last executing test programs: 1.815441286s ago: executing program 2 (id=1111): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ptrace$peekuser(0x3, 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000090601020000000000000000000000020900000000000000000000000500010007000000280007800c00018008000140e0000002180002801400024000000000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x10040003}, 0x240008c4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r4 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0xfffffbff, 0x3c0}) r5 = socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SET_NAME(0xf, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) close_range(r4, r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port1\x00', 0x25, 0x1942a, 0x8000, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x9}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004e4f21fe5524b6816a5d4cc65b99501b11f4c4962ffff8cd39e5447a834420d87836c5e5f4692801b17dd44d37f5133d79a1567691953b8fbf681eee20768b08fa85a1534d026a505f6122064b9423a4220ccc7600eb5f1cd0abb03328ca17dbe956"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r7, 0x0, 0x4}, 0x18) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rdma']) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014056000000340005800c0001007061796c6f6164002400028008000440000000560800000000000000040001400000000a08000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0xbb, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000}) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) 1.51451957s ago: executing program 0 (id=1116): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000009006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000780)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) socket(0x1a, 0x5, 0x3) 1.47332556s ago: executing program 4 (id=1117): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000006000000000b4b3e10"], 0x48) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x7f, 0x2) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x1}, 0x18) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x1, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r5, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "e500", "8ce63ecbc640735f"}, 0x38) sendto(r5, &(0x7f0000000100)="e8", 0x1, 0x8000, 0x0, 0x0) close(r5) 1.44490458s ago: executing program 4 (id=1118): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ptrace$peekuser(0x3, 0x0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000090601020000000000000000000000020900000000000000000000000500010007000000280007800c00018008000140e0000002180002801400024000000000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x10040003}, 0x240008c4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x10000000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) r4 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0xfffffbff, 0x3c0}) r5 = socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) close_range(r4, r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port1\x00', 0x25, 0x1942a, 0x8000, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x9}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004e4f21fe5524b6816a5d4cc65b99501b11f4c4962ffff8cd39e5447a834420d87836c5e5f4692801b17dd44d37f5133d79a1567691953b8fbf681eee20768b08fa85a1534d026a505f6122064b9423a4220ccc7600eb5f1cd0abb03328ca17dbe956"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r7, 0x0, 0x4}, 0x18) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=rdma']) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014056000000340005800c0001007061796c6f6164002400028008000440000000560800000000000000040001400000000a08000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0xbb, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000}) r9 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) 1.404756801s ago: executing program 0 (id=1119): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32], 0x0, 0x0, 0xfffffffffffffc8f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) sched_setscheduler(0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) semop(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={r6, 0x7619, 0x3ff}, 0x8) fcntl$dupfd(r3, 0x0, r3) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) tee(r5, r7, 0x7, 0xa) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007"], 0xd0}}, 0x0) 953.617477ms ago: executing program 2 (id=1120): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") 906.279908ms ago: executing program 2 (id=1121): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000']) 888.889008ms ago: executing program 2 (id=1122): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32], 0x40}}, 0x4) 870.489438ms ago: executing program 2 (id=1123): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x8}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x23, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0xfffffffe, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510, 0xfffffffe}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x5, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 846.192229ms ago: executing program 2 (id=1124): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14010000000101040000000000000000020000001c001880080001400000000208000240000000000800034000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x44010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xbc69265f99b02d3a, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x52, &(0x7f0000000180)=""/82, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xd, 0x8, 0x10}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x1, 0x2, 0xc, 0xa}, {0x1, 0x2, 0x4, 0x3}, {0x4, 0x1, 0xa, 0x6}], 0x10, 0x2, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000001040)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendmsg$inet(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='[', 0x1}], 0x1}, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) listen(r5, 0x101) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 774.782279ms ago: executing program 1 (id=1126): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x615, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) write$binfmt_elf64(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 735.74552ms ago: executing program 1 (id=1127): creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) umount2(&(0x7f00000002c0)='./file0\x00', 0x800000000000000) 658.393481ms ago: executing program 1 (id=1128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000e47f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) 575.943712ms ago: executing program 4 (id=1130): ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000002c0)={0x3, 0xc, 0x5}) r3 = syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 531.236823ms ago: executing program 1 (id=1131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x80000000000}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) readv(r3, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}], 0x3) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0200000000000000020008000000000015000000", 0x14, 0x4044840, &(0x7f00000001c0), 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000020}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r9 = fsmount(r8, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00') openat(r9, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) ioctl$PPPIOCSACTIVE(r9, 0x40107446, &(0x7f00000002c0)={0x0, &(0x7f0000000240)}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r0) 501.095673ms ago: executing program 0 (id=1132): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x10, 0x5, 0x10000000, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0xc, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0x1e, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000f20000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000085000000140000001800000001000000000000008000000018680000100000000000000007000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x8880, 0x48, &(0x7f0000000440)=""/72, 0x41000, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xc, 0x20000, 0x788964f9}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000540)=[0xffffffffffffffff], &(0x7f0000000580)=[{0x1, 0x5, 0x10, 0x3}, {0x3, 0x1, 0xd, 0x8}, {0x0, 0x4, 0xf, 0xc}, {0x2, 0x5, 0x6, 0x7}, {0x3, 0x5, 0x5, 0x7}, {0x4, 0x1, 0x0, 0x2}], 0x10, 0xda, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x3, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0xe2, &(0x7f00000001c0)=""/226, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0x4e0, @void, @value}, 0x94) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r9 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r7, &(0x7f0000000640)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0xc080) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x48, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x20000004) ptrace(0x10, r10) ptrace$getregset(0x4205, r10, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r11, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000019c0)=@bpf_ext={0x1c, 0xf, &(0x7f0000001c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x35bbebad}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x2}, @alu={0x4, 0x0, 0x4, 0xa, 0x0, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @cb_func={0x18, 0xd, 0x4, 0x0, 0xfffffffffffffffc}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41000, 0x3, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001980)={0x1, 0x3, 0x3, 0x4}, 0x10, 0x1d73f, 0xffffffffffffffff, 0x5, &(0x7f0000001c80)=[r4, r4], &(0x7f0000001cc0)=[{0x0, 0x3, 0x10, 0x5}, {0x4, 0x5, 0x10, 0x5}, {0x2, 0x2, 0x3, 0x7}, {0x0, 0x1}, {0x2, 0x2, 0xf, 0x8}], 0x10, 0x0, @void, @value}, 0x94) 493.052583ms ago: executing program 4 (id=1133): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, 0x0, 0x4000) 383.512895ms ago: executing program 4 (id=1137): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010001fff00000000fcdbdf2500005865", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036677265000018000280050008003d00000004001200060003001f00000008000a00", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 377.487295ms ago: executing program 0 (id=1138): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x615, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) write$binfmt_elf64(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 357.497275ms ago: executing program 3 (id=1139): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f0, 0x450, 0x290, 0x290, 0x360, 0x360, 0x570, 0x360, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x10}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x20}, {0x32, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2={0xfc, 0x2, '\x00', 0x40}, [0x0, 0x0, 0xff000000]}}, @common=@inet=@multiport={{0x50}, {0x10, 0xd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev, [0x0, 0xff, 0xffffffff], [0x0, 0x0, 0xff000000], 'veth1_macvtap\x00', 'macvlan0\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xff}}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffffff], [0x0, 0xffffffff, 0xff], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400251}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000ec0)={[{@grpid}, {@journal_path={'journal_path', 0x3d, './file0'}}]}, 0x3, 0x4ea, &(0x7f0000000540)="$eJzs3c9vVEEdAPDv23ZpKQsF5aBGBRFFQ9j+ABqCB+GiMYTESDx5gNouTdNdtum2SCuHcvRuIokn/RO8eTDh5MGbN715wYMJKtFQEw9r3ttHu7S7tJG2C93PJ3l9b2aW/c7sMjP7BrYTQN86HxHrEXEsIh5ExGien+RH3God6ePevH46s/H66UwSzea9fyRZeZoXbX8mdSJ/zuGI+MF3I36c7IzbWF1bmK5WK0t5emy5tjjWWF27Ml/IcyanJqbGb1y9PrlvbT1X+82r78zf+eHvfvull39c/+ZP02qVfnYyK2tvx35qNb0Ypba8wYi4cxDBemQw//vDpyftbZ+JiAtZ/x+NgezdBACOsmZzNJqj7WkA4KhL7/9LkRTK+VpAKQqFcrm1hnc2RgrVemP58mh95dFsZGtYp6NYeDhfrYzna4Wno5ik6Ynseis9uS19NSLORMTPh45n6fJMvTrbyw8+ANDHTmyb//891Jr/AYAjbrjXFQAADp35HwD6j/kfAPpP5/n/eKdM3w4EgCPC/T8A9B/zPwD0n13n/2eHUw8A4FB8/+7d9Ghu5L//evbx6sq3So+vzFYaC+Xaykx5pr60WJ6r1+eqlfJMs7nb81Xr9cWJa5vJxura/Vp95dHy/fna9FzlfqV4wO0BAHZ35tyLPycRsX7zeHZE214O5mo42gq9rgDQMwO9rgDQM77PA/1rD/f4lgHgiOuwRe87uv4Xoec2f4VP1aXPW/+HfmX9H/rX/7f+/+19rwdw+Kz/Q/9qNhN7/gNAn7HGD3zQv/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAnyplR1IoZ3uBr6c/C+VyxMmIOB3F5OF8tTIeEaci4k9DxaE0PdHrSgMAH6jwtyTf/+vS6MXS9tJjyX+GsnNE/OSX937xZHp5eWkizf/nZv7y8zx/8lgvGgAAtLu1M6s1T+fnthv5N6+fzrw9DrOKr263NhdN427kR6tkMAaz83AUI2LkX0mebkk/rwzsQ/z1ZxHxua32P2mLUMrWQFo7n26Pn8Y+eQDxt17/7fEL78QvZGXpuZi9Fp/dh7pAv3lxuzVO5n0v7WJ5/yvE+ezcuf8PZyPUh3s7/m3sGP8Km+PfwI74Sdbnz2+m31+TV9d+/70dmc3RVtmziC8MdoqfbMZPuoy/F/fYxr988csXupU1fxVxKTrHb6llw+zYcm1xrLG6dmW+Nj1Xmas8mpycmpgav3H1+uRYtkbd+vmHTjH+fvPyqW7x0/aPdIk/vEv7v7bH9v/6vw9+9JX3xP/GVzu//2ffEz+dE7++x/jTI7e6bt+dxp/t0v7d3v/Le4z/8q9rs3t8KABwCBqrawvT1WplaZeL9LPmbo9x8WlexHrER1ANFx/VRa9HJuCgbXX6XtcEAAAAAAAAAAAAAADoprG6tjAUB/t1ol63EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKPrfwEAAP//0MvO/A==") 302.921276ms ago: executing program 1 (id=1140): link(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001100)={0x34, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x22040800}, 0x4040) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) flock(r9, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x8e, &(0x7f0000000480)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "e52b42", 0x54, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@hopopts={0x8b, 0x1, '\x00', [@ra={0x5, 0x2, 0x40}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1f}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x1, 0x3, 0x1, 0x3, 0x6, 0x5}, 0x2, {0x2, 0xd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) 296.840656ms ago: executing program 0 (id=1141): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x615, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) write$binfmt_elf64(r2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 238.957506ms ago: executing program 4 (id=1142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000e47f00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) 203.337577ms ago: executing program 1 (id=1143): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32], 0x0, 0x0, 0xfffffffffffffc8f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sched_setscheduler(0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) semop(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000040)={r6, 0x7619, 0x3ff}, 0x8) fcntl$dupfd(r3, 0x0, r3) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) tee(r5, r7, 0x7, 0xa) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007"], 0xd0}}, 0x0) 189.034427ms ago: executing program 3 (id=1144): ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000002c0)={0x3, 0xc, 0x5}) r3 = syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 173.251617ms ago: executing program 0 (id=1145): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) 144.938658ms ago: executing program 3 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r0, 0x0, 0x4) 78.254129ms ago: executing program 3 (id=1147): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff"], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000']) 77.532769ms ago: executing program 3 (id=1148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000) 0s ago: executing program 3 (id=1149): creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) umount2(&(0x7f00000002c0)='./file0\x00', 0x800000000000000) kernel