last executing test programs: 50.25545858s ago: executing program 1 (id=205): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)="b808a7c1b7694ecd5410a1ae5cede59f2ebf7721269a4cdc313a7479720f91ace205510bf093eaa50845676ec68c18058a691153f395ad0c8c552a973a60e3c656ba3e3f9a9a362a22b6fbb7e046f164d5aa7965c3747197bda80bad599409b18f71470de96aca6a016a7cb94bf45e89153e3d95226d0b83fbc3ce", 0x7b}, 0x1, 0x0, 0x0, 0x4000088}, 0x401c8c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_clone(0x80012880, &(0x7f0000000240)="c8442e96d30685b8a326b5b522d7063bd95fbaf19d5b23696e2aa43c6b4cd7d151d1fb3b93e9eeb33447b7b6ba2d99a506040b7edfaf64725abb6566554a6cf6041ca38c7b50f8dd318683204230104754ec97a122014a99e625fefae3d4259d4032d255eecb3fd8a68f9d73f732b2a1074a588deaf5934fcc9114a5c6142be1f29c1b7644e7bd1391a4b8a6c4418d26e38e5e77989b20453efa3787f7d36b556a1b5e6d2ceeac77fbb777da3185c2f9dee1fa26dba5875d12eb7f028f2670001e1e15234928c452c060fa96c9716cfd2ef43eee4fff4a0099f5474f4fbf16a7911f3431d95bcd72fa734a5aa4903aa23241fa66ad3b", 0xf6, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000340)="fa8e9dc0eae48c821ee6bec918f29a917aaac1fb4a01b6a898575de8729dc475ff54bd267e786f900748f3bb5a487b7d3d133b57c09de1c810088db6b2d19fd968eae023a1f851e5d4fba4d5a73d6735c79af3c0f53ced45080f11b5f062cac9265e897b059d342db878d6ea7fd904632dea346e89e59cf14e8cb8064cc8189c271b4c06c97331cbe748423c4b05597c9414b141eba8d4886c5c047272171ea0179de975db6abce2ec429fb735081130dccb6a7dbb47a77bf1af9e09df50a5c5cc1aabd3a9da3bbd50194769465b8e78bbc7a51784d919f9ddcb2817337a5d64972439f7bcb5b047ea760d26b007438ddb31028e89") setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0x6}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0xffff}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "7750939af8543bbe741ddea0b3675c3a"}]}}]}, 0x48}}, 0x24040084) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x10000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x6, 0x0, 0x101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x80, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x400]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000000240)=""/88, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) 49.568190124s ago: executing program 1 (id=213): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000100)="1cc3b44c81b4d543710d86b6438c3f951b75e601bad6cfc0efd7b56b787090784a09cbd46ebf405b21bd0afc468a58457917e5cc406f3e5ac4579e549cc64d8470581b5c9041b8622ab161bbe6a59aa8f9729c519b2db7a0dfcb0847610e54033ea7a5c8934bf91346d98a45c9201d2c9ff6f728986a43d153b5987675", 0x7d}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0x2, 0x401, 0x100, 0x4}) 49.562432665s ago: executing program 1 (id=215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1ffffffffffffdf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r3, 0x3) 49.064836953s ago: executing program 1 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x1e, 0xc, &(0x7f0000001cc0)=ANY=[@ANYBLOB="1800000000e54adc027aa8e89295afbb18110000d677426553d6cc34542c608c8344870b944c9e9d06880cf2abb2375a37dd0d11929af20400de2f4a7c104c845b", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x330b9072}, 0x94) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, 0x0, 0x0, 0x12000000, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='nmi_noise\x00', r1, 0x0, 0x7fffffff}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9}, 0x94) io_setup(0x63, &(0x7f0000000000)=0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x400e, &(0x7f0000000600)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0xa1800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r10, 0x2, &(0x7f0000000980)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r11, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x1000, r6, &(0x7f00000003c0)="c120875820eb5c9670260ba5398c8dabf795d0d414513b0d86764bd7d689e53cadfdc2a94872956a6fd87f7abfb502b53454ee552304d6bdc278a77aea9ccc24fd3398fd95de1c4f18e324d16142a5dd40e7f0bca958d500ca744787c9d70f1f9647b469ff7f8ac27b22ef8238da1bcf757e09c2671aeae22332d33e100aa99c97b634e5f18f3f2f317f02f5f5f57bcbaf063c6cf69168305f7bb16f821944362d2e8153469304d9e5840c5c0956f0f8947afb1d52ba356034352c1c82747dd1d2742611d1e3da9c95ec8216", 0xcc, 0x430, 0x0, 0x4, r2}]) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r9, &(0x7f0000002540)=[{{&(0x7f0000001d80)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001dc0)="9fbe", 0x2}, {&(0x7f0000001e00)="857396409b4b320029d9856cecfed0c9994100baa6557d9546bc94557b96cb540c41b36f35a7ed4cc92f661e6f523c1dd717ecefa2", 0x35}, {&(0x7f0000001e40)="62fb62408f7c87cd55ae7832acee75230fe20c49c1b5", 0x16}, {&(0x7f0000001e80)="3c7978cdd78336f11153145f1af50a22c9d6d418d81928dda985325645e434770efc2535b4f21346f9343c1b098edfdb018eb880c78f7d9e6ba89893803a0fd20d2741a13d1e06fc955f9fbc46d8838dd400a00da61697201819c2bd93c7", 0x5e}, {&(0x7f0000001f00)="dd9c06a031728b652a500424d3a8ba922b347791e9b06af9665d0a04c8dcaa52c7791e3afd8c080d49", 0x29}], 