 512 [ 160.967929][T11626] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.066928][T10957] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.085753][T11626] EXT4-fs (loop3): 1 truncate cleaned up [ 161.093602][T11626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.108736][ T37] bond26: left allmulticast mode [ 161.113753][ T37] bond26: left promiscuous mode [ 161.118935][ T37] bridge0: port 4(bond26) entered disabled state [ 161.127070][ T37] bond21: left allmulticast mode [ 161.132104][ T37] bond21: left promiscuous mode [ 161.137274][ T37] bridge0: port 3(bond21) entered disabled state [ 161.144401][ T37] bridge_slave_1: left allmulticast mode [ 161.150195][ T37] bridge_slave_1: left promiscuous mode [ 161.156065][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.163812][ T37] bridge_slave_0: left allmulticast mode [ 161.169677][ T37] bridge_slave_0: left promiscuous mode [ 161.175527][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.181794][T11635] netlink: 'syz.4.2825': attribute type 3 has an invalid length. [ 161.387445][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.411804][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.422505][ T37] bond0 (unregistering): Released all slaves [ 161.431679][ T37] bond1 (unregistering): left promiscuous mode [ 161.456518][ T37] team0: Port device bond1 removed [ 161.462367][ T37] bond1 (unregistering): Released all slaves [ 161.487537][ T37] bond2 (unregistering): left promiscuous mode [ 161.494576][ T37] team0: Port device bond2 removed [ 161.501008][ T37] bond2 (unregistering): Released all slaves [ 161.510677][ T12] ================================================================== [ 161.518792][ T12] BUG: KCSAN: data-race in copy_page_from_iter_atomic / copy_page_from_iter_atomic [ 161.528099][ T12] [ 161.530428][ T12] write to 0xffff88811cf4a4a0 of 2 bytes by task 11626 on cpu 0: [ 161.538151][ T12] copy_page_from_iter_atomic+0x77f/0xff0 [ 161.543897][ T12] generic_perform_write+0x2c2/0x490 [ 161.544028][ T37] bond3 (unregistering): Released all slaves [ 161.549212][ T12] ext4_buffered_write_iter+0x1ee/0x3c0 [ 161.549249][ T12] ext4_file_write_iter+0x383/0xf00 [ 161.558120][ T37] bond4 (unregistering): left promiscuous mode [ 161.560764][ T12] iter_file_splice_write+0x5ef/0x970 [ 161.577563][ T12] direct_splice_actor+0x156/0x2a0 [ 161.582693][ T12] splice_direct_to_actor+0x312/0x680 [ 161.588173][ T12] do_splice_direct+0xda/0x150 [ 161.592947][ T12] do_sendfile+0x380/0x640 [ 161.597371][ T12] __x64_sys_sendfile64+0x105/0x150 [ 161.602598][ T12] x64_sys_call+0xb39/0x2fb0 [ 161.607198][ T12] do_syscall_64+0xd0/0x1a0 [ 161.611712][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.617619][ T12] [ 161.619947][ T12] read to 0xffff88811cf4a400 of 1024 bytes by task 12 on cpu 1: [ 161.627581][ T12] copy_page_from_iter_atomic+0x77f/0xff0 [ 161.633324][ T12] generic_perform_write+0x2c2/0x490 [ 161.638629][ T12] shmem_file_write_iter+0xc5/0xf0 [ 161.643769][ T12] lo_rw_aio+0x5fa/0x7c0 [ 161.648056][ T12] loop_process_work+0x52d/0xa60 [ 161.653016][ T12] loop_workfn+0x31/0x40 [ 161.657280][ T12] process_scheduled_works+0x4ce/0x9d0 [ 161.662763][ T12] worker_thread+0x582/0x770 [ 161.667371][ T12] kthread+0x489/0x510 [ 161.671447][ T12] ret_from_fork+0x4b/0x60 [ 161.675874][ T12] ret_from_fork_asm+0x1a/0x30 [ 161.680648][ T12] [ 161.682972][ T12] Reported by Kernel Concurrency Sanitizer on: [ 161.689126][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 161.701547][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 161.711620][ T12] Workqueue: loop3 loop_workfn [ 161.716409][ T12] ================================================================== [ 161.725988][ T37] team0: Port device bond4 removed [ 161.731791][ T37] bond4 (unregistering): Released all slaves [ 161.740317][ T37] bond5 (unregistering): left promiscuous mode [ 161.758417][ T37] team0: Port device bond5 removed [ 161.769640][ T37] bond5 (unregistering): Released all slaves [ 161.797462][ T37] bond6 (unregistering): left