console output (not intermixed with test programs): +0x75e/0x8d0 [ 70.365272][ T4557] ? __rcu_read_unlock+0x4f/0x70 [ 70.365324][ T4557] ? __fget_files+0x184/0x1c0 [ 70.365360][ T4557] __secure_computing+0x82/0x150 [ 70.365380][ T4557] syscall_trace_enter+0xcf/0x1e0 [ 70.365436][ T4557] do_syscall_64+0xaa/0x1a0 [ 70.365465][ T4557] ? clear_bhb_loop+0x40/0x90 [ 70.365490][ T4557] ? clear_bhb_loop+0x40/0x90 [ 70.365517][ T4557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.365595][ T4557] RIP: 0033:0x7f2d0272d37c [ 70.365613][ T4557] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 70.365634][ T4557] RSP: 002b:00007f2d00d97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 70.365716][ T4557] RAX: ffffffffffffffda RBX: 00007f2d02955fa0 RCX: 00007f2d0272d37c [ 70.365733][ T4557] RDX: 000000000000000f RSI: 00007f2d00d970a0 RDI: 0000000000000005 [ 70.365745][ T4557] RBP: 00007f2d00d97090 R08: 0000000000000000 R09: 0000000000000000 [ 70.365757][ T4557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.365768][ T4557] R13: 0000000000000000 R14: 00007f2d02955fa0 R15: 00007ffcfbe62f98 [ 70.365786][ T4557] [ 70.641220][ T4561] netlink: 80 bytes leftover after parsing attributes in process `syz.3.343'. [ 71.103235][ T4575] loop0: detected capacity change from 0 to 512 [ 71.112624][ T4575] EXT4-fs: Ignoring removed orlov option [ 71.118846][ T4575] EXT4-fs: Ignoring removed oldalloc option [ 71.133011][ T4570] loop4: detected capacity change from 0 to 8192 [ 71.151561][ T4575] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 71.175844][ T4575] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.351: Parent and EA inode have the same ino 15 [ 71.196198][ T3308] loop4: p1 p3 p4 [ 71.201670][ T3308] loop4: p1 size 8390912 extends beyond EOD, truncated [ 71.213077][ T4575] EXT4-fs (loop0): 1 orphan inode deleted [ 71.221860][ T3308] loop4: p3 size 589824 extends beyond EOD, truncated [ 71.238782][ T4570] loop4: p1 p3 p4 [ 71.249031][ T4570] loop4: p1 size 8390912 extends beyond EOD, truncated [ 71.262203][ T4570] loop4: p3 size 589824 extends beyond EOD, truncated [ 71.363043][ T4588] wireguard0: entered promiscuous mode [ 71.368831][ T4588] wireguard0: entered allmulticast mode [ 71.402105][ T4592] veth0: entered promiscuous mode [ 71.410126][ T4592] veth0: left promiscuous mode [ 71.510487][ T4600] wireguard0: entered promiscuous mode [ 71.516587][ T4600] wireguard0: entered allmulticast mode [ 71.573979][ T4606] serio: Serial port ptm0 [ 71.897623][ T4622] loop1: detected capacity change from 0 to 128 [ 71.928872][ T4622] EXT4-fs mount: 52 callbacks suppressed [ 71.928893][ T4622] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.038588][ T4622] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.316925][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.466204][ T4632] veth0: entered promiscuous mode [ 72.478794][ T4632] veth0: left promiscuous mode [ 72.504530][ T4632] bond1: entered promiscuous mode [ 72.509722][ T4632] bond1: entered allmulticast mode [ 72.535828][ T4632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.560566][ T4632] bond1 (unregistering): Released all slaves [ 72.615541][ T4638] macvlan1: entered promiscuous mode [ 72.624596][ T4638] ipvlan0: entered promiscuous mode [ 72.632079][ T4638] ipvlan0: left promiscuous mode [ 72.662823][ T4638] macvlan1: left promiscuous mode [ 72.681537][ T4640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25616 sclass=netlink_route_socket pid=4640 comm=syz.1.370 [ 72.834107][ T4649] loop0: detected capacity change from 0 to 1764 [ 72.955779][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 72.955799][ T29] audit: type=1400 audit(1747503059.534:1010): avc: denied { read } for pid=4648 comm="syz.0.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 72.993257][ T4651] SELinux: ebitmap: truncated map [ 73.005031][ T4649] FAULT_INJECTION: forcing a failure. [ 73.005031][ T4649] name failslab, interval 1, probability 0, space 0, times 0 [ 73.019594][ T4649] CPU: 0 UID: 0 PID: 4649 Comm: syz.0.372 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 73.019641][ T4649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 73.019656][ T4649] Call Trace: [ 73.019664][ T4649] [ 73.019672][ T4649] __dump_stack+0x1d/0x30 [ 73.019697][ T4649] dump_stack_lvl+0xe8/0x140 [ 73.019788][ T4649] dump_stack+0x15/0x1b [ 73.019804][ T4649] should_fail_ex+0x265/0x280 [ 73.019845][ T4649] should_failslab+0x8c/0xb0 [ 73.019894][ T4649] kmem_cache_alloc_node_noprof+0x57/0x320 [ 73.019915][ T4649] ? __alloc_skb+0x101/0x320 [ 73.019950][ T4649] __alloc_skb+0x101/0x320 [ 73.019983][ T4649] netlink_alloc_large_skb+0xba/0xf0 [ 73.020034][ T4649] netlink_sendmsg+0x3cf/0x6b0 [ 73.020055][ T4649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.020120][ T4649] __sock_sendmsg+0x145/0x180 [ 73.020215][ T4649] ____sys_sendmsg+0x31e/0x4e0 [ 73.020244][ T4649] ___sys_sendmsg+0x17b/0x1d0 [ 73.020288][ T4649] __x64_sys_sendmsg+0xd4/0x160 [ 73.020319][ T4649] x64_sys_call+0x2999/0x2fb0 [ 73.020422][ T4649] do_syscall_64+0xd0/0x1a0 [ 73.020478][ T4649] ? clear_bhb_loop+0x40/0x90 [ 73.020505][ T4649] ? clear_bhb_loop+0x40/0x90 [ 73.020528][ T4649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.020615][ T4649] RIP: 0033:0x7fb90461e969 [ 73.020631][ T4649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.020672][ T4649] RSP: 002b:00007fb902c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.020695][ T4649] RAX: ffffffffffffffda RBX: 00007fb904845fa0 RCX: 00007fb90461e969 [ 73.020709][ T4649] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 000000000000000a [ 73.020720][ T4649] RBP: 00007fb902c87090 R08: 0000000000000000 R09: 0000000000000000 [ 73.020762][ T4649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.020776][ T4649] R13: 0000000000000000 R14: 00007fb904845fa0 R15: 00007fff42190eb8 [ 73.020797][ T4649] [ 73.023502][ T4651] SELinux: failed to load policy [ 73.025345][ T29] audit: type=1400 audit(1747503059.604:1011): avc: denied { ioctl } for pid=4648 comm="syz.0.372" path="socket:[8688]" dev="sockfs" ino=8688 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 73.264823][ T4662] loop4: detected capacity change from 0 to 8192 [ 73.269911][ T29] audit: type=1400 audit(1747503059.724:1012): avc: denied { execute } for pid=4656 comm="syz.2.376" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.303034][ T4664] loop2: detected capacity change from 0 to 512 [ 73.303845][ T4664] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.369058][ T3308] loop4: p1 p3 p4 [ 73.386466][ T4664] EXT4-fs (loop2): 1 truncate cleaned up [ 73.401222][ T4664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.401242][ T4672] loop1: detected capacity change from 0 to 512 [ 73.401844][ T3308] loop4: p1 size 8390912 extends beyond EOD, truncated [ 73.430701][ T4672] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.442951][ T3308] loop4: p3 size 589824 extends beyond EOD, truncated [ 73.448247][ T4673] serio: Serial port ptm0 [ 73.465551][ T4662] loop4: p1 p3 p4 [ 73.471671][ T4662] loop4: p1 size 8390912 extends beyond EOD, truncated [ 73.487437][ T4662] loop4: p3 size 589824 extends beyond EOD, truncated [ 73.498478][ T4672] EXT4-fs (loop1): 1 truncate cleaned up [ 73.509577][ T4672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.590627][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.696752][ T29] audit: type=1326 audit(1747503060.294:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 73.720969][ T29] audit: type=1326 audit(1747503060.294:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 73.745484][ T29] audit: type=1326 audit(1747503060.294:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 73.769379][ T29] audit: type=1326 audit(1747503060.294:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 73.794290][ T29] audit: type=1326 audit(1747503060.294:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 73.818751][ T29] audit: type=1326 audit(1747503060.294:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 73.844356][ T29] audit: type=1326 audit(1747503060.294:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4680 comm="syz.0.383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 73.878048][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.913600][ T4687] loop3: detected capacity change from 0 to 1024 [ 73.951101][ T3596] udevd[3596]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 73.963679][ T4691] SELinux: ebitmap: truncated map [ 73.969936][ T4691] SELinux: failed to load policy [ 73.970930][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 73.995754][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 74.036420][ T4687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.100405][ T4701] wireguard0: entered promiscuous mode [ 74.106470][ T4701] wireguard0: entered allmulticast mode [ 74.157081][ T4707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 74.508872][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.631387][ T4713] netlink: 60 bytes leftover after parsing attributes in process `syz.0.393'. [ 74.984540][ T4723] loop2: detected capacity change from 0 to 8192 [ 75.026012][ T3597] loop2: p1 p3 p4 [ 75.031143][ T3597] loop2: p1 size 8390912 extends beyond EOD, truncated [ 75.039720][ T3597] loop2: p3 size 589824 extends beyond EOD, truncated [ 75.056858][ T4723] loop2: p1 p3 p4 [ 75.077681][ T4723] loop2: p1 size 8390912 extends beyond EOD, truncated [ 75.086413][ T4723] loop2: p3 size 589824 extends beyond EOD, truncated [ 75.123981][ T4729] loop4: detected capacity change from 0 to 128 [ 75.150228][ T4729] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.172886][ T4728] veth0: entered promiscuous mode [ 75.179186][ T4729] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.193393][ T4728] veth0: left promiscuous mode [ 75.420174][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.467881][ T4744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 76.088442][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 76.102238][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 76.129345][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 76.192100][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 76.193204][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 76.218453][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 76.284304][ T4754] loop0: detected capacity change from 0 to 512 [ 76.297611][ T4754] EXT4-fs: Ignoring removed orlov option [ 76.304133][ T4754] EXT4-fs: Ignoring removed oldalloc option [ 76.327897][ T4754] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 76.359942][ T4754] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.407: Parent and EA inode have the same ino 15 [ 76.379680][ T4754] EXT4-fs (loop0): 1 orphan inode deleted [ 76.412628][ T4754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.481891][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.553628][ T4761] veth0: entered promiscuous mode [ 76.566310][ T4761] veth0: left promiscuous mode [ 76.643810][ T4764] wireguard0: entered promiscuous mode [ 76.649533][ T4764] wireguard0: entered allmulticast mode [ 76.870134][ T4781] loop0: detected capacity change from 0 to 512 [ 76.902470][ T4781] EXT4-fs (loop0): 1 orphan inode deleted [ 76.916409][ T3414] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 76.936073][ T4781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.954819][ T4781] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.107359][ T4774] Set syz1 is full, maxelem 65536 reached [ 77.113715][ T4785] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 77.127609][ T4785] ipvlan0: entered allmulticast mode [ 77.133333][ T4785] veth0_vlan: entered allmulticast mode [ 77.140521][ T4785] team0: Device ipvlan0 failed to register rx_handler [ 77.161728][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.178258][ T3525] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 77.268063][ T4806] loop3: detected capacity change from 0 to 512 [ 77.287334][ T4806] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.304051][ T4806] EXT4-fs (loop3): 1 truncate cleaned up [ 77.317973][ T4806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.470828][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.509499][ T4832] loop3: detected capacity change from 0 to 512 [ 77.534405][ T4832] EXT4-fs: Ignoring removed orlov option [ 77.540781][ T4832] EXT4-fs: Ignoring removed oldalloc option [ 77.571579][ T4832] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 77.603733][ T4832] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.422: Parent and EA inode have the same ino 15 [ 77.631449][ T4832] EXT4-fs (loop3): 1 orphan inode deleted [ 77.640479][ T4832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.661546][ T4845] wireguard0: entered promiscuous mode [ 77.667156][ T4845] wireguard0: entered allmulticast mode [ 77.686057][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.717238][ T4849] loop3: detected capacity change from 0 to 512 [ 77.725546][ T4849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.758436][ T4849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.771694][ T4849] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.787912][ T4849] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.425: bg 0: block 304: padding at end of block bitmap is not set [ 77.805460][ T4849] EXT4-fs (loop3): Remounting filesystem read-only [ 77.833661][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.993195][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 78.038300][ T4860] loop3: detected capacity change from 0 to 8192 [ 78.141734][ T4864] loop1: detected capacity change from 0 to 512 [ 78.194107][ T4864] EXT4-fs (loop1): 1 orphan inode deleted [ 78.216971][ T176] __quota_error: 59 callbacks suppressed [ 78.216991][ T176] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 78.217510][ T4864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.222816][ T176] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 78.239579][ T4864] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.451895][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.463216][ T176] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 78.474874][ T176] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 78.664658][ T4882] SELinux: ebitmap: truncated map [ 78.672508][ T4882] SELinux: failed to load policy [ 78.694356][ T4875] loop0: detected capacity change from 0 to 8192 [ 78.764140][ T4875] loop0: p1 p3 p4 [ 78.792688][ T4875] loop0: p1 size 8390912 extends beyond EOD, truncated [ 78.801833][ T4890] wireguard0: entered promiscuous mode [ 78.808132][ T4890] wireguard0: entered allmulticast mode [ 78.826078][ T4875] loop0: p3 size 589824 extends beyond EOD, truncated [ 78.844756][ T4893] loop4: detected capacity change from 0 to 512 [ 78.879925][ T4893] EXT4-fs (loop4): 1 orphan inode deleted [ 78.900291][ T35] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 78.910711][ T35] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 78.941185][ T4893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.965223][ T4893] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.986353][ T4907] loop2: detected capacity change from 0 to 1024 [ 78.998487][ T29] audit: type=1400 audit(1747503065.604:1075): avc: denied { connect } for pid=4906 comm="syz.2.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.019823][ T4907] 9pnet_fd: Insufficient options for proto=fd [ 79.062276][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.086026][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 79.097871][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 79.114236][ T29] audit: type=1326 audit(1747503065.714:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 79.143794][ T29] audit: type=1326 audit(1747503065.714:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 79.168798][ T29] audit: type=1326 audit(1747503065.714:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 79.208206][ T29] audit: type=1326 audit(1747503065.794:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 79.234120][ T29] audit: type=1326 audit(1747503065.794:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 79.475491][ T4940] program syz.0.444 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.495417][ T4935] SELinux: ebitmap: truncated map [ 79.506685][ T4935] SELinux: failed to load policy [ 79.593536][ T4948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 79.829407][ T4958] loop1: detected capacity change from 0 to 8192 [ 80.459988][ T4967] loop4: detected capacity change from 0 to 128 [ 80.592090][ T4967] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.620984][ T4967] ext4 filesystem being mounted at /88/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.758126][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.825385][ T4977] loop4: detected capacity change from 0 to 512 [ 80.839488][ T4977] EXT4-fs: Ignoring removed orlov option [ 80.845994][ T4977] EXT4-fs: Ignoring removed oldalloc option [ 80.847575][ T4975] loop2: detected capacity change from 0 to 8192 [ 80.860488][ T4979] loop0: detected capacity change from 0 to 512 [ 80.880757][ T4977] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 80.897823][ T4977] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.458: Parent and EA inode have the same ino 15 [ 80.912683][ T4979] EXT4-fs (loop0): 1 orphan inode deleted [ 80.919267][ T3308] loop2: p1 p3 p4 [ 80.923495][ T3308] loop2: p1 size 8390912 extends beyond EOD, truncated [ 80.931329][ T176] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 80.950567][ T4979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.964121][ T4979] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.966519][ T3308] loop2: p3 size 589824 extends beyond EOD, truncated [ 80.983138][ T4977] EXT4-fs (loop4): 1 orphan inode deleted [ 80.989878][ T4977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.004389][ T4975] loop2: p1 p3 p4 [ 81.008756][ T4975] loop2: p1 size 8390912 extends beyond EOD, truncated [ 81.019134][ T4975] loop2: p3 size 589824 extends beyond EOD, truncated [ 81.039108][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.049391][ T176] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 81.064531][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.094804][ T4989] program syz.0.461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.170365][ T4995] loop4: detected capacity change from 0 to 512 [ 81.214558][ T4995] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.308292][ T4995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.323943][ T4995] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.342604][ T4995] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.464: bg 0: block 304: padding at end of block bitmap is not set [ 81.359530][ T4995] EXT4-fs (loop4): Remounting filesystem read-only [ 81.383362][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.506827][ T5002] program syz.4.465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.572229][ T5008] bond1: entered promiscuous mode [ 81.579385][ T5008] bond1: entered allmulticast mode [ 81.589435][ T5008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.601986][ T5008] bond1 (unregistering): Released all slaves [ 81.764325][ T5015] macvlan1: entered promiscuous mode [ 81.777711][ T5015] ipvlan0: entered promiscuous mode [ 81.781344][ T5019] loop4: detected capacity change from 0 to 512 [ 81.783769][ T5015] ipvlan0: left promiscuous mode [ 81.798609][ T5015] macvlan1: left promiscuous mode [ 81.800272][ T5019] EXT4-fs (loop4): 1 orphan inode deleted [ 81.813970][ T5019] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.826844][ T3414] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 81.827333][ T5019] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.022575][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.045014][ T176] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 83.026331][ T5048] loop2: detected capacity change from 0 to 512 [ 83.049083][ T5048] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.066711][ T5048] EXT4-fs (loop2): 1 truncate cleaned up [ 83.073373][ T5048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.092909][ T5054] macvlan1: entered promiscuous mode [ 83.110341][ T5054] ipvlan0: entered promiscuous mode [ 83.124078][ T5054] ipvlan0: left promiscuous mode [ 83.171474][ T5054] macvlan1: left promiscuous mode [ 83.198585][ T5056] loop0: detected capacity change from 0 to 8192 [ 83.235128][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.268175][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 83.268195][ T29] audit: type=1326 audit(1747503069.874:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38a4ee969 code=0x7ffc0000 [ 83.271728][ T5056] loop0: p1 p3 p4 [ 83.277386][ T29] audit: type=1326 audit(1747503069.884:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5051 comm="syz.3.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff38a4ee969 code=0x7ffc0000 [ 83.338006][ T5056] loop0: p1 size 8390912 extends beyond EOD, truncated [ 83.357602][ T5056] loop0: p3 size 589824 extends beyond EOD, truncated [ 83.847513][ T5061] serio: Serial port ptm0 [ 83.910922][ T5077] loop3: detected capacity change from 0 to 512 [ 83.923530][ T5077] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.948860][ T5077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.997052][ T5077] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.070149][ T5077] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.489: bg 0: block 304: padding at end of block bitmap is not set [ 84.097443][ T5083] serio: Serial port ptm1 [ 84.105720][ T5077] EXT4-fs (loop3): Remounting filesystem read-only [ 84.138304][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.148819][ T12] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 84.169795][ T12] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 84.191518][ T5085] loop1: detected capacity change from 0 to 8192 [ 84.328185][ T5091] loop4: detected capacity change from 0 to 512 [ 84.377221][ T5091] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.470528][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 84.507208][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 84.621362][ T5091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.752847][ T29] audit: type=1326 audit(1747503071.354:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 84.776980][ T29] audit: type=1326 audit(1747503071.354:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 84.801573][ T29] audit: type=1326 audit(1747503071.354:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 84.807973][ T5091] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.825568][ T29] audit: type=1326 audit(1747503071.354:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 84.825606][ T29] audit: type=1326 audit(1747503071.354:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 84.825725][ T29] audit: type=1326 audit(1747503071.354:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5102 comm="syz.0.496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 84.917715][ T5104] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.495: bg 0: block 304: padding at end of block bitmap is not set [ 84.937237][ T5104] EXT4-fs (loop4): Remounting filesystem read-only [ 84.983074][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.265139][ T5122] program syz.0.505 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.820797][ T5131] loop1: detected capacity change from 0 to 8192 [ 85.844343][ T5133] loop3: detected capacity change from 0 to 8192 [ 85.895939][ T3597] loop1: p1 p3 p4 [ 85.900008][ T3597] loop1: p1 size 8390912 extends beyond EOD, truncated [ 85.907894][ T5133] loop3: p1 p3 p4 [ 85.919580][ T5133] loop3: p1 size 8390912 extends beyond EOD, truncated [ 85.927298][ T3597] loop1: p3 size 589824 extends beyond EOD, truncated [ 85.929723][ T5133] loop3: p3 size 589824 extends beyond EOD, truncated [ 86.026298][ T5131] loop1: p1 p3 p4 [ 86.032624][ T5131] loop1: p1 size 8390912 extends beyond EOD, truncated [ 86.086945][ T5131] loop1: p3 size 589824 extends beyond EOD, truncated [ 86.202845][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 86.203339][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 86.227465][ T5147] SELinux: ebitmap: truncated map [ 86.230705][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 86.234740][ T5147] SELinux: failed to load policy [ 86.267681][ T5150] serio: Serial port ptm1 [ 86.269182][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 86.284615][ T5151] udevd[5151]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 86.292361][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 86.412157][ T5162] program syz.2.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.823194][ T5165] serio: Serial port ptm0 [ 87.123296][ T5197] serio: Serial port ptm2 [ 87.252263][ T5205] program syz.0.534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.325223][ T5211] macvlan1: entered promiscuous mode [ 87.332513][ T5211] ipvlan0: entered promiscuous mode [ 87.340931][ T5211] ipvlan0: left promiscuous mode [ 87.357165][ T5211] macvlan1: left promiscuous mode [ 87.372073][ T5217] program syz.1.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.405517][ T5215] loop2: detected capacity change from 0 to 8192 [ 87.516241][ T5222] macvlan1: entered promiscuous mode [ 87.523746][ T5222] ipvlan0: entered promiscuous mode [ 87.532722][ T5222] ipvlan0: left promiscuous mode [ 87.539732][ T5222] macvlan1: left promiscuous mode [ 87.557630][ T5223] bond1: entered promiscuous mode [ 87.562844][ T5223] bond1: entered allmulticast mode [ 87.569151][ T5223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.580568][ T5223] bond1 (unregistering): Released all slaves [ 87.784930][ T5235] program syz.0.545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.798059][ T5238] FAULT_INJECTION: forcing a failure. [ 87.798059][ T5238] name failslab, interval 1, probability 0, space 0, times 0 [ 87.811454][ T5238] CPU: 1 UID: 0 PID: 5238 Comm: syz.3.547 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 87.811486][ T5238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 87.811501][ T5238] Call Trace: [ 87.811509][ T5238] [ 87.811518][ T5238] __dump_stack+0x1d/0x30 [ 87.811623][ T5238] dump_stack_lvl+0xe8/0x140 [ 87.811645][ T5238] dump_stack+0x15/0x1b [ 87.811710][ T5238] should_fail_ex+0x265/0x280 [ 87.811748][ T5238] should_failslab+0x8c/0xb0 [ 87.811782][ T5238] kmem_cache_alloc_node_noprof+0x57/0x320 [ 87.811884][ T5238] ? __alloc_skb+0x101/0x320 [ 87.811922][ T5238] __alloc_skb+0x101/0x320 [ 87.811957][ T5238] netlink_alloc_large_skb+0xba/0xf0 [ 87.811993][ T5238] netlink_sendmsg+0x3cf/0x6b0 [ 87.812076][ T5238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.812122][ T5238] __sock_sendmsg+0x145/0x180 [ 87.812153][ T5238] ____sys_sendmsg+0x31e/0x4e0 [ 87.812180][ T5238] ___sys_sendmsg+0x17b/0x1d0 [ 87.812220][ T5238] __x64_sys_sendmsg+0xd4/0x160 [ 87.812271][ T5238] x64_sys_call+0x2999/0x2fb0 [ 87.812296][ T5238] do_syscall_64+0xd0/0x1a0 [ 87.812323][ T5238] ? clear_bhb_loop+0x40/0x90 [ 87.812347][ T5238] ? clear_bhb_loop+0x40/0x90 [ 87.812391][ T5238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.812415][ T5238] RIP: 0033:0x7ff38a4ee969 [ 87.812432][ T5238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.812486][ T5238] RSP: 002b:00007ff388b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.812507][ T5238] RAX: ffffffffffffffda RBX: 00007ff38a715fa0 RCX: 00007ff38a4ee969 [ 87.812521][ T5238] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000006 [ 87.812534][ T5238] RBP: 00007ff388b57090 R08: 0000000000000000 R09: 0000000000000000 [ 87.812548][ T5238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.812561][ T5238] R13: 0000000000000000 R14: 00007ff38a715fa0 R15: 00007ffc969bb6b8 [ 87.812583][ T5238] [ 88.122180][ T5244] serio: Serial port ptm0 [ 88.255044][ T5249] loop0: detected capacity change from 0 to 512 [ 88.267253][ T5249] EXT4-fs: Ignoring removed orlov option [ 88.273694][ T5249] EXT4-fs: Ignoring removed oldalloc option [ 88.503217][ T5249] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 88.625894][ T5249] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.551: Parent and EA inode have the same ino 15 [ 88.648268][ T5256] bridge_slave_0: left allmulticast mode [ 88.654455][ T5256] bridge_slave_0: left promiscuous mode [ 88.661004][ T5256] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.674422][ T5249] EXT4-fs (loop0): 1 orphan inode deleted [ 88.702646][ T5249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.719119][ T5256] bridge_slave_1: left allmulticast mode [ 88.725563][ T5256] bridge_slave_1: left promiscuous mode [ 88.731837][ T5256] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.756948][ T5256] bond0: (slave bond_slave_0): Releasing backup interface [ 88.767272][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.780593][ T5256] bond0: (slave bond_slave_1): Releasing backup interface [ 88.802071][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 88.802089][ T29] audit: type=1400 audit(1747503075.404:1290): avc: denied { create } for pid=5263 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.831863][ T5256] team0: Port device team_slave_0 removed [ 88.842760][ T29] audit: type=1400 audit(1747503075.404:1291): avc: denied { read } for pid=5263 comm="syz.0.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 88.866335][ T5256] team0: Port device team_slave_1 removed [ 88.873441][ T29] audit: type=1400 audit(1747503075.474:1292): avc: denied { write } for pid=5265 comm="syz.1.555" name="ip_vs" dev="proc" ino=4026532447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.883407][ T5256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.905333][ T5256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.968468][ T29] audit: type=1400 audit(1747503075.574:1293): avc: denied { allowed } for pid=5268 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 88.969840][ T5269] FAULT_INJECTION: forcing a failure. [ 88.969840][ T5269] name failslab, interval 1, probability 0, space 0, times 0 [ 89.001124][ T5269] CPU: 0 UID: 0 PID: 5269 Comm: syz.1.556 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 89.001160][ T5269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 89.001176][ T5269] Call Trace: [ 89.001183][ T5269] [ 89.001191][ T5269] __dump_stack+0x1d/0x30 [ 89.001250][ T5269] dump_stack_lvl+0xe8/0x140 [ 89.001285][ T5269] dump_stack+0x15/0x1b [ 89.001306][ T5269] should_fail_ex+0x265/0x280 [ 89.001346][ T5269] should_failslab+0x8c/0xb0 [ 89.001384][ T5269] kmem_cache_alloc_noprof+0x50/0x310 [ 89.001443][ T5269] ? getname_flags+0x80/0x3b0 [ 89.001552][ T5269] getname_flags+0x80/0x3b0 [ 89.001591][ T5269] io_openat_prep+0x129/0x2b0 [ 89.001703][ T5269] io_submit_sqes+0x5cb/0x1000 [ 89.001751][ T5269] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 89.001790][ T5269] ? __rcu_read_unlock+0x4f/0x70 [ 89.001886][ T5269] ? get_pid_task+0x96/0xd0 [ 89.001916][ T5269] ? proc_fail_nth_write+0x12d/0x160 [ 89.001950][ T5269] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.001982][ T5269] ? vfs_write+0x75e/0x8d0 [ 89.002062][ T5269] ? __rcu_read_unlock+0x4f/0x70 [ 89.002089][ T5269] ? __fget_files+0x184/0x1c0 [ 89.002134][ T5269] ? fput+0x8f/0xc0 [ 89.002159][ T5269] __x64_sys_io_uring_enter+0x78/0x90 [ 89.002219][ T5269] x64_sys_call+0x28c8/0x2fb0 [ 89.002244][ T5269] do_syscall_64+0xd0/0x1a0 [ 89.002268][ T5269] ? clear_bhb_loop+0x40/0x90 [ 89.002290][ T5269] ? clear_bhb_loop+0x40/0x90 [ 89.002361][ T5269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.002388][ T5269] RIP: 0033:0x7f2d0272e969 [ 89.002407][ T5269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.002428][ T5269] RSP: 002b:00007f2d00d97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 89.002452][ T5269] RAX: ffffffffffffffda RBX: 00007f2d02955fa0 RCX: 00007f2d0272e969 [ 89.002467][ T5269] RDX: 000000000000addf RSI: 0000000000003516 RDI: 0000000000000004 [ 89.002505][ T5269] RBP: 00007f2d00d97090 R08: 0000000000000000 R09: 000000000001517f [ 89.002517][ T5269] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 89.002528][ T5269] R13: 0000000000000000 R14: 00007f2d02955fa0 R15: 00007ffcfbe62f98 [ 89.002546][ T5269] [ 89.090783][ T5256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.247783][ T5256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.394568][ T29] audit: type=1326 audit(1747503075.994:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 89.400667][ T5286] macvlan1: entered promiscuous mode [ 89.428418][ T5286] ipvlan0: entered promiscuous mode [ 89.434565][ T5286] ipvlan0: left promiscuous mode [ 89.441192][ T5286] macvlan1: left promiscuous mode [ 89.447303][ T29] audit: type=1326 audit(1747503075.994:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 89.473447][ T29] audit: type=1326 audit(1747503075.994:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 89.476036][ T5288] SELinux: ebitmap: truncated map [ 89.498602][ T29] audit: type=1326 audit(1747503075.994:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 89.530877][ T29] audit: type=1326 audit(1747503075.994:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 89.556574][ T29] audit: type=1326 audit(1747503075.994:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5285 comm="syz.1.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 89.557119][ T5288] SELinux: failed to load policy [ 89.709342][ T5298] program syz.4.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.777788][ T5305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.562'. [ 90.244823][ T5316] loop0: detected capacity change from 0 to 128 [ 90.400289][ T5316] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.436721][ T5316] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.614467][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.819451][ T5333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.575'. [ 90.849682][ T5333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.575'. [ 90.886066][ T5333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.023197][ T5348] program syz.0.580 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.043233][ T5352] macvlan1: entered promiscuous mode [ 91.052107][ T5352] ipvlan0: entered promiscuous mode [ 91.058383][ T5352] ipvlan0: left promiscuous mode [ 91.064769][ T5352] macvlan1: left promiscuous mode [ 91.077794][ T5344] SELinux: ebitmap: truncated map [ 91.084262][ T5344] SELinux: failed to load policy [ 91.349859][ T5362] program syz.4.585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.772712][ T5370] loop2: detected capacity change from 0 to 8192 [ 91.956356][ T5375] macvlan1: entered promiscuous mode [ 91.963469][ T5375] ipvlan0: entered promiscuous mode [ 91.970748][ T5375] ipvlan0: left promiscuous mode [ 91.977232][ T5375] macvlan1: left promiscuous mode [ 92.010832][ T5377] bond2: entered promiscuous mode [ 92.016455][ T5377] bond2: entered allmulticast mode [ 92.022680][ T5377] 8021q: adding VLAN 0 to HW filter on device bond2 [ 92.067457][ T5377] bond2 (unregistering): Released all slaves [ 92.193208][ T5385] SELinux: ebitmap: truncated map [ 92.201509][ T5385] SELinux: failed to load policy [ 93.013306][ T5406] bond2: entered promiscuous mode [ 93.018711][ T5406] bond2: entered allmulticast mode [ 93.111199][ T5406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.132051][ T5408] loop1: detected capacity change from 0 to 8192 [ 93.168273][ T5406] bond2 (unregistering): Released all slaves [ 93.215928][ T3597] loop1: p1 p3 p4 [ 93.220703][ T3597] loop1: p1 size 8390912 extends beyond EOD, truncated [ 93.254430][ T3597] loop1: p3 size 589824 extends beyond EOD, truncated [ 93.363227][ T5415] loop2: detected capacity change from 0 to 8192 [ 93.399727][ T5408] loop1: p1 p3 p4 [ 93.404414][ T5408] loop1: p1 size 8390912 extends beyond EOD, truncated [ 93.419623][ T5151] loop2: p1 p3 p4 [ 93.428218][ T5151] loop2: p1 size 8390912 extends beyond EOD, truncated [ 93.449674][ T5408] loop1: p3 size 589824 extends beyond EOD, truncated [ 93.458631][ T5151] loop2: p3 size 589824 extends beyond EOD, truncated [ 93.474150][ T5415] loop2: p1 p3 p4 [ 93.483851][ T5415] loop2: p1 size 8390912 extends beyond EOD, truncated [ 93.540918][ T5415] loop2: p3 size 589824 extends beyond EOD, truncated [ 93.678196][ T5429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.609'. [ 93.711988][ T5422] loop0: detected capacity change from 0 to 8192 [ 94.381680][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 94.394858][ T5422] loop0: p1 p3 p4 [ 94.401256][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 94.414837][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 94.437174][ T5422] loop0: p1 size 8390912 extends beyond EOD, truncated [ 94.456591][ T5422] loop0: p3 size 589824 extends beyond EOD, truncated [ 94.474050][ T5444] serio: Serial port ptm0 [ 94.523942][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 94.543308][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 94.556330][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 94.571843][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 94.610054][ T5152] udevd[5152]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 94.610093][ T3596] udevd[3596]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 94.625186][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 94.741450][ T5451] loop4: detected capacity change from 0 to 8192 [ 94.767731][ T5459] loop1: detected capacity change from 0 to 128 [ 94.809836][ T5459] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.194848][ T5459] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.410847][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.609536][ T5472] loop3: detected capacity change from 0 to 8192 [ 95.694165][ T5474] loop1: detected capacity change from 0 to 8192 [ 95.739233][ T5476] loop0: detected capacity change from 0 to 512 [ 95.749261][ T5476] EXT4-fs: Ignoring removed orlov option [ 95.755704][ T5476] EXT4-fs: Ignoring removed oldalloc option [ 95.763343][ T5151] loop1: p1 p3 p4 [ 95.787151][ T5151] loop1: p1 size 8390912 extends beyond EOD, truncated [ 95.802163][ T5151] loop1: p3 size 589824 extends beyond EOD, truncated [ 95.811797][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 95.811813][ T29] audit: type=1400 audit(1747503082.414:1457): avc: denied { ioctl } for pid=5478 comm="syz.2.624" path="socket:[10992]" dev="sockfs" ino=10992 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.867449][ T5476] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 95.894685][ T5474] loop1: p1 p3 p4 [ 95.899650][ T5474] loop1: p1 size 8390912 extends beyond EOD, truncated [ 95.931147][ T5484] netlink: 'syz.4.623': attribute type 1 has an invalid length. [ 95.965084][ T5476] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.622: Parent and EA inode have the same ino 15 [ 95.989762][ T5474] loop1: p3 size 589824 extends beyond EOD, truncated [ 96.013447][ T5479] loop2: detected capacity change from 0 to 512 [ 96.031699][ T5484] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.040051][ T5476] EXT4-fs (loop0): 1 orphan inode deleted [ 96.046857][ T5476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.083008][ T5485] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 96.094411][ T5479] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.183863][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.208308][ T5479] EXT4-fs (loop2): 1 truncate cleaned up [ 96.263769][ T5479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.281493][ T5494] vlan2: entered allmulticast mode [ 96.281516][ T5494] veth1: entered allmulticast mode [ 96.281917][ T5494] veth1: entered promiscuous mode [ 96.282127][ T5494] veth1: left promiscuous mode [ 96.283371][ T5494] bond2: (slave vlan2): making interface the new active one [ 96.354825][ T5494] veth1: entered promiscuous mode [ 96.394482][ T5503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.624'. [ 96.413344][ T5494] vlan2: entered promiscuous mode [ 96.433831][ T5494] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 96.473579][ T5511] netlink: 28 bytes leftover after parsing attributes in process `syz.3.627'. [ 96.522041][ T5513] macvlan1: entered promiscuous mode [ 96.550129][ T29] audit: type=1326 audit(1747503083.124:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 96.574951][ T29] audit: type=1326 audit(1747503083.124:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 96.587297][ T5513] ipvlan0: entered promiscuous mode [ 96.602106][ T29] audit: type=1326 audit(1747503083.124:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 96.602144][ T29] audit: type=1326 audit(1747503083.124:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 96.660557][ T29] audit: type=1326 audit(1747503083.124:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 96.687839][ T29] audit: type=1326 audit(1747503083.124:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 96.692918][ T5513] ipvlan0: left promiscuous mode [ 96.714018][ T29] audit: type=1326 audit(1747503083.124:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 96.714058][ T29] audit: type=1326 audit(1747503083.124:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 96.714128][ T29] audit: type=1326 audit(1747503083.124:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5512 comm="syz.1.629" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 96.767371][ T5518] SELinux: ebitmap: truncated map [ 96.815049][ T5513] macvlan1: left promiscuous mode [ 96.822636][ T5518] SELinux: failed to load policy [ 96.824390][ T5517] serio: Serial port ptm0 [ 96.853483][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.985887][ T5527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 97.043290][ T5534] program syz.1.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.072393][ T5538] loop4: detected capacity change from 0 to 512 [ 97.081112][ T5538] EXT4-fs: Ignoring removed orlov option [ 97.088589][ T5538] EXT4-fs: Ignoring removed oldalloc option [ 97.097696][ T5538] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 97.117933][ T5538] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.637: Parent and EA inode have the same ino 15 [ 97.133395][ T5538] EXT4-fs (loop4): 1 orphan inode deleted [ 97.141614][ T5538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.167936][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.459269][ T5552] loop1: detected capacity change from 0 to 8192 [ 97.757508][ T5556] SELinux: ebitmap: truncated map [ 97.766666][ T5556] SELinux: failed to load policy [ 97.945516][ T5568] loop0: detected capacity change from 0 to 512 [ 97.971240][ T5568] EXT4-fs: Ignoring removed orlov option [ 97.977393][ T5568] EXT4-fs: Ignoring removed oldalloc option [ 98.003859][ T5568] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 98.021374][ T5568] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.649: Parent and EA inode have the same ino 15 [ 98.035566][ T5568] EXT4-fs (loop0): 1 orphan inode deleted [ 98.044259][ T5568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.086861][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.186636][ T5576] bond1: entered promiscuous mode [ 98.192627][ T5576] bond1: entered allmulticast mode [ 98.199173][ T5576] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.210548][ T5576] bond1 (unregistering): Released all slaves [ 98.351794][ T5585] loop4: detected capacity change from 0 to 128 [ 98.391618][ T5585] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.496120][ T5585] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.564154][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.642700][ T5592] loop1: detected capacity change from 0 to 8192 [ 99.282094][ T5608] loop3: detected capacity change from 0 to 8192 [ 99.339749][ T3597] loop3: p1 p3 p4 [ 99.353353][ T3597] loop3: p1 size 8390912 extends beyond EOD, truncated [ 99.379297][ T3597] loop3: p3 size 589824 extends beyond EOD, truncated [ 99.392584][ T5614] loop0: detected capacity change from 0 to 8192 [ 99.409482][ T5608] loop3: p1 p3 p4 [ 99.414856][ T5616] SELinux: ebitmap: truncated map [ 99.416839][ T5608] loop3: p1 size 8390912 extends beyond EOD, truncated [ 99.421970][ T5616] SELinux: failed to load policy [ 99.433371][ T5608] loop3: p3 size 589824 extends beyond EOD, truncated [ 99.447156][ T5151] loop0: p1 p3 p4 [ 99.451410][ T5151] loop0: p1 size 8390912 extends beyond EOD, truncated [ 99.468007][ T5151] loop0: p3 size 589824 extends beyond EOD, truncated [ 99.490768][ T5618] loop1: detected capacity change from 0 to 128 [ 99.498166][ T5614] loop0: p1 p3 p4 [ 99.504239][ T5614] loop0: p1 size 8390912 extends beyond EOD, truncated [ 99.523747][ T5614] loop0: p3 size 589824 extends beyond EOD, truncated [ 99.587031][ T5618] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.610743][ T5618] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.668786][ T5620] loop4: detected capacity change from 0 to 8192 [ 99.706659][ T3306] loop4: p1 p3 p4 [ 99.711546][ T3306] loop4: p1 size 8390912 extends beyond EOD, truncated [ 99.722720][ T3306] loop4: p3 size 589824 extends beyond EOD, truncated [ 99.736215][ T5620] loop4: p1 p3 p4 [ 99.740856][ T5620] loop4: p1 size 8390912 extends beyond EOD, truncated [ 99.756902][ T5620] loop4: p3 size 589824 extends beyond EOD, truncated [ 99.785906][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.883818][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 99.886720][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 99.897300][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 100.030632][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 100.049096][ T5151] udevd[5151]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 100.067072][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 100.153938][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 100.154054][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 100.167477][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 100.502877][ T5647] loop0: detected capacity change from 0 to 8192 [ 101.021489][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 101.021506][ T29] audit: type=1400 audit(1747503087.624:1532): avc: denied { bind } for pid=5651 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.072384][ T29] audit: type=1400 audit(1747503087.634:1533): avc: denied { write } for pid=5651 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 101.147323][ T29] audit: type=1326 audit(1747503087.754:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 101.173115][ T29] audit: type=1326 audit(1747503087.754:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 101.230024][ T29] audit: type=1326 audit(1747503087.804:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 101.258858][ T29] audit: type=1326 audit(1747503087.804:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 101.283682][ T29] audit: type=1326 audit(1747503087.804:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 101.307423][ T29] audit: type=1326 audit(1747503087.804:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 101.313559][ T5669] netlink: 192 bytes leftover after parsing attributes in process `syz.4.686'. [ 101.331741][ T29] audit: type=1326 audit(1747503087.804:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 101.331782][ T29] audit: type=1326 audit(1747503087.804:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.2.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 101.389965][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.686'. [ 101.553401][ T5676] loop2: detected capacity change from 0 to 8192 [ 101.869427][ T5682] loop3: detected capacity change from 0 to 8192 [ 101.927069][ T3597] loop3: p1 p3 p4 [ 101.936709][ T3597] loop3: p1 size 8390912 extends beyond EOD, truncated [ 101.946347][ T3597] loop3: p3 size 589824 extends beyond EOD, truncated [ 101.989002][ T5682] loop3: p1 p3 p4 [ 101.994455][ T5682] loop3: p1 size 8390912 extends beyond EOD, truncated [ 102.003263][ T5682] loop3: p3 size 589824 extends beyond EOD, truncated [ 102.099864][ T5151] udevd[5151]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 102.186819][ T5693] SELinux: ebitmap: truncated map [ 102.194044][ T5693] SELinux: failed to load policy [ 102.222617][ T5695] loop4: detected capacity change from 0 to 512 [ 102.229469][ T5695] EXT4-fs: Ignoring removed orlov option [ 102.235839][ T5695] EXT4-fs: Ignoring removed oldalloc option [ 102.244486][ T5695] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 220 vs 1023 free clusters [ 102.259899][ T5695] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.694: Parent and EA inode have the same ino 15 [ 102.273304][ T5695] EXT4-fs (loop4): 1 orphan inode deleted [ 102.279633][ T5695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.331987][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.603312][ T5704] macvlan1: entered promiscuous mode [ 102.610201][ T5704] ipvlan0: entered promiscuous mode [ 102.618298][ T5704] ipvlan0: left promiscuous mode [ 102.623696][ T5704] macvlan1: left promiscuous mode [ 102.891224][ T5713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.700'. [ 102.912018][ T5713] team0: Mode changed to "loadbalance" [ 103.140940][ T5728] loop3: detected capacity change from 0 to 8192 [ 103.206483][ T5728] loop3: p1 p3 p4 [ 103.217446][ T5728] loop3: p1 size 8390912 extends beyond EOD, truncated [ 103.258337][ T5728] loop3: p3 size 589824 extends beyond EOD, truncated [ 103.294759][ T5729] netlink: 60 bytes leftover after parsing attributes in process `syz.1.704'. [ 103.376471][ T5729] team0: Mode changed to "loadbalance" [ 103.455251][ T5736] loop4: detected capacity change from 0 to 8192 [ 103.514151][ T5742] program syz.3.711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.536631][ T5736] loop4: p1 p3 p4 [ 103.541196][ T5736] loop4: p1 size 8390912 extends beyond EOD, truncated [ 103.574016][ T5736] loop4: p3 size 589824 extends beyond EOD, truncated [ 103.667087][ T5746] loop2: detected capacity change from 0 to 128 [ 103.702591][ T5746] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.719895][ T5746] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 103.775044][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.828658][ T5755] loop3: detected capacity change from 0 to 8192 [ 103.889789][ T5151] loop3: p1 p3 p4 [ 103.897572][ T5151] loop3: p1 size 8390912 extends beyond EOD, truncated [ 103.897747][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 103.910293][ T5151] loop3: p3 size 589824 extends beyond EOD, truncated [ 103.940136][ T5755] loop3: p1 p3 p4 [ 103.957332][ T5755] loop3: p1 size 8390912 extends beyond EOD, truncated [ 103.971966][ T5762] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 103.983595][ T5755] loop3: p3 size 589824 extends beyond EOD, truncated [ 104.005855][ T5760] hsr_slave_1 (unregistering): left promiscuous mode [ 104.074467][ T5762] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.114712][ T5764] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 104.210661][ T5767] loop4: detected capacity change from 0 to 8192 [ 104.257195][ T5767] loop4: p1 p3 p4 [ 104.266042][ T5767] loop4: p1 size 8390912 extends beyond EOD, truncated [ 104.284139][ T5767] loop4: p3 size 589824 extends beyond EOD, truncated [ 104.417561][ T5771] loop4: detected capacity change from 0 to 8192 [ 104.498305][ T5773] loop3: detected capacity change from 0 to 512 [ 104.505451][ T5773] ext4: Unknown parameter 'fsuuid' [ 104.597749][ T3597] loop4: p1 p3 p4 [ 104.603662][ T3597] loop4: p1 size 8390912 extends beyond EOD, truncated [ 104.616168][ T3597] loop4: p3 size 589824 extends beyond EOD, truncated [ 104.731297][ T5771] loop4: p1 p3 p4 [ 104.818793][ T5771] loop4: p1 size 8390912 extends beyond EOD, truncated [ 104.858010][ T5777] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 104.958873][ T5771] loop4: p3 size 589824 extends beyond EOD, truncated [ 104.993446][ T5777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.027309][ T5785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.723'. [ 105.155146][ T5783] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 105.303101][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.725'. [ 105.338584][ T5785] team0: Unable to change to the same mode the team is in [ 105.353916][ T5787] loop1: detected capacity change from 0 to 8192 [ 105.374250][ T5151] udevd[5151]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 105.388017][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 105.400483][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 105.457578][ T5151] udevd[5151]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 105.470587][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 105.488416][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 105.505982][ T3306] loop1: p1 p3 p4 [ 105.522783][ T5797] loop4: detected capacity change from 0 to 128 [ 105.530007][ T3306] loop1: p1 size 8390912 extends beyond EOD, truncated [ 105.556760][ T5797] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.578968][ T3306] loop1: p3 size 589824 extends beyond EOD, truncated [ 105.614098][ T5797] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.637911][ T5787] loop1: p1 p3 p4 [ 105.656003][ T5787] loop1: p1 size 8390912 extends beyond EOD, truncated [ 105.683612][ T5787] loop1: p3 size 589824 extends beyond EOD, truncated [ 105.697439][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.989471][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 106.002580][ T3483] udevd[3483]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 106.014296][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 106.033921][ T5803] loop4: detected capacity change from 0 to 8192 [ 106.042625][ T5811] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 106.086958][ T5811] SELinux: failed to load policy [ 106.093988][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 106.115305][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 106.115324][ T29] audit: type=1326 audit(1747503092.714:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.2.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 106.378903][ T5827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 106.404868][ T5151] loop4: p1 p3 p4 [ 106.411502][ T5151] loop4: p1 size 8390912 extends beyond EOD, truncated [ 106.427734][ T5151] loop4: p3 size 589824 extends beyond EOD, truncated [ 106.527881][ T5833] loop1: detected capacity change from 0 to 128 [ 106.556480][ T5833] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.608768][ T5833] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.629557][ T5803] loop4: p1 p3 p4 [ 106.643777][ T5803] loop4: p1 size 8390912 extends beyond EOD, truncated [ 106.688190][ T5803] loop4: p3 size 589824 extends beyond EOD, truncated [ 106.721529][ T5840] loop2: detected capacity change from 0 to 8192 [ 106.759672][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.771909][ T29] audit: type=1400 audit(1747503093.374:1614): avc: denied { create } for pid=5842 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.812717][ T3597] loop2: p1 p3 p4 [ 106.823234][ T3597] loop2: p1 size 8390912 extends beyond EOD, truncated [ 106.848852][ T3597] loop2: p3 size 589824 extends beyond EOD, truncated [ 106.857180][ T29] audit: type=1400 audit(1747503093.394:1615): avc: denied { setopt } for pid=5842 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.910159][ T5840] loop2: p1 p3 p4 [ 106.914045][ T5840] loop2: p1 size 8390912 extends beyond EOD, truncated [ 106.943353][ T5855] macvlan1: entered promiscuous mode [ 106.985515][ T5855] ipvlan0: entered promiscuous mode [ 106.989795][ T5840] loop2: p3 size 589824 extends beyond EOD, truncated [ 106.992340][ T5855] ipvlan0: left promiscuous mode [ 107.005486][ T5855] macvlan1: left promiscuous mode [ 107.260165][ T5863] loop1: detected capacity change from 0 to 8192 [ 107.296958][ T5151] loop1: p1 p3 p4 [ 107.307532][ T5151] loop1: p1 size 8390912 extends beyond EOD, truncated [ 107.327672][ T5151] loop1: p3 size 589824 extends beyond EOD, truncated [ 107.350245][ T5863] loop1: p1 p3 p4 [ 107.352482][ T29] audit: type=1326 audit(1747503093.954:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 107.365277][ T5863] loop1: p1 size 8390912 extends beyond EOD, truncated [ 107.403748][ T29] audit: type=1326 audit(1747503093.984:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 107.428121][ T29] audit: type=1326 audit(1747503093.984:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 107.455161][ T29] audit: type=1326 audit(1747503093.984:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 107.480750][ T29] audit: type=1326 audit(1747503093.984:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 107.505756][ T29] audit: type=1326 audit(1747503093.984:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 107.531115][ T29] audit: type=1326 audit(1747503093.984:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 107.567055][ T5863] loop1: p3 size 589824 extends beyond EOD, truncated [ 107.584353][ T5882] loop2: detected capacity change from 0 to 128 [ 107.616160][ T5882] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.651569][ T5882] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.713465][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.853220][ T5891] loop0: detected capacity change from 0 to 8192 [ 107.866893][ T5895] macvlan1: entered promiscuous mode [ 107.889710][ T5895] ipvlan0: entered promiscuous mode [ 107.897422][ T5895] ipvlan0: left promiscuous mode [ 107.903760][ T5895] macvlan1: left promiscuous mode [ 107.918741][ T3597] loop0: p1 p3 p4 [ 107.923126][ T3597] loop0: p1 size 8390912 extends beyond EOD, truncated [ 107.950146][ T3597] loop0: p3 size 589824 extends beyond EOD, truncated [ 107.968232][ T5897] bond2: (slave veth0_to_bond): Releasing active interface [ 107.975791][ T5897] bond2: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 107.999364][ T5891] loop0: p1 p3 p4 [ 108.003226][ T5891] loop0: p1 size 8390912 extends beyond EOD, truncated [ 108.049468][ T5891] loop0: p3 size 589824 extends beyond EOD, truncated [ 108.071983][ T5897] bond2: (slave vlan2): Releasing active interface [ 108.079227][ T5897] vlan2: left promiscuous mode [ 108.090144][ T5897] veth1: left promiscuous mode [ 108.242032][ T5916] 9pnet: p9_errstr2errno: server reported unknown error [ 108.347860][ T5927] bond2: entered promiscuous mode [ 108.353781][ T5927] bond2: entered allmulticast mode [ 108.360204][ T5930] program syz.0.769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.389803][ T5927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.389953][ T5933] loop4: detected capacity change from 0 to 512 [ 108.408846][ T5933] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.423304][ T5927] bond2 (unregistering): Released all slaves [ 108.440038][ T5933] EXT4-fs (loop4): 1 truncate cleaned up [ 108.448263][ T5933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.557866][ T5940] macvlan1: entered promiscuous mode [ 108.568256][ T5940] ipvlan0: entered promiscuous mode [ 108.576064][ T5940] ipvlan0: left promiscuous mode [ 108.586186][ T5940] macvlan1: left promiscuous mode [ 108.639002][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.738629][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 108.811566][ T5963] loop4: detected capacity change from 0 to 8192 [ 108.866319][ T3597] loop4: p1 p3 p4 [ 108.870932][ T3597] loop4: p1 size 8390912 extends beyond EOD, truncated [ 108.879392][ T5966] loop2: detected capacity change from 0 to 8192 [ 108.883825][ T3597] loop4: p3 size 589824 extends beyond EOD, truncated [ 108.897831][ T5963] loop4: p1 p3 p4 [ 108.902679][ T5963] loop4: p1 size 8390912 extends beyond EOD, truncated [ 108.911221][ T5151] loop2: p1 p3 p4 [ 108.915510][ T5151] loop2: p1 size 8390912 extends beyond EOD, truncated [ 108.927374][ T5151] loop2: p3 size 589824 extends beyond EOD, truncated [ 108.935985][ T5963] loop4: p3 size 589824 extends beyond EOD, truncated [ 108.952641][ T5966] loop2: p1 p3 p4 [ 108.960383][ T5966] loop2: p1 size 8390912 extends beyond EOD, truncated [ 108.977020][ T5966] loop2: p3 size 589824 extends beyond EOD, truncated [ 109.259042][ T5973] netlink: 60 bytes leftover after parsing attributes in process `syz.3.784'. [ 109.279593][ T5978] program syz.4.