0x5, &(0x7f00000025c0)=ANY=[@ANYBLOB="110000000000000000000000010000000300000000000000110000000000000000000000010000000600000000ff0000e400000000000000000000000700000094040000440ed3f74d10cb87d9a37804a0f0440b6d6af891716e8b698c830b957f000001ac1e0001443c8f43e0000001000000060a01010200000007ac14140e00000010ac1414bb00000004ac1e010100000003e000000100000009ac1e010100000007442c6293ac14142c591689840000000000000003ac1414bb00000003ac1e000100000002ffffffff00000008440ce531000000000000009b441c3053e0000002000000070a01010000000000ac1414bb00000fd0441c5e71ffffffff0d588dd6ac1414aa0000000764010101000000090000000014000000000000000000000001000000fdffffff0000000014000000000000000000000007000000000000000000000044000000000000000000000007000000070f367f000001ac1414bb0a0101009402830fb6ac1414bbac1e0001e000000283134200000000ac1e0101ac141409000000aa00000000001c000000000000000000000008000000c1aa74a48c1a305e4024562653c9911f429811af713e60c1446f92405ae0325c9954ab3fb505fd906da067ec0fa60f9339356e9cae4d035b77576d52bae6e57bed109bc3a680f9326f62a0dd38f3b3703f1736a4a413cfc9507c924829d5ffb32720bbbd9184e02270288c61dbffcdd8a08773120557505c5d3d5220a16e6b28fab1deaa2065c44799b3579e85c09b644066c6adf0189fa6ad24da666f69ab0a5f", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00000000"], 0x1b0}}, {{&(0x7f00000021c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000002440)=[{&(0x7f0000002200)="a84e976a714679412fafe3d3709c8449a17b76316258c4f9ecda0736939179301bdf5734f548c3ffd8bae6f7b2b3e1d9f5cab23ec2f8006126e6c133ec62498959ef482220331a787c25f080b01540851fa12bedad5c62c88017086cc051ea1163ca1d9e84f6254486a9563c6c07a2cee010a5570cce306d5b8f", 0x7a}, {&(0x7f0000002280)="3feb538ee4b60d862ad6df795ce92f18d503bccb093eae645d3c288ba95b1b885c71", 0x22}, {&(0x7f00000022c0)="782d8231681a5deab0f14b5f388c7577942f83d7b557172e32fc9516f1bbd8a68082b3b0e49f0f8d6dd9724fec70d5b632c73dde0463c6eb770085b01ab360ef5374af9cc8a96c28f39ca39d7093e1ab70fa01a805a8bca6371b22d84afd15c2250c", 0x62}, {&(0x7f0000002340)="e5c09b33e27d915e05bf43380ea5e8666e0e8b300f674b762f567978a1f4d154e2f88747051064c2f931b7eb87f22891942f6ecdfe589f1eb35eae0d27e7ff68e9b3c51cde1307ac5ca84b93b7172c71b8083b36720fef94f2257cebaa977e6b924a84535401bcf5", 0x68}, {&(0x7f00000023c0)="8bb16f7089e5f74141008f66216bf26551d6c8ef55ab86f6e89d699dc6cc746f63ac08f8ab67715a4fb8981a67d1e718a9f4f994bc3b1735ad1a3ee84d138c82e0ce21552cad47495394c17185b607980cd17640c84bac15466c1f0bfa83aa6c0d705c0522333fe300ba66f5c6eb73330783", 0x72}], 0x5, &(0x7f00000024c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4b}}], 0x48}}], 0x2, 0x0) r12 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r8, 0x1, &(0x7f0000001480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x6, r12, &(0x7f0000000280)='-2B', 0x3, 0x0, 0x0, 0x4}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) 48.498172088s ago: executing program 1 (id=231): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff70, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYBLOB="0000000000000000b70800000000e7057b8af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYRES8], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="c80100", @ANYRES32=r2, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a00000014000200"/238], 0x1c8}}, 0x4000800) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) sendto$inet(r1, &(0x7f0000000a00)="ab7e185c359bc52ea3caddb70a078ec8845e46e95a044552902bed5394299d9f9bf651460c8ba4873d91e5204c9b0ab5fd01c212c74038945b094a979fa8191b747d532c66761277dca6bac5f55adfd9044337ac8872b62ade6fadce96422ee960a5e4fe63611df1c93e3a3df63eb81e449a7dc1439815154822096dd0ebc84fa7d7c77341eb55c5299e356bd980fcdaf079c426b6bb63626a9076c6ca2b89e17b229892a93b342d36f5c22fde18c6d049727a7df27dc890a30cacca34004609048b528e6804209699277d50", 0xcc, 0x80, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 48.160400094s ago: executing program 1 (id=234): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x28007c2, &(0x7f0000000680)={[{@delalloc}, {@resuid={'resuid', 0x3d, r4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid={'resgid', 0x3d, r5}}, {@acl}, {@dax_always}]}, 0x0, 0x483, &(0x7f0000001040)="$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") stat(&(0x7f0000006600)='./file0\x00', &(0x7f0000006640)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x8}, 0xc) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r9}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') 48.151380515s ago: executing program 32 (id=234): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x28007c2, &(0x7f0000000680)={[{@delalloc}, {@resuid={'resuid', 0x3d, r4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid={'resgid', 0x3d, r5}}, {@acl}, {@dax_always}]}, 0x0, 0x483, &(0x7f0000001040)="$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") stat(&(0x7f0000006600)='./file0\x00', &(0x7f0000006640)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x8}, 0xc) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r9}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') 43.945074185s ago: executing program 4 (id=282): socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7ffffdc}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x300, 0x2) 43.712248453s ago: executing program 4 (id=286): perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bfffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1, 0x91, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xe985}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 43.685296405s ago: executing program 4 (id=287): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r0, 0x500}, 0x38) 43.62811795s ago: executing program 4 (id=289): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e80)=@newtaction={0x14, 0x30, 0x1, 0x70bd25, 0x80001}, 0x14}, 0x1, 0x0, 0x0, 0x4008044}, 0x80) fallocate(r0, 0x0, 0xbf5, 0x2000402) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000010000509000000000000000000004c00", @ANYRES32=0x0, @ANYBLOB="810002000003000008001b00000000000500100006000000f2159b2aa64b000776"], 0x30}, 0x1, 0xffffa888}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRES32=r5], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x24004091}, 0x2000014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r10}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r10, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x15, [{0x7fd, 0x15, 0x9d83}]}]}, {0x0, [0x61, 0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffe000001}) 43.121814939s ago: executing program 4 (id=294): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xda}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@o_path={0x0, r4, 0x4000, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r7}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x100000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r10, 0x26, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 42.748215499s ago: executing program 4 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d18000000000000006923c63a4541062101b60a2156566de77062", 0x24, r2) 42.747733919s ago: executing program 33 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d18000000000000006923c63a4541062101b60a2156566de77062", 0x24, r2) 3.253473695s ago: executing program 2 (id=1007): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair(0x3, 0x3, 0x0, &(0x7f00000001c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5414, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01030000000000001c0012000c000100626f6e64000000000c000200080001000535cb791cf3e5b70232d790d9c04fe43a7bccf8c1da7ccaeb2139e26949091daef3a65ea915fa328ea3e70c9110ba58f2187888ae4d7776b4df2cbc2dc561eaad02975097e535fbd5a237175c2182cb970e188b27e6d601948c2d7647f30ac62ae107bffbd46fb6a6fd4ee99f79ae08ccfaad4753ddce7c44aa8dcefdfec4028ee61b21deb786b416246d65017099d8"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x1a, r3, 0x1, 0x8, 0x6, @broadcast}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a1, &(0x7f0000000040)={'netdevsim0\x00'}) 3.220966218s ago: executing program 6 (id=1009): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) 3.159308473s ago: executing program 2 (id=1011): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', r1, 0x4000, r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb7}, &(0x7f0000000880), &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) 3.079002439s ago: executing program 2 (id=1015): socket$kcm(0x10, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00001a309c98625cffa5306f516e2335880decb89948515360a265421be68642071096792a843fe89d2915e9f43cccb01d7ce2762e0037236fe191e5382472bdf65e194208df54052e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x5, 0x0, 0x1, 0x19438a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x6025, 0x4, 0xc1, 0x7, 0x1, 0x1ff, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x2000000000}, 0x1520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0x4db1, 0x1, 0x4000000}, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 2.329198528s ago: executing program 6 (id=1024): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000140a03000000000000000000021100010000000000000000000000000a00000000000000"], 0x78}}, 0x0) io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 2.199233598s ago: executing program 6 (id=1029): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40}) io_uring_enter(0xffffffffffffffff, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) 2.183910859s ago: executing program 2 (id=1030): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x428040, 0x0) bind$llc(r2, &(0x7f0000000200)={0x1a, 0x4, 0xf9, 0x0, 0xe, 0x5, @multicast}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000480)='asymmetric\x00', 0x0, &(0x7f00000007c0)="10", 0x1, r3) read$eventfd(r1, &(0x7f00000001c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00'}, 0x18) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.120073094s ago: executing program 5 (id=1033): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000648800fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 2.085579607s ago: executing program 2 (id=1034): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) 2.024206112s ago: executing program 5 (id=1035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x6) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005", @ANYRES8=r2], 0x66) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") 2.020692682s