promiscuous mode [ 161.812376][ T37] team0: Port device bond6 removed [ 161.836606][ T9566] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.858240][ T37] bond6 (unregistering): Released all slaves [ 161.867130][ T37] bond7 (unregistering): left promiscuous mode [ 161.874426][ T37] team0: Port device bond7 removed [ 161.880209][ T37] bond7 (unregistering): Released all slaves [ 161.888871][ T6097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.889437][ T37] bond8 (unregistering): left promiscuous mode [ 161.905007][ T37] team0: Port device bond8 removed [ 161.910762][ T37] bond8 (unregistering): Released all slaves [ 161.918964][ T37] bond9 (unregistering): left promiscuous mode [ 161.925589][ T37] team0: Port device bond9 removed [ 161.931034][ T37] bond9 (unregistering): Released all slaves [ 161.938976][ T37] bond10 (unregistering): left promiscuous mode [ 161.945940][ T37] team0: Port device bond10 removed [ 161.951681][ T37] bond10 (unregistering): Released all slaves [ 161.959952][ T37] bond11 (unregistering): left promiscuous mode [ 161.966916][ T37] team0: Port device bond11 removed [ 161.972639][ T37] bond11 (unregistering): Released all slaves [ 161.981346][ T37] bond12 (unregistering): left promiscuous mode [ 161.988154][ T37] team0: Port device bond12 removed [ 161.993939][ T37] bond12 (unregistering): Released all slaves [ 162.002381][ T37] bond13 (unregistering): left promiscuous mode [ 162.009206][ T37] team0: Port device bond13 removed [ 162.015169][ T37] bond13 (unregistering): Released all slaves [ 162.023433][ T37] bond14 (unregistering): left promiscuous mode [ 162.030629][ T37] team0: Port device bond14 removed [ 162.036410][ T37] bond14 (unregistering): Released all slaves [ 162.044554][ T37] bond15 (unregistering): left promiscuous mode [ 162.051408][ T37] team0: Port device bond15 removed [ 162.057303][ T37] bond15 (unregistering): Released all slaves [ 162.065894][ T37] bond16 (unregistering): left promiscuous mode [ 162.072622][ T37] team0: Port device bond16 removed [ 162.078483][ T37] bond16 (unregistering): Released all slaves [ 162.087069][ T37] bond17 (unregistering): left promiscuous mode [ 162.094012][ T37] team0: Port device bond17 removed [ 162.099857][ T37] bond17 (unregistering): Released all slaves [ 162.108508][ T37] bond18 (unregistering): left promiscuous mode [ 162.115357][ T37] team0: Port device bond18 removed [ 162.121043][ T37] bond18 (unregistering): Released all slaves [ 162.129099][ T37] bond19 (unregistering): left promiscuous mode [ 162.135874][ T37] team0: Port device bond19 removed [ 162.141656][ T37] bond19 (unregistering): Released all slaves [ 162.150129][ T37] bond20 (unregistering): left promiscuous mode [ 162.157070][ T37] team0: Port device bond20 removed [ 162.162909][ T37] bond20 (unregistering): Released all slaves [ 162.171668][ T37] bond21 (unregistering): Released all slaves [ 162.179926][ T37] bond22 (unregistering): left promiscuous mode [ 162.186792][ T37] team0: Port device bond22 removed [ 162.192624][ T37] bond22 (unregistering): Released all slaves [ 162.200907][ T37] bond23 (unregistering): left promiscuous mode [ 162.207640][ T37] team0: Port device bond23 removed [ 162.213440][ T37] bond23 (unregistering): Released all slaves [ 162.221428][ T37] bond24 (unregistering): left promiscuous mode [ 162.228102][ T37] team0: Port device bond24 removed [ 162.233882][ T37] bond24 (unregistering): Released all slaves [ 162.242039][ T37] bond25 (unregistering): left promiscuous mode [ 162.249246][ T37] team0: Port device bond25 removed [ 162.255294][ T37] bond25 (unregistering): Released all slaves [ 162.263935][ T37] bond26 (unregistering): Released all slaves [ 162.272415][ T37] bond27 (unregistering): left promiscuous mode [ 162.279208][ T37] team0: Port device bond27 removed [ 162.285544][ T37] bond27 (unregistering): Released all slaves [ 162.293947][ T37] bond28 (unregistering): left promiscuous mode [ 162.300648][ T37] team0: Port device bond28 removed [ 162.306491][ T37] bond28 (unregistering): Released all slaves [ 162.314587][ T37] bond29 (unregistering): left promiscuous mode [ 162.321368][ T37] team0: Port device bond29 removed [ 162.327096][ T37] bond29 (unregistering): Released all slaves [ 162.335560][ T37] bond30 (unregistering): left promiscuous mode [ 162.342312][ T37] team0: Port device bond30 removed [ 162.348014][ T37] bond30 (unregistering): Released all slaves [ 162.356529][ T37] bond31 (unregistering): left promiscuous mode [ 162.363207][ T37] team0: Port device bond31 removed [ 162.369097][ T37] bond31 (unregistering): Released all slaves [ 162.377327][ T37] bond32 (unregistering): left promiscuous mode [ 162.384020][ T37] team0: Port device bond32 removed [ 162.389929][ T37] bond32 (unregistering): Released all slaves [ 162.398331][ T37] bond33 (unregistering): left promiscuous mode [ 162.405486][ T37] team0: Port device bond33 removed [ 162.411141][ T37] bond33 (unregistering): Released all slaves [ 162.419444][ T37] bond34 (unregistering): left promiscuous mode [ 162.426608][ T37] team0: Port device bond34 removed [ 162.432467][ T37] bond34 (unregistering): Released all slaves [ 162.440589][ T37] bond35 (unregistering): left promiscuous mode [ 162.447456][ T37] team0: Port device bond35 removed [ 162.453174][ T37] bond35 (unregistering): Released all slaves [ 162.461670][ T37] bond36 (unregistering): left promiscuous mode [ 162.468395][ T37] team0: Port device bond36 removed [ 162.474137][ T37] bond36 (unregistering): Released all slaves [ 162.482663][ T37] bond37 (unregistering): left promiscuous mode [ 162.489513][ T37] team0: Port device bond37 removed [ 162.495408][ T37] bond37 (unregistering): Released all slaves [ 162.503423][ T37] bond38 (unregistering): left promiscuous mode [ 162.510328][ T37] team0: Port device bond38 removed [ 162.516393][ T37] bond38 (unregistering): Released all slaves [ 162.524744][ T37] bond39 (unregistering): Released all slaves [ 162.533194][ T37] bond40 (unregistering): left promiscuous mode [ 162.540001][ T37] team0: Port device bond40 removed [ 162.545919][ T37] bond40 (unregistering): Released all slaves [ 162.554010][ T37] bond41 (unregistering): left promiscuous mode [ 162.561006][ T37] team0: Port device bond41 removed [ 162.566857][ T37] bond41 (unregistering): Released all slaves [ 162.575102][ T37] bond42 (unregistering): left promiscuous mode [ 162.581792][ T37] team0: Port device bond42 removed [ 162.587568][ T37] bond42 (unregistering): Released all slaves [ 162.595653][ T37] bond43 (unregistering): left promiscuous mode [ 162.602398][ T37] team0: Port device bond43 removed [ 162.608781][ T37] bond43 (unregistering): Released all slaves [ 162.617230][ T37] bond44 (unregistering): left promiscuous mode [ 162.623978][ T37] team0: Port device bond44 removed [ 162.629692][ T37] bond44 (unregistering): Released all slaves [ 162.637730][ T37] bond45 (unregistering): left promiscuous mode [ 162.644482][ T37] team0: Port device bond45 removed [ 162.651075][ T37] bond45 (unregistering): Released all slaves [ 162.659025][ T37] bond46 (unregistering): left promiscuous mode [ 162.665866][ T37] team0: Port device bond46 removed [ 162.671596][ T37] bond46 (unregistering): Released all slaves [ 162.680014][ T37] bond47 (unregistering): left promiscuous mode [ 162.687007][ T37] team0: Port device bond47 removed [ 162.692644][ T37] bond47 (unregistering): Released all slaves [ 162.701046][ T37] bond48 (unregistering): left promiscuous mode [ 162.707953][ T37] team0: Port device bond48 removed [ 162.713589][ T37] bond48 (unregistering): Released all slaves [ 162.721753][ T37] bond49 (unregistering): left promiscuous mode [ 162.728517][ T37] team0: Port device bond49 removed [ 162.734403][ T37] bond49 (unregistering): Released all slaves [ 162.742696][ T37] bond50 (unregistering): left promiscuous mode [ 162.749672][ T37] team0: Port device bond50 removed [ 162.755557][ T37] bond50 (unregistering): Released all slaves [ 162.763598][ T37] bond51 (unregistering): left promiscuous mode [ 162.770561][ T37] team0: Port device bond51 removed [ 162.776479][ T37] bond51 (unregistering): Released all slaves [ 162.784558][ T37] bond52 (unregistering): left promiscuous mode [ 162.791517][ T37] team0: Port device bond52 removed [ 162.797344][ T37] bond52 (unregistering): Released all slaves [ 162.805760][ T37] bond53 (unregistering): left promiscuous mode [ 162.812466][ T37] team0: Port device bond53 removed [ 162.818332][ T37] bond53 (unregistering): Released all slaves [ 162.826757][ T37] bond54 (unregistering): left promiscuous mode [ 162.833538][ T37] team0: Port device bond54 removed [ 162.839339][ T37] bond54 (unregistering): Released all slaves [ 162.847993][ T37] bond55 (unregistering): left promiscuous mode [ 162.854683][ T37] team0: Port device bond55 removed [ 162.860529][ T37] bond55 (unregistering): Released all slaves [ 162.869190][T11638] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 162.897992][T11615] lo speed is unknown, defaulting to 1000 [ 162.977641][ T37] IPVS: stopping backup sync thread 9551 ... [ 163.062606][ T37] team0: left promiscuous mode [ 163.067492][ T37] team_slave_0: left promiscuous mode [ 163.077783][ T37] batadv_slave_1: left promiscuous mode [ 163.086994][ T37] hsr_slave_0: left promiscuous mode [ 163.092800][ T37] hsr_slave_1: left promiscuous mode [ 163.135673][ T37] team0 (unregistering): Port device team_slave_0 removed [ 163.400923][ T37] IPVS: stop unused estimator thread 0... [ 163.449487][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.508052][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.557611][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.607434][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.239245][ T37] bridge_slave_1: left allmulticast mode [ 164.245096][ T37] bridge_slave_1: left promiscuous mode [ 164.250786][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.258705][ T37] bridge_slave_0: left allmulticast mode [ 164.264358][ T37] bridge_slave_0: left promiscuous mode [ 164.270160][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.278467][ T37] bond25: left allmulticast mode [ 164.283428][ T37] bond25: left promiscuous mode [ 164.288501][ T37] bridge0: port 4(bond25) entered disabled state [ 164.295479][ T37] bond20: left allmulticast mode [ 164.300444][ T37] bond20: left promiscuous mode [ 164.305460][ T37] bridge0: port 3(bond20) entered disabled state [ 164.312606][ T37] bridge_slave_1: left allmulticast mode [ 164.318294][ T37] bridge_slave_1: left promiscuous mode [ 164.324506][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.332394][ T37] bridge_slave_0: left allmulticast mode [ 164.338141][ T37] bridge_slave_0: left promiscuous mode [ 164.343925][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.351997][ T37] bond19: left allmulticast mode [ 164.357063][ T37] bond19: left promiscuous mode [ 164.362021][ T37] bridge0: port 3(bond19) entered disabled state [ 164.369052][ T37] bridge_slave_1: left allmulticast mode [ 164.374828][ T37] bridge_slave_1: left promiscuous mode [ 164.380500][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.388163][ T37] bridge_slave_0: left allmulticast mode [ 164.393812][ T37] bridge_slave_0: left promiscuous mode [ 164.399572][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.746943][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.757296][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.766963][ T37] bond0 (unregistering): Released all slaves [ 164.775397][ T37] team0: Port device bond1 removed [ 164.781593][ T37] bond1 (unregistering): Released all slaves [ 164.790005][ T37] team0: Port device bond2 removed [ 164.796284][ T37] bond2 (unregistering): Released all slaves [ 164.805292][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.814655][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.823724][ T37] bond0 (unregistering): Released all slaves [ 164.831864][ T37] team0: Port device bond1 removed [ 164.837828][ T37] bond1 (unregistering): Released all slaves [ 164.846079][ T37] team0: Port device bond2 removed [ 164.851601][ T37] bond2 (unregistering): Released all slaves [ 164.860154][ T37] team0: Port device bond3 removed [ 164.865779][ T37] bond3 (unregistering): Released all slaves [ 164.874469][ T37] team0: Port device bond4 removed [ 164.880270][ T37] bond4 (unregistering): Released all slaves [ 164.889115][ T37] team0: Port device bond5 removed [ 164.894672][ T37] bond5 (unregistering): Released all slaves [ 164.903241][ T37] team0: Port device bond6 removed [ 164.908907][ T37] bond6 (unregistering): Released all slaves [ 164.917567][ T37] team0: Port device bond7 removed [ 164.923064][ T37] bond7 (unregistering): Released all slaves [ 164.931954][ T37] team0: Port device bond8 removed [ 164.937496][ T37] bond8 (unregistering): Released all slaves [ 164.945933][ T37] team0: Port device bond9 removed [ 164.951824][ T37] bond9 (unregistering): Released all slaves [ 164.960467][ T37] team0: Port device bond10 removed [ 164.966141][ T37] bond10 (unregistering): Released all slaves [ 164.974522][ T37] team0: Port device bond11 removed [ 164.980411][ T37] bond11 (unregistering): Released all slaves [ 164.988946][ T37] team0: Port device bond12 removed [ 164.994669][ T37] bond12 (unregistering): Released all slaves [ 165.003231][ T37] team0: Port device bond13 removed [ 165.009000][ T37] bond13 (unregistering): Released all slaves [ 165.017259][ T37] team0: Port device bond14 removed [ 165.022870][ T37] bond14 (unregistering): Released all slaves [ 165.031240][ T37] team0: Port device bond15 removed [ 165.036994][ T37] bond15 (unregistering): Released all slaves [ 165.045609][ T37] team0: Port device bond16 removed [ 165.051256][ T37] bond16 (unregistering): Released all slaves [ 165.059773][ T37] team0: Port device bond17 removed [ 165.065726][ T37] bond17 (unregistering): Released all slaves [ 165.073744][ T37] team0: Port device bond18 removed [ 165.079507][ T37] bond18 (unregistering): Released all slaves [ 165.088159][ T37] team0: Port device bond19 removed [ 165.094186][ T37] bond19 (unregistering): Released all slaves [ 165.102728][ T37] bond20 (unregistering): Released all slaves [ 165.111215][ T37] team0: Port device bond21 removed [ 165.117107][ T37] bond21 (unregistering): Released all slaves [ 165.126027][ T37] bond22 (unregistering): (slave veth5): Releasing backup interface [ 165.134553][ T37] bond22 (unregistering): Released all slaves [ 165.143061][ T37] team0: Port device bond23 removed [ 165.148832][ T37] bond23 (unregistering): Released all slaves [ 165.156859][ T37] team0: Port device bond24 removed [ 165.162624][ T37] bond24 (unregistering): Released all slaves [ 165.171151][ T37] bond25 (unregistering): Released all slaves [ 165.179821][ T37] team0: Port device bond26 removed [ 165.185687][ T37] bond26 (unregistering): Released all slaves [ 165.194350][ T37] team0: Port device bond27 removed [ 165.200547][ T37] bond27 (unregistering): Released all slaves [ 165.209213][ T37] team0: Port device bond28 removed [ 165.215032][ T37] bond28 (unregistering): Released all slaves [ 165.223810][ T37] team0: Port device bond29 removed [ 165.229576][ T37] bond29 (unregistering): Released all slaves [ 165.238119][ T37] team0: Port device bond30 removed [ 165.243986][ T37] bond30 (unregistering): Released all slaves [ 165.252445][ T37] team0: Port device bond31 removed [ 165.258270][ T37] bond31 (unregistering): Released all slaves [ 165.266693][ T37] team0: Port device bond32 removed [ 165.272413][ T37] bond32 (unregistering): Released all slaves [ 165.280808][ T37] team0: Port device bond33 removed [ 165.286796][ T37] bond33 (unregistering): Released all slaves [ 165.295687][ T37] team0: Port device bond34 removed [ 165.301394][ T37] bond34 (unregistering): Released all slaves [ 165.309785][ T37] team0: Port device bond35 removed [ 165.315581][ T37] bond35 (unregistering): Released all slaves [ 165.323906][ T37] team0: Port device bond36 removed [ 165.329957][ T37] bond36 (unregistering): Released all slaves [ 165.338704][ T37] team0: Port device bond37 removed [ 165.344344][ T37] bond37 (unregistering): Released all slaves [ 165.353059][ T37] team0: Port device bond38 removed [ 165.358933][ T37] bond38 (unregistering): Released all slaves [ 165.367440][ T37] team0: Port device bond39 removed [ 165.373110][ T37] bond39 (unregistering): Released all slaves [ 165.381469][ T37] team0: Port device bond40 removed [ 165.387374][ T37] bond40 (unregistering): Released all slaves [ 165.395753][ T37] team0: Port device bond41 removed [ 165.401539][ T37] bond41 (unregistering): Released all slaves [ 165.409885][ T37] team0: Port device bond42 removed [ 165.415795][ T37] bond42 (unregistering): Released all slaves [ 165.424168][ T37] team0: Port device bond43 removed [ 165.430072][ T37] bond43 (unregistering): Released all slaves [ 165.438600][ T37] team0: Port device bond44 removed [ 165.444268][ T37] bond44 (unregistering): Released all slaves [ 165.453055][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.462546][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.471693][ T37] bond0 (unregistering): Released all slaves [ 165.480102][ T37] team0: Port device bond1 removed [ 165.486113][ T37] bond1 (unregistering): Released all slaves [ 165.494376][ T37] team0: Port device bond2 removed [ 165.500144][ T37] bond2 (unregistering): Released all slaves [ 165.508706][ T37] team0: Port device bond3 removed [ 165.514346][ T37] bond3 (unregistering): Released all slaves [ 165.522777][ T37] team0: Port device bond4 removed [ 165.528406][ T37] bond4 (unregistering): Released all slaves [ 165.536924][ T37] team0: Port device bond5 removed [ 165.542430][ T37] bond5 (unregistering): Released all slaves [ 165.550672][ T37] team0: Port device bond6 removed [ 165.556398][ T37] bond6 (unregistering): Released all slaves [ 165.564286][ T37] team0: Port device bond7 removed [ 165.570150][ T37] bond7 (unregistering): Released all slaves [ 165.578833][ T37] team0: Port device bond8 removed [ 165.584542][ T37] bond8 (unregistering): Released all slaves [ 165.592849][ T37] team0: Port device bond9 removed [ 165.598691][ T37] bond9 (unregistering): Released all slaves [ 165.607489][ T37] team0: Port device bond10 removed [ 165.613238][ T37] bond10 (unregistering): Released all slaves [ 165.621779][ T37] team0: Port device bond11 removed [ 165.627869][ T37] bond11 (unregistering): Released all slaves [ 165.636318][ T37] team0: Port device bond12 removed [ 165.642025][ T37] bond12 (unregistering): Released all slaves [ 165.650510][ T37] team0: Port device bond13 removed [ 165.656301][ T37] bond13 (unregistering): Released all slaves [ 165.665268][ T37] team0: Port device bond14 removed [ 165.671264][ T37] bond14 (unregistering): Released all slaves [ 165.679820][ T37] team0: Port device bond15 removed [ 165.685653][ T37] bond15 (unregistering): Released all slaves [ 165.694103][ T37] team0: Port device bond16 removed [ 165.699887][ T37] bond16 (unregistering): Released all slaves [ 165.708391][ T37] team0: Port device bond17 removed [ 165.714054][ T37] bond17 (unregistering): Released all slaves [ 165.722523][ T37] team0: Port device bond18 removed [ 165.728378][ T37] bond18 (unregistering): Released all slaves [ 165.737277][ T37] bond19 (unregistering): Released all slaves [ 165.745618][ T37] team0: Port device bond20 removed [ 165.751276][ T37] bond20 (unregistering): Released all slaves [ 165.759412][ T37] team0: Port device bond21 removed [ 165.765340][ T37] bond21 (unregistering): Released all slaves [ 165.773957][ T37] team0: Port device bond22 removed [ 165.779725][ T37] bond22 (unregistering): Released all slaves [ 165.788454][ T37] team0: Port device bond23 removed [ 165.794307][ T37] bond23 (unregistering): Released all slaves [ 165.803010][ T37] team0: Port device bond24 removed [ 165.808993][ T37] bond24 (unregistering): Released all slaves [ 165.817444][ T37] team0: Port device bond25 removed [ 165.823150][ T37] bond25 (unregistering): Released all slaves [ 165.831867][ T37] team0: Port device bond26 removed [ 165.837529][ T37] bond26 (unregistering): Released all slaves [ 165.845816][ T37] team0: Port device bond27 removed [ 165.851544][ T37] bond27 (unregistering): Released all slaves [ 165.859952][ T37] team0: Port device bond28 removed [ 165.865852][ T37] bond28 (unregistering): Released all slaves [ 165.874195][ T37] team0: Port device bond29 removed [ 165.880042][ T37] bond29 (unregistering): Released all slaves [ 165.888571][ T37] team0: Port device bond30 removed [ 165.894447][ T37] bond30 (unregistering): Released all slaves [ 165.903088][ T37] team0: Port device bond31 removed [ 165.908906][ T37] bond31 (unregistering): Released all slaves [ 165.917327][ T37] team0: Port device bond32 removed [ 165.922996][ T37] bond32 (unregistering): Released all slaves [ 165.931487][ T37] team0: Port device bond33 removed [ 165.937408][ T37] bond33 (unregistering): Released all slaves [ 165.946066][ T37] team0: Port device bond34 removed [ 165.951738][ T37] bond34 (unregistering): Released all slaves [ 165.960232][ T37] team0: Port device bond35 removed [ 165.966067][ T37] bond35 (unregistering): Released all slaves [ 165.974476][ T37] team0: Port device bond36 removed [ 165.980224][ T37] bond36 (unregistering): Released all slaves [ 165.988630][ T37] team0: Port device bond37 removed [ 165.994320][ T37] bond37 (unregistering): Released all slaves [ 166.002810][ T37] team0: Port device bond38 removed [ 166.008895][ T37] bond38 (unregistering): Released all slaves [ 166.017744][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.026994][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.036202][ T37] bond0 (unregistering): (slave bond8): Releasing backup interface [ 166.044585][ T37] bond0 (unregistering): Released all slaves [ 166.052825][ T37] bond1 (unregistering): Released all slaves [ 166.061417][ T37] team0: Port device bond2 removed [ 166.067128][ T37] bond2 (unregistering): Released all slaves [ 166.075463][ T37] team0: Port device bond3 removed [ 166.081166][ T37] bond3 (unregistering): Released all slaves [ 166.089664][ T37] team0: Port device bond4 removed [ 166.095297][ T37] bond4 (unregistering): Released all slaves [ 166.103590][ T37] team0: Port device bond5 removed [ 166.109230][ T37] bond5 (unregistering): Released all slaves [ 166.117753][ T37] team0: Port device bond6 removed [ 166.123279][ T37] bond6 (unregistering): Released all slaves [ 166.132045][ T37] team0: Port device bond7 removed [ 166.137804][ T37] bond7 (unregistering): Released all slaves [ 166.145916][ T37] bond8 (unregistering): Released all slaves [ 166.154199][ T37] team0: Port device bond9 removed [ 166.159996][ T37] bond9 (unregistering): Released all slaves [ 166.168145][ T37] team0: Port device bond10 removed [ 166.173830][ T37] bond10 (unregistering): Released all slaves [ 166.182626][ T37] team0: Port device bond11 removed [ 166.188628][ T37] bond11 (unregistering): Released all slaves [ 166.197064][ T37] team0: Port device bond12 removed [ 166.202744][ T37] bond12 (unregistering): Released all slaves [ 166.211631][ T37] team0: Port device bond13 removed [ 166.217411][ T37] bond13 (unregistering): Released all slaves [ 166.225896][ T37] team0: Port device bond14 removed [ 166.231608][ T37] bond14 (unregistering): Released all slaves [ 166.240242][ T37] team0: Port device bond15 removed [ 166.246256][ T37] bond15 (unregistering): Released all slaves [ 166.254868][ T37] team0: Port device bond16 removed [ 166.260625][ T37] bond16 (unregistering): Released all slaves [ 166.269294][ T37] team0: Port device bond17 removed [ 166.275156][ T37] bond17 (unregistering): Released all slaves [ 166.283562][ T37] team0: Port device bond18 removed [ 166.289343][ T37] bond18 (unregistering): Released all slaves [ 166.297675][ T37] team0: Port device bond19 removed [ 166.303329][ T37] bond19 (unregistering): Released all slaves [ 166.312032][ T37] bond20 (unregistering): Released all slaves [ 166.320561][ T37] team0: Port device bond21 removed [ 166.326489][ T37] bond21 (unregistering): Released all slaves [ 166.335277][ T37] team0: Port device bond22 removed [ 166.340905][ T37] bond22 (unregistering): Released all slaves [ 166.349420][ T37] team0: Port device bond23 removed [ 166.355205][ T37] bond23 (unregistering): Released all slaves [ 166.363572][ T37] team0: Port device bond24 removed [ 166.369347][ T37] bond24 (unregistering): Released all slaves [ 166.377808][ T37] team0: Port device bond25 removed [ 166.383493][ T37] bond25 (unregistering): Released all slaves [ 166.391877][ T37] team0: Port device bond26 removed [ 166.397655][ T37] bond26 (unregistering): Released all slaves [ 166.406062][ T37] bond27 (unregistering): Released all slaves [ 166.414588][ T37] team0: Port device bond28 removed [ 166.420393][ T37] bond28 (unregistering): Released all slaves [ 166.429487][ T37] team0: Port device bond29 removed [ 166.435346][ T37] bond29 (unregistering): Released all slaves [ 166.443792][ T37] team0: Port device bond30 removed [ 166.449833][ T37] bond30 (unregistering): Released all slaves [ 166.457964][ T37] team0: Port device bond31 removed [ 166.463754][ T37] bond31 (unregistering): Released all slaves [ 166.472139][ T37] team0: Port device bond32 removed [ 166.477955][ T37] bond32 (unregistering): Released all slaves [ 166.486344][ T37] team0: Port device bond33 removed [ 166.492230][ T37] bond33 (unregistering): Released all slaves [ 166.500789][ T37] team0: Port device bond34 removed [ 166.506516][ T37] bond34 (unregistering): Released all slaves [ 166.514693][ T37] team0: Port device bond35 removed [ 166.520594][ T37] bond35 (unregistering): Released all slaves [ 166.529388][ T37] team0: Port device bond36 removed [ 166.535166][ T37] bond36 (unregistering): Released all slaves [ 166.543576][ T37] team0: Port device bond37 removed [ 166.549433][ T37] bond37 (unregistering): Released all slaves [ 166.558149][ T37] team0: Port device bond38 removed [ 166.563885][ T37] bond38 (unregistering): Released all slaves [ 166.572258][ T37] team0: Port device bond39 removed [ 166.578109][ T37] bond39 (unregistering): Released all slaves [ 166.586505][ T37] team0: Port device bond40 removed [ 166.592233][ T37] bond40 (unregistering): Released all slaves [ 166.600871][ T37] team0: Port device bond41 removed [ 166.606587][ T37] bond41 (unregistering): Released all slaves [ 166.615060][ T37] team0: Port device bond42 removed [ 166.620789][ T37] bond42 (unregistering): Released all slaves [ 166.675459][ T37] tipc: Left network mode [ 166.682924][ T37] IPVS: stopping backup sync thread 9621 ... [ 166.843298][ T37] hsr_slave_0: left promiscuous mode [ 166.849018][ T37] hsr_slave_1: left promiscuous mode [ 166.854593][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.864599][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.872305][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.879736][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.890336][ T37] hsr_slave_0: left promiscuous mode [ 166.895951][ T37] hsr_slave_1: left promiscuous mode [ 166.903297][ T37] hsr_slave_0: left promiscuous mode [ 166.908987][ T37] hsr_slave_1: left promiscuous mode [ 166.916613][ T37] hsr_slave_0: left promiscuous mode [ 166.922305][ T37] hsr_slave_1: left promiscuous mode [ 166.930724][ T37] veth1_macvtap: left promiscuous mode [ 166.936349][ T37] veth0_macvtap: left promiscuous mode [ 166.941868][ T37] veth1_vlan: left promiscuous mode [ 166.947199][ T37] veth0_vlan: left promiscuous mode [ 167.008749][ T37] team0 (unregistering): Port device team_slave_0 removed [ 167.068068][ T37] team0 (unregistering): Port device team_slave_0 removed [ 167.126892][ T37] team0 (unregistering): Port device team_slave_0 removed [ 167.180169][ T37] team0 (unregistering): Port device team_slave_0 removed [ 167.187676][ T51] smc: removing ib device syz! [ 167.210157][T11154] smc: removing ib device syz0 [ 168.018659][ T37] IPVS: stop unused estimator thread 0... [ 168.024746][ T37] IPVS: stop unused estimator thread 0... [ 168.030820][ T37] IPVS: stop unused estimator thread 0...