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.281268][ T5973] team0: Mode changed to "loadbalance" [ 109.402200][ T5981] macvlan1: entered promiscuous mode [ 109.411386][ T5981] ipvlan0: entered promiscuous mode [ 109.418013][ T5981] ipvlan0: left promiscuous mode [ 109.423590][ T5981] macvlan1: left promiscuous mode [ 109.463962][ T5982] netlink: 60 bytes leftover after parsing attributes in process `syz.2.786'. [ 109.474303][ T5982] team0: Unable to change to the same mode the team is in [ 109.506094][ T5984] FAULT_INJECTION: forcing a failure. [ 109.506094][ T5984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.521477][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: syz.0.788 Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 109.521547][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 109.521563][ T5984] Call Trace: [ 109.521572][ T5984] [ 109.521582][ T5984] __dump_stack+0x1d/0x30 [ 109.521637][ T5984] dump_stack_lvl+0xe8/0x140 [ 109.521661][ T5984] dump_stack+0x15/0x1b [ 109.521681][ T5984] should_fail_ex+0x265/0x280 [ 109.521731][ T5984] should_fail+0xb/0x20 [ 109.521770][ T5984] should_fail_usercopy+0x1a/0x20 [ 109.521837][ T5984] _copy_from_iter+0xcf/0xdd0 [ 109.521860][ T5984] ? __build_skb_around+0x1a0/0x200 [ 109.521925][ T5984] ? __alloc_skb+0x223/0x320 [ 109.521985][ T5984] netlink_sendmsg+0x471/0x6b0 [ 109.522013][ T5984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.522037][ T5984] __sock_sendmsg+0x145/0x180 [ 109.522074][ T5984] ____sys_sendmsg+0x31e/0x4e0 [ 109.522169][ T5984] ___sys_sendmsg+0x17b/0x1d0 [ 109.522210][ T5984] __x64_sys_sendmsg+0xd4/0x160 [ 109.522241][ T5984] x64_sys_call+0x2999/0x2fb0 [ 109.522267][ T5984] do_syscall_64+0xd0/0x1a0 [ 109.522361][ T5984] ? clear_bhb_loop+0x40/0x90 [ 109.522389][ T5984] ? clear_bhb_loop+0x40/0x90 [ 109.522416][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.522441][ T5984] RIP: 0033:0x7fb90461e969 [ 109.522456][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.522490][ T5984] RSP: 002b:00007fb902c87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.522508][ T5984] RAX: ffffffffffffffda RBX: 00007fb904845fa0 RCX: 00007fb90461e969 [ 109.522522][ T5984] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 109.522538][ T5984] RBP: 00007fb902c87090 R08: 0000000000000000 R09: 0000000000000000 [ 109.522554][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.522647][ T5984] R13: 0000000000000000 R14: 00007fb904845fa0 R15: 00007fff42190eb8 [ 109.522671][ T5984] [ 109.814731][ T5996] serio: Serial port ptm0 [ 109.878333][ T6002] bond1: (slave veth0_to_bond): Releasing active interface [ 109.953337][ T6008] loop3: detected capacity change from 0 to 8192 [ 110.010137][ T3597] loop3: p1 p3 p4 [ 110.014088][ T3597] loop3: p1 size 8390912 extends beyond EOD, truncated [ 110.040438][ T3597] loop3: p3 size 589824 extends beyond EOD, truncated [ 110.059854][ T6008] loop3: p1 p3 p4 [ 110.065349][ T6008] loop3: p1 size 8390912 extends beyond EOD, truncated [ 110.075011][ T6008] loop3: p3 size 589824 extends beyond EOD, truncated [ 110.172216][ T6024] netlink: 'syz.2.801': attribute type 1 has an invalid length. [ 110.221724][ T6024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.228821][ T6018] loop0: detected capacity change from 0 to 8192 [ 110.289674][ T6024] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 110.309138][ T6029] program syz.1.802 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.353999][ T6033] loop3: detected capacity change from 0 to 164 [ 110.372300][ T6033] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 110.387940][ T6033] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 110.397391][ T6033] Symlink component flag not implemented [ 110.403260][ T6033] Symlink component flag not implemented [ 110.407327][ T3597] udevd[3597]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 110.411596][ T6033] Symlink component flag not implemented (7) [ 110.428607][ T6033] Symlink component flag not implemented (116) [ 110.517506][ T6033] netlink: 'gtp': attribute type 10 has an invalid length. [ 110.527077][ T6033] bridge0: port 1(netdevsim1) entered blocking state [ 110.533904][ T6033] bridge0: port 1(netdevsim1) entered disabled state [ 110.541412][ T6033] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 110.550728][ T6033] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 110.662330][ T6043] netlink: 192 bytes leftover after parsing attributes in process `syz.1.808'. [ 110.812152][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.946875][ T6054] loop4: detected capacity change from 0 to 8192 [ 111.006723][ T6054] loop4: p1 p3 p4 [ 111.010954][ T6054] loop4: p1 size 8390912 extends beyond EOD, truncated [ 111.036476][ T6054] loop4: p3 size 589824 extends beyond EOD, truncated [ 111.067543][ T6062] loop3: detected capacity change from 0 to 512 [ 111.078620][ T3006] udevd[3006]: worker [3597] terminated by signal 33 (Unknown signal 33) [ 111.120802][ T6062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.141047][ T6062] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.143270][ T3306] printk: udevd: 60 output lines suppressed due to ratelimiting [ 111.153002][ T6062] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.233511][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 111.233530][ T29] audit: type=1400 audit(1747503097.834:1659): avc: denied { bind } for pid=6059 comm="syz.3.816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 111.313337][ T6073] program syz.3.819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.395435][ T29] audit: type=1326 audit(1747503097.994:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fde3e969 code=0x7ffc0000 [ 111.426569][ T29] audit: type=1326 audit(1747503097.994:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fde3e969 code=0x7ffc0000 [ 111.454680][ T29] audit: type=1326 audit(1747503098.004:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88fde3e969 code=0x7ffc0000 [ 111.481355][ T29] audit: type=1326 audit(1747503098.004:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fde3e969 code=0x7ffc0000 [ 111.508460][ T29] audit: type=1326 audit(1747503098.004:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88fde3e969 code=0x7ffc0000 [ 111.535576][ T29] audit: type=1326 audit(1747503098.004:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fde3e969 code=0x7ffc0000 [ 111.561240][ T29] audit: type=1326 audit(1747503098.004:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88fde3e969 code=0x7ffc0000 [ 111.587190][ T6084] loop1: detected capacity change from 0 to 512 [ 111.591365][ T29] audit: type=1326 audit(1747503098.004:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88fde3e969 code=0x7ffc0000 [ 111.621713][ T6084] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.627938][ T29] audit: type=1326 audit(1747503098.004:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.4.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88fde3e969 code=0x7ffc0000 [ 111.678720][ T6084] EXT4-fs (loop1): 1 truncate cleaned up [ 111.685443][ T6084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.742782][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.785384][ T6090] @: renamed from vlan0 (while UP) [ 111.937890][ T6093] SELinux: ebitmap: truncated map [ 111.944783][ T6093] SELinux: failed to load policy [ 112.023897][ T6104] loop0: detected capacity change from 0 to 512 [ 112.032138][ T6104] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.059615][ T6104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.081253][ T6104] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.161972][ T6104] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.830: bg 0: block 304: padding at end of block bitmap is not set [ 112.180053][ T6104] EXT4-fs (loop0): Remounting filesystem read-only [ 112.203581][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.315541][ T6110] serio: Serial port ptm0 [ 112.566104][ T6115] netlink: 192 bytes leftover after parsing attributes in process `syz.0.833'. [ 112.893395][ T6126] program syz.3.837 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.153047][ T6128] macvlan1: entered promiscuous mode [ 113.160148][ T6128] ipvlan0: entered promiscuous mode [ 113.166571][ T6128] ipvlan0: left promiscuous mode [ 113.176057][ T6128] macvlan1: left promiscuous mode [ 113.197962][ T6132] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 113.212643][ T6132] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.230974][ T6132] bond2: (slave veth0_to_bond): Releasing active interface [ 113.250770][ T6132] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 113.274299][ T6135] bond2: entered promiscuous mode [ 113.279736][ T6135] bond2: entered allmulticast mode [ 113.285841][ T6135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.296929][ T6135] bond2 (unregistering): Released all slaves [ 113.312382][ T6132] vlan2: entered allmulticast mode [ 113.317787][ T6132] veth1: entered allmulticast mode [ 113.324751][ T6132] veth1: entered promiscuous mode [ 113.331966][ T6132] veth1: left promiscuous mode [ 113.338914][ T6132] bond3: (slave vlan2): making interface the new active one [ 113.349232][ T6132] veth1: entered promiscuous mode [ 113.355480][ T6132] vlan2: entered promiscuous mode [ 113.361054][ T6132] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 113.465855][ T6154] loop1: detected capacity change from 0 to 8192 [ 113.516257][ T6154] loop1: p1 p3 p4 [ 113.520298][ T6154] loop1: p1 size 8390912 extends beyond EOD, truncated [ 113.528293][ T6154] loop1: p3 size 589824 extends beyond EOD, truncated [ 113.540630][ T6158] program syz.4.849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.809281][ T6165] netlink: 'syz.1.851': attribute type 1 has an invalid length. [ 113.824702][ T6165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.828189][ T6168] program syz.4.852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.838806][ T6165] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 114.245089][ T6182] netlink: 192 bytes leftover after parsing attributes in process `syz.3.857'. [ 114.279959][ T6184] macvlan1: entered promiscuous mode [ 114.287077][ T6184] ipvlan0: entered promiscuous mode [ 114.292802][ T6184] ipvlan0: left promiscuous mode [ 114.298510][ T6184] macvlan1: left promiscuous mode [ 114.378754][ T6187] serio: Serial port ptm0 [ 114.611951][ T6190] loop0: detected capacity change from 0 to 8192 [ 114.823772][ T6196] loop2: detected capacity change from 0 to 128 [ 114.845214][ T6196] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.858437][ T6196] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.890510][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.028259][ T6199] loop4: detected capacity change from 0 to 512 [ 115.044639][ T6199] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.064336][ T6199] EXT4-fs (loop4): 1 truncate cleaned up [ 115.079304][ T6199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.160457][ T6206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.863'. [ 115.201546][ T6205] loop3: detected capacity change from 0 to 8192 [ 115.256776][ T6205] loop3: p1 p3 p4 [ 115.266341][ T6205] loop3: p1 size 8390912 extends beyond EOD, truncated [ 115.276967][ T6205] loop3: p3 size 589824 extends beyond EOD, truncated [ 115.398536][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.437297][ T6212] loop4: detected capacity change from 0 to 512 [ 115.445308][ T6212] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.459312][ T6212] EXT4-fs (loop4): 1 truncate cleaned up [ 115.466344][ T6212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.532965][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.582398][ T6221] serio: Serial port ptm0 [ 115.823699][ T6233] 9pnet_fd: Insufficient options for proto=fd [ 115.853592][ T6235] loop4: detected capacity change from 0 to 512 [ 115.862554][ T6235] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 115.887981][ T6235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.901346][ T6235] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.917112][ T6235] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.877: bg 0: block 304: padding at end of block bitmap is not set [ 115.934391][ T6235] EXT4-fs (loop4): Remounting filesystem read-only [ 115.956594][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.041141][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'. [ 116.053530][ T6242] hub 4-0:1.0: USB hub found [ 116.062770][ T6242] hub 4-0:1.0: 8 ports detected [ 116.072818][ T6245] hsr_slave_1 (unregistering): left promiscuous mode [ 116.164013][ T6251] serio: Serial port ptm0 [ 116.219866][ T6249] loop2: detected capacity change from 0 to 512 [ 116.230318][ T6249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.244061][ T6249] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.257411][ T6249] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.365173][ T6263] SELinux: ebitmap: truncated map [ 116.371542][ T6263] SELinux: failed to load policy [ 116.413059][ T6270] loop3: detected capacity change from 0 to 164 [ 116.421550][ T6270] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.434152][ T6270] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 116.450516][ T6270] Symlink component flag not implemented [ 116.456849][ T6270] Symlink component flag not implemented [ 116.463965][ T6270] Symlink component flag not implemented (7) [ 116.470138][ T6270] Symlink component flag not implemented (116) [ 116.539567][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 116.559254][ T6282] loop0: detected capacity change from 0 to 512 [ 116.576834][ T6286] program syz.4.895 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.588038][ T6282] EXT4-fs (loop0): orphan cleanup on readonly fs [ 116.595333][ T6282] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.894: bad orphan inode 13 [ 116.604479][ T6283] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 116.614832][ T6283] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 116.614868][ T6282] ext4_test_bit(bit=12, block=18) = 1 [ 116.622626][ T6283] bridge0: port 1(netdevsim1) entered disabled state [ 116.628232][ T6282] is_bad_inode(inode)=0 [ 116.639409][ T6282] NEXT_ORPHAN(inode)=2130706432 [ 116.642395][ T6287] netlink: 60 bytes leftover after parsing attributes in process `syz.3.891'. [ 116.644487][ T6282] max_ino=32 [ 116.644521][ T6282] i_nlink=1 [ 116.645254][ T6282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.693821][ T6282] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 116.706582][ T6282] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.894: bg 0: block 248: padding at end of block bitmap is not set [ 116.721598][ T6282] __quota_error: 73 callbacks suppressed [ 116.721629][ T6282] Quota error (device loop0): write_blk: dquota write failed [ 116.735210][ T6282] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 116.745721][ T6282] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.894: Failed to acquire dquot type 1 [ 116.757934][ T6282] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.785605][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.877436][ T6290] loop1: detected capacity change from 0 to 8192 [ 116.893422][ T29] audit: type=1326 audit(1747503103.494:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 116.920359][ T6298] SELinux: ebitmap: truncated map [ 116.921771][ T6300] macvlan1: entered promiscuous mode [ 116.928676][ T6298] SELinux: failed to load policy [ 116.933083][ T6300] ipvlan0: entered promiscuous mode [ 116.942499][ T6290] loop1: p1 p3 p4 [ 116.946407][ T6290] loop1: p1 size 8390912 extends beyond EOD, truncated [ 116.954562][ T6300] ipvlan0: left promiscuous mode [ 116.959927][ T29] audit: type=1326 audit(1747503103.524:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 116.960009][ T6290] loop1: p3 size 589824 extends beyond EOD, truncated [ 116.992300][ T29] audit: type=1326 audit(1747503103.524:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 117.017505][ T29] audit: type=1326 audit(1747503103.524:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 117.042013][ T29] audit: type=1326 audit(1747503103.524:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 117.066766][ T29] audit: type=1326 audit(1747503103.524:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 117.092230][ T29] audit: type=1326 audit(1747503103.524:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 117.117214][ T29] audit: type=1326 audit(1747503103.524:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6299 comm="syz.0.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb90461e969 code=0x7ffc0000 [ 117.141511][ T6300] macvlan1: left promiscuous mode [ 117.342346][ T6311] bond1: (slave veth0_to_bond): Releasing active interface [ 117.343718][ T6315] 9pnet_fd: Insufficient options for proto=fd [ 117.399826][ T6317] loop1: detected capacity change from 0 to 512 [ 117.417864][ T6325] program syz.3.909 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.418146][ T6321] serio: Serial port ptm0 [ 117.439757][ T6313] bond4: entered promiscuous mode [ 117.444978][ T6313] bond4: entered allmulticast mode [ 117.451114][ T6313] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.452103][ T6317] EXT4-fs (loop1): orphan cleanup on readonly fs [ 117.466074][ T6317] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.908: bad orphan inode 13 [ 117.477904][ T6317] ext4_test_bit(bit=12, block=18) = 1 [ 117.479025][ T6313] bond4 (unregistering): Released all slaves [ 117.483496][ T6317] is_bad_inode(inode)=0 [ 117.483511][ T6317] NEXT_ORPHAN(inode)=2130706432 [ 117.483520][ T6317] max_ino=32 [ 117.483528][ T6317] i_nlink=1 [ 117.484233][ T6317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.529652][ T6317] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 117.547437][ T6317] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 117.589398][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.652751][ T6342] macvlan1: entered promiscuous mode [ 117.660250][ T6340] SELinux: ebitmap: truncated map [ 117.662731][ T6342] ipvlan0: entered promiscuous mode [ 117.672907][ T6342] ipvlan0: left promiscuous mode [ 117.677495][ T6340] SELinux: failed to load policy [ 117.683878][ T6342] macvlan1: left promiscuous mode [ 117.721653][ T6348] loop1: detected capacity change from 0 to 512 [ 117.751668][ T6348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.767077][ T6348] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.779016][ T6348] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.865312][ T6363] loop1: detected capacity change from 0 to 164 [ 117.874742][ T6363] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 117.897613][ T6366] serio: Serial port ptm0 [ 117.922663][ T6368] SELinux: ebitmap: truncated map [ 117.931645][ T6368] SELinux: failed to load policy [ 117.931642][ T6371] loop1: detected capacity change from 0 to 128 [ 117.945369][ T6371] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.960389][ T6371] ext4 filesystem being mounted at /178/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.982149][ T6374] loop2: detected capacity change from 0 to 512 [ 117.990018][ T6374] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.002174][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.017401][ T6374] EXT4-fs (loop2): 1 truncate cleaned up [ 118.023750][ T6374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.085001][ T6377] SELinux: ebitmap: truncated map [ 118.092604][ T6377] SELinux: failed to load policy [ 118.111706][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.130528][ T6379] netlink: 'syz.3.929': attribute type 1 has an invalid length. [ 118.149399][ T6379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.178834][ T6381] loop1: detected capacity change from 0 to 8192 [ 118.179377][ T6379] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 118.236230][ T6381] loop1: p1 p3 p4 [ 118.240536][ T6381] loop1: p1 size 8390912 extends beyond EOD, truncated [ 118.248477][ T6381] loop1: p3 size 589824 extends beyond EOD, truncated [ 118.671489][ T6403] netlink: 192 bytes leftover after parsing attributes in process `syz.0.938'. [ 118.698978][ T6404] loop4: detected capacity change from 0 to 512 [ 118.722356][ T6404] journal_path: Non-blockdev passed as './file0' [ 118.729027][ T6404] EXT4-fs: error: could not find journal device path [ 118.774311][ T6408] loop0: detected capacity change from 0 to 512 [ 118.793189][ T6408] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.846922][ T6413] netlink: 'syz.3.942': attribute type 1 has an invalid length. [ 118.862907][ T6410] loop1: detected capacity change from 0 to 8192 [ 118.863067][ T6413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.873101][ T6408] EXT4-fs (loop0): 1 truncate cleaned up [ 118.894568][ T6408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.908417][ T6410] loop1: p1 p3 p4 [ 118.908914][ T6413] bond2: (slave veth0_to_bond): Releasing active interface [ 118.912305][ T6410] loop1: p1 size 8390912 extends beyond EOD, truncated [ 118.929527][ T6410] loop1: p3 size 589824 extends beyond EOD, truncated [ 118.941196][ T6413] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 118.957284][ T6421] vlan2: entered allmulticast mode [ 118.962494][ T6421] veth1: entered allmulticast mode [ 118.975274][ T6421] veth1: entered promiscuous mode [ 118.981758][ T6421] veth1: left promiscuous mode [ 118.988457][ T6421] bond3: (slave vlan2): making interface the new active one [ 118.996909][ T6421] veth1: entered promiscuous mode [ 119.003581][ T6421] vlan2: entered promiscuous mode [ 119.009151][ T6421] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 119.054237][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.165206][ T6436] program syz.2.950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.187051][ T6438] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 119.220596][ T6438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.238835][ T6443] bond3: entered promiscuous mode [ 119.246223][ T6443] bond3: entered allmulticast mode [ 119.252360][ T6443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.263756][ T6443] bond3 (unregistering): Released all slaves [ 119.279966][ T6438] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 119.378447][ T6451] loop1: detected capacity change from 0 to 8192 [ 119.426222][ T6451] loop1: p1 p3 p4 [ 119.430868][ T6451] loop1: p1 size 8390912 extends beyond EOD, truncated [ 119.441022][ T6451] loop1: p3 size 589824 extends beyond EOD, truncated [ 119.689886][ T6481] loop2: detected capacity change from 0 to 8192 [ 119.703249][ T6474] loop1: detected capacity change from 0 to 8192 [ 119.730083][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'. [ 119.746039][ T6481] loop2: p1 p3 p4 [ 119.750460][ T6481] loop2: p1 size 8390912 extends beyond EOD, truncated [ 119.767987][ T6481] loop2: p3 size 589824 extends beyond EOD, truncated [ 119.814203][ T6488] bond3: (slave veth0_to_bond): Releasing active interface [ 119.823206][ T6488] bond3: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 119.931857][ T6488] bond3: (slave vlan2): Releasing active interface [ 119.941232][ T6488] vlan2: left promiscuous mode [ 119.948958][ T6488] veth1: left promiscuous mode [ 120.059514][ T6508] netlink: 'syz.0.976': attribute type 1 has an invalid length. [ 120.154372][ T6508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 120.186315][ T6508] bond2: (slave veth0_to_bond): Releasing active interface [ 120.199294][ T6508] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 120.225104][ T6525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 120.236773][ T6524] loop4: detected capacity change from 0 to 512 [ 120.259479][ T6524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.279810][ T6517] vlan0: entered allmulticast mode [ 120.285437][ T6517] veth1: entered allmulticast mode [ 120.296132][ T6517] veth1: entered promiscuous mode [ 120.301955][ T6524] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.316340][ T6517] veth1: left promiscuous mode [ 120.323699][ T6524] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.332668][ T6530] netlink: 'syz.2.983': attribute type 1 has an invalid length. [ 120.335128][ T6517] bond3: (slave vlan0): making interface the new active one [ 120.350489][ T6517] veth1: entered promiscuous mode [ 120.357667][ T6517] vlan0: entered promiscuous mode [ 120.374017][ T6517] bond3: (slave vlan0): Enslaving as an active interface with an up link [ 120.412234][ T6530] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.455869][ T6534] bond3: (slave veth0_to_bond): Releasing active interface [ 120.463354][ T6534] bond3: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 120.491213][ T6534] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 120.711569][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 120.801071][ T6554] loop1: detected capacity change from 0 to 164 [ 120.808831][ T6554] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 120.818970][ T6554] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 120.827850][ T6554] Symlink component flag not implemented [ 120.834055][ T6554] Symlink component flag not implemented [ 120.840143][ T6554] Symlink component flag not implemented (7) [ 120.846515][ T6554] Symlink component flag not implemented (116) [ 120.921633][ T6559] loop1: detected capacity change from 0 to 8192 [ 120.966132][ T6559] loop1: p1 p3 p4 [ 120.970141][ T6559] loop1: p1 size 8390912 extends beyond EOD, truncated [ 120.979645][ T6559] loop1: p3 size 589824 extends beyond EOD, truncated [ 121.055307][ T6569] program syz.3.998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.412393][ T6578] SELinux: ebitmap: truncated map [ 121.413946][ T6580] bond4: entered promiscuous mode [ 121.420935][ T6578] SELinux: failed to load policy [ 121.423380][ T6580] bond4: entered allmulticast mode [ 121.434861][ T6580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.464842][ T6580] bond4 (unregistering): Released all slaves [ 121.500205][ T6590] loop4: detected capacity change from 0 to 164 [ 121.506415][ T6592] program syz.1.1008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.516481][ T6590] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 121.549194][ T6594] loop4: detected capacity change from 0 to 512 [ 121.557592][ T6594] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.570017][ T6594] EXT4-fs (loop4): 1 truncate cleaned up [ 121.577174][ T6597] program syz.3.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.578066][ T6594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.657192][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.751801][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 121.751871][ T29] audit: type=1326 audit(1747503108.354:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 121.782313][ T29] audit: type=1326 audit(1747503108.354:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 121.806432][ T29] audit: type=1326 audit(1747503108.354:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 121.831192][ T29] audit: type=1326 audit(1747503108.354:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 121.856302][ T29] audit: type=1326 audit(1747503108.354:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 121.881427][ T29] audit: type=1326 audit(1747503108.354:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 121.908658][ T29] audit: type=1326 audit(1747503108.354:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 121.934567][ T29] audit: type=1326 audit(1747503108.354:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 121.959967][ T29] audit: type=1326 audit(1747503108.354:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 121.985847][ T29] audit: type=1326 audit(1747503108.364:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6603 comm="syz.1.1013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d0272e969 code=0x7ffc0000 [ 122.035015][ T6619] loop3: detected capacity change from 0 to 164 [ 122.048827][ T6619] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.060086][ T6619] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.069922][ T6620] loop1: detected capacity change from 0 to 512 [ 122.077199][ T6619] Symlink component flag not implemented [ 122.083694][ T6619] Symlink component flag not implemented [ 122.090268][ T6619] Symlink component flag not implemented (7) [ 122.097394][ T6619] Symlink component flag not implemented (116) [ 122.098860][ T6620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.117214][ T6620] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.129099][ T6620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.222475][ T6626] loop1: detected capacity change from 0 to 8192 [ 122.258224][ T6626] loop1: p1 p3 p4 [ 122.262722][ T6626] loop1: p1 size 8390912 extends beyond EOD, truncated [ 122.270788][ T6626] loop1: p3 size 589824 extends beyond EOD, truncated [ 122.283679][ T6635] loop3: detected capacity change from 0 to 164 [ 122.291338][ T6635] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 122.488974][ T6647] loop1: detected capacity change from 0 to 128 [ 122.498376][ T6647] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.513149][ T6647] ext4 filesystem being mounted at /214/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.537777][ T6650] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1031'. [ 122.550251][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.098308][ T6667] loop0: detected capacity change from 0 to 8192 [ 123.136350][ T6667] loop0: p1 p3 p4 [ 123.140485][ T6667] loop0: p1 size 8390912 extends beyond EOD, truncated [ 123.148918][ T6667] loop0: p3 size 589824 extends beyond EOD, truncated [ 123.567510][ T6687] loop4: detected capacity change from 0 to 512 [ 123.612186][ T6687] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.629289][ T6687] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.653707][ T6687] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.665296][ T6693] 9pnet_fd: Insufficient options for proto=fd [ 123.756459][ T6697] loop0: detected capacity change from 0 to 8192 [ 123.775507][ T6701] loop4: detected capacity change from 0 to 164 [ 123.784344][ T6701] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.794665][ T6701] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.804810][ T6697] loop0: p1 p3 p4 [ 123.805687][ T6701] Symlink component flag not implemented [ 123.815748][ T6697] loop0: p1 size 8390912 extends beyond EOD, truncated [ 123.816503][ T6701] Symlink component flag not implemented [ 123.833466][ T6701] Symlink component flag not implemented (7) [ 123.836555][ T6697] loop0: p3 size 589824 extends beyond EOD, truncated [ 123.839723][ T6701] Symlink component flag not implemented (116) [ 123.858754][ T6699] loop1: detected capacity change from 0 to 8192 [ 123.895573][ T6703] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1052'. [ 124.071698][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'. [ 124.431846][ T6721] loop0: detected capacity change from 0 to 164 [ 124.443913][ T6721] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.453827][ T6721] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.462939][ T6721] Symlink component flag not implemented [ 124.469467][ T6721] Symlink component flag not implemented [ 124.475637][ T6721] Symlink component flag not implemented (7) [ 124.481688][ T6721] Symlink component flag not implemented (116) [ 124.553814][ T6726] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 124.578370][ T6726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.611719][ T6726] bond3: (slave veth0_to_bond): Releasing active interface [ 124.619866][ T6726] bond3: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 124.644645][ T6726] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 124.783597][ T6737] SELinux: ebitmap: truncated map [ 124.790807][ T6737] SELinux: failed to load policy [ 124.833161][ T6741] loop4: detected capacity change from 0 to 164 [ 124.841149][ T6741] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.884685][ T6745] program syz.4.1065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.109633][ T6750] loop4: detected capacity change from 0 to 164 [ 125.118172][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1066'. [ 125.128108][ T6750] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.158429][ T6754] loop2: detected capacity change from 0 to 164 [ 125.166874][ T6754] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.179556][ T6754] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.192108][ T6754] Symlink component flag not implemented [ 125.198080][ T6754] Symlink component flag not implemented [ 125.207879][ T6754] Symlink component flag not implemented (7) [ 125.214564][ T6754] Symlink component flag not implemented (116) [ 125.224697][ T6760] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1071'. [ 125.242971][ T6761] SELinux: ebitmap: truncated map [ 125.251031][ T6761] SELinux: failed to load policy [ 125.267484][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 125.276704][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 125.324707][ T6769] loop2: detected capacity change from 0 to 8192 [ 125.367893][ T6769] loop2: p1 p3 p4 [ 125.372316][ T6769] loop2: p1 size 8390912 extends beyond EOD, truncated [ 125.384497][ T6769] loop2: p3 size 589824 extends beyond EOD, truncated [ 125.400314][ T6773] loop3: detected capacity change from 0 to 164 [ 125.482908][ T6773] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.492439][ T6773] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.501997][ T6773] Symlink component flag not implemented [ 125.508157][ T6773] Symlink component flag not implemented [ 125.514212][ T6773] Symlink component flag not implemented (7) [ 125.520394][ T6773] Symlink component flag not implemented (116) [ 125.547702][ T6779] loop3: detected capacity change from 0 to 164 [ 125.569849][ T6779] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.584233][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 125.596719][ T6779] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.607192][ T6779] Symlink component flag not implemented [ 125.614018][ T6779] Symlink component flag not implemented [ 125.621717][ T6779] Symlink component flag not implemented (7) [ 125.628521][ T6779] Symlink component flag not implemented (116) [ 125.646708][ T6781] hsr_slave_1 (unregistering): left promiscuous mode [ 125.657977][ T6783] loop2: detected capacity change from 0 to 164 [ 125.679149][ T6783] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.719863][ T6789] loop2: detected capacity change from 0 to 164 [ 125.730406][ T6789] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.742751][ T6787] SELinux: ebitmap: truncated map [ 125.753493][ T6787] SELinux: failed to load policy [ 125.779527][ T6791] loop1: detected capacity change from 0 to 128 [ 125.792061][ T6791] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.811317][ T6795] program syz.3.1086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.823740][ T6791] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.851573][ T6797] SELinux: ebitmap: truncated map [ 125.861345][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.861417][ T6797] SELinux: failed to load policy [ 125.971366][ T6806] loop1: detected capacity change from 0 to 8192 [ 126.006045][ T6806] loop1: p1 p3 p4 [ 126.010565][ T6806] loop1: p1 size 8390912 extends beyond EOD, truncated [ 126.018447][ T6806] loop1: p3 size 589824 extends beyond EOD, truncated [ 126.083135][ T6814] loop3: detected capacity change from 0 to 164 [ 126.097250][ T6814] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.110206][ T6814] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.133735][ T6814] Symlink component flag not implemented [ 126.140703][ T6814] Symlink component flag not implemented [ 126.165791][ T6814] Symlink component flag not implemented (7) [ 126.172432][ T6814] Symlink component flag not implemented (116) [ 126.294049][ T6822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'. [ 126.317653][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1097'. [ 126.506635][ T6833] SELinux: ebitmap: truncated map [ 126.513885][ T6833] SELinux: failed to load policy [ 126.604282][ T6844] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1103'. [ 126.707674][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1102'. [ 126.810735][ T6855] program syz.1.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.853008][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 126.853028][ T29] audit: type=1326 audit(1747503113.454:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.2.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 126.911407][ T29] audit: type=1326 audit(1747503113.494:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.2.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 126.938488][ T29] audit: type=1326 audit(1747503113.494:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.2.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 126.968689][ T29] audit: type=1326 audit(1747503113.494:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.2.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 126.972730][ T6861] serio: Serial port ptm0 [ 126.999124][ T29] audit: type=1326 audit(1747503113.494:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.2.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 127.030425][ T29] audit: type=1326 audit(1747503113.494:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.2.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 127.065781][ T29] audit: type=1326 audit(1747503113.494:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.2.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 127.091636][ T29] audit: type=1326 audit(1747503113.494:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.2.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 127.121143][ T29] audit: type=1326 audit(1747503113.494:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.2.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 127.148644][ T29] audit: type=1326 audit(1747503113.494:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6858 comm="syz.2.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc54f7ee969 code=0x7ffc0000 [ 127.197176][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1110'. [ 128.096229][ T6896] loop2: detected capacity change from 0 to 164 [ 128.109535][ T6896] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 128.310995][ T6913] 9pnet_fd: Insufficient options for proto=fd [ 128.342480][ T6915] program syz.1.1128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.545208][ T6923] bond2: (slave veth0_to_bond): Releasing active interface [ 128.706355][ T6946] loop3: detected capacity change from 0 to 512 [ 128.742043][ T6946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.764182][ T6946] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.795448][ T6946] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.811306][ T6959] program syz.4.1142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.879255][ T6968] program syz.0.1145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.937234][ T6972] 9pnet: Could not find request transport: fd0x0000000000000003 [ 129.005348][ T6978] 9pnet_fd: Insufficient options for proto=fd [ 129.015971][ T24] ================================================================== [ 129.024286][ T24] BUG: KCSAN: data-race in blk_mq_dispatch_rq_list / blk_mq_dispatch_rq_list [ 129.033966][ T24] [ 129.036399][ T24] read-write to 0xffff8881008050f8 of 4 bytes by task 80 on cpu 0: [ 129.044406][ T24] blk_mq_dispatch_rq_list+0xcbe/0xfe0 [ 129.049997][ T24] __blk_mq_sched_dispatch_requests+0x1ba/0xd10 [ 129.056903][ T24] blk_mq_sched_dispatch_requests+0x86/0x120 [ 129.063089][ T24] blk_mq_run_work_fn+0x66/0xe0 [ 129.068058][ T24] process_scheduled_works+0x4ce/0x9d0 [ 129.073928][ T24] worker_thread+0x582/0x770 [ 129.078734][ T24] kthread+0x489/0x510 [ 129.082839][ T24] ret_from_fork+0x4b/0x60 [ 129.087352][ T24] ret_from_fork_asm+0x1a/0x30 [ 129.092128][ T24] [ 129.094555][ T24] read-write to 0xffff8881008050f8 of 4 bytes by task 24 on cpu 1: [ 129.103516][ T24] blk_mq_dispatch_rq_list+0xcbe/0xfe0 [ 129.109088][ T24] __blk_mq_sched_dispatch_requests+0x1ba/0xd10 [ 129.115661][ T24] blk_mq_sched_dispatch_requests+0x86/0x120 [ 129.122043][ T24] blk_mq_run_hw_queue+0x17e/0x220 [ 129.127618][ T24] blk_mq_run_hw_queues+0x180/0x250 [ 129.133136][ T24] blk_mq_requeue_work+0x3b9/0x3f0 [ 129.138812][ T24] process_scheduled_works+0x4ce/0x9d0 [ 129.144313][ T24] worker_thread+0x582/0x770 [ 129.149137][ T24] kthread+0x489/0x510 [ 129.153284][ T24] ret_from_fork+0x4b/0x60 [ 129.157809][ T24] ret_from_fork_asm+0x1a/0x30 [ 129.162587][ T24] [ 129.165016][ T24] value changed: 0x00000006 -> 0x00000007 [ 129.170768][ T24] [ 129.173104][ T24] Reported by Kernel Concurrency Sanitizer on: [ 129.179277][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0H Not tainted 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 129.191918][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 SYZFAIL: failed to send rpc fd=3 want=1400 sent=0 n=-1 (errno 32: Broken pipe) [ 129.202508][ T24] Workqueue: kblockd blk_mq_requeue_work [ 129.208345][ T24] ================================================================== [ 129.276969][ T6980] IPVS: set_ctl: invalid protocol: 0 172.30.5.5:20001 [ 129.361229][ T3395] IPVS: starting estimator thread 0... [ 129.465899][ T6981] IPVS: using max 1920 ests per chain, 96000 per kthread [ 129.666472][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.758107][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.856607][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.928716][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.077529][ T12] bond0 (unregistering): Released all slaves [ 130.087220][ T12] bond1 (unregistering): Released all slaves [ 130.096784][ T12] bond2 (unregistering): Released all slaves [ 130.105893][ T12] bond3 (unregistering): Released all slaves [ 130.116199][ T12] bond4 (unregistering): Released all slaves [ 130.126213][ T12] bond5 (unregistering): Released all slaves [ 130.136184][ T12] bond6 (unregistering): Released all slaves [ 130.190297][ T12] hsr_slave_0: left promiscuous mode [ 130.198498][ T12] veth1_macvtap: left promiscuous mode [ 130.204711][ T12] veth0_macvtap: left promiscuous mode [ 130.210836][ T12] veth1_vlan: left promiscuous mode [ 130.216511][ T12] veth0_vlan: left promiscuous mode [ 130.653801][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.700393][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.739495][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.798579][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.882696][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.958634][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.998616][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.048584][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.123289][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.179403][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.238396][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.298424][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.361720][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.428636][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.468801][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.518527][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.967352][ T12] bond0 (unregistering): Released all slaves [ 131.976438][ T12] bond1 (unregistering): Released all slaves [ 131.985872][ T12] bond2 (unregistering): Released all slaves [ 131.995020][ T12] bond3 (unregistering): Released all slaves [ 132.004255][ T12] bond0 (unregistering): Released all slaves [ 132.012894][ T12] bond1 (unregistering): Released all slaves [ 132.021798][ T12] bond2 (unregistering): Released all slaves [ 132.031158][ T12] bond3 (unregistering): (slave vlan0): Releasing active interface [ 132.039244][ T12] vlan0: left promiscuous mode [ 132.044673][ T12] veth1: left promiscuous mode [ 132.050313][ T12] bond3 (unregistering): Released all slaves [ 132.059239][ T12] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 132.069138][ T12] bond4 (unregistering): Released all slaves [ 132.078115][ T12] bond0 (unregistering): Released all slaves [ 132.087279][ T12] bond1 (unregistering): Released all slaves [ 132.095718][ T12] bond2 (unregistering): Released all slaves [ 132.104613][ T12] bond3 (unregistering): (slave vlan2): Releasing active interface [ 132.113076][ T12] vlan2: left promiscuous mode [ 132.118933][ T12] veth1: left promiscuous mode [ 132.125285][ T12] bond3 (unregistering): Released all slaves [ 132.134772][ T12] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 132.144476][ T12] bond4 (unregistering): Released all slaves [ 132.153364][ T12] bond0 (unregistering): Released all slaves [ 132.162458][ T12] bond1 (unregistering): Released all slaves [ 132.171388][ T12] bond2 (unregistering): Released all slaves [ 132.180101][ T12] bond3 (unregistering): Released all slaves [ 132.188354][ T12] bond4 (unregistering): Released all slaves [ 132.251049][ T12] tipc: Disabling bearer [ 132.256880][ T12] tipc: Disabling bearer [ 132.262907][ T12] tipc: Left network mode [ 132.276080][ T12] tipc: Disabling bearer [ 132.281890][ T12] tipc: Left network mode [ 132.287832][ T12] tipc: Disabling bearer [ 132.293289][ T12] tipc: Left network mode [ 132.328507][ T12] hsr_slave_0: left promiscuous mode [ 132.336517][ T12] hsr_slave_0: left promiscuous mode [ 132.344473][ T12] hsr_slave_0: left promiscuous mode [ 132.352405][ T12] hsr_slave_0: left promiscuous mode [ 132.368458][ T12] veth1_macvtap: left promiscuous mode [ 132.374163][ T12] veth0_macvtap: left promiscuous mode [ 132.380069][ T12] veth1_vlan: left promiscuous mode [ 132.386106][ T12] veth0_vlan: left promiscuous mode [ 132.392405][ T12] veth1_macvtap: left promiscuous mode [ 132.398371][ T12] veth0_macvtap: left promiscuous mode [ 132.404268][ T12] veth1_vlan: left promiscuous mode [ 132.410133][ T12] veth0_vlan: left promiscuous mode [ 132.416867][ T12] veth1_macvtap: left promiscuous mode [ 132.422649][ T12] veth0_macvtap: left promiscuous mode [ 132.428946][ T12] veth1_vlan: left promiscuous mode [ 132.434516][ T12] veth0_vlan: left promiscuous mode [ 132.440455][ T12] veth1_macvtap: left promiscuous mode [ 132.446121][ T12] veth0_macvtap: left promiscuous mode [ 132.451762][ T12] veth1_vlan: left promiscuous mode [ 132.457200][ T12] veth0_vlan: left promiscuous mode [ 133.618519][ T12] IPVS: stop unused estimator thread 0...