ago: executing program 2 (id=1037): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = semget(0x2, 0x4, 0x200) semop(r3, &(0x7f0000000340)=[{0x0, 0x7fff, 0x1800}, {0x0, 0x8005}, {0x2, 0x1009, 0x1000}, {0x0, 0x1008, 0x1000}], 0x4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r4, &(0x7f00000000c0)='./file0\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000040)=0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r9, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) 1.646300551s ago: executing program 5 (id=1038): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1.591300256s ago: executing program 5 (id=1039): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 1.492413203s ago: executing program 0 (id=1040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x50}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) 1.486301864s ago: executing program 5 (id=1041): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r4, 0x0, 0x881) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000400)={0x8, 0x201, 0x1ff, 0x10}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd0400000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000067000100000000dfffffff00020005ff", @ANYRES32=r7, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xb}, {0x9}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xfffffff4, 0xf2, &(0x7f00000002c0)=""/242, 0xc5fb24597e76844d, 0x59, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1, 0xa, 0xe00}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x10, 0xfffffffe}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a01"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0000000201010200000000000000000a0008000c001980080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) 682.000397ms ago: executing program 0 (id=1042): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1) 681.190837ms ago: executing program 6 (id=1044): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='dlm_unlock_end\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x101000) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 404.459259ms ago: executing program 3 (id=1047): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) 404.147139ms ago: executing program 0 (id=1048): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000140)={0xa0000001}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x44000006) 384.331371ms ago: executing program 3 (id=1049): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00'}, 0x18) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x3a42, 0x2, 0x3, 0x7fffffff}]}) timerfd_create(0x9, 0x0) 323.639895ms ago: executing program 3 (id=1050): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x0, 0x0}) setgroups(0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) 300.892697ms ago: executing program 0 (id=1051): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 298.712837ms ago: executing program 6 (id=1052): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r5 = dup(r2) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010025bd7000fedbdf2501000000050007000700000006000a000300000005000100090000000c0009"], 0x38}, 0x1, 0x0, 0x0, 0x4040010}, 0xc000810) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 200.414015ms ago: executing program 3 (id=1053): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, 0x0, 0x25, 0x0, @void}, 0x10) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7ffffdc}, 0x18) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1f}, 0x50) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 167.312897ms ago: executing program 6 (id=1054): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_io_uring_setup(0x2f90, &(0x7f00000002c0)={0x0, 0x4dd8, 0x8000, 0x1, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r1 = epoll_create(0xaf2) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000180)='2', 0x1, 0xfecc) fallocate(r4, 0x10, 0x7, 0x10001) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x6, 0xfffffbff, 0x0, 0x3d976f93, 0x0, "e315bc1cc24ff7b7cdb242e1ff0aa680544662"}) 125.209171ms ago: executing program 0 (id=1055): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) close(r1) 105.430462ms ago: executing program 3 (id=1056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='btrfs_transaction_commit\x00', r2, 0x0, 0x10007ffffffff}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./mnt/file0\x00', 0x0, 0x0, 0x1000) 50.591436ms ago: executing program 5 (id=1057): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = io_uring_setup(0x1d48, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r2, 0x4) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) close_range(r1, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0x9}, 0x18) 410.971µs ago: executing program 3 (id=1058): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00'}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='tcp_cong_state_set\x00', r2}, 0x18) r3 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x30004001) 0s ago: executing program 0 (id=1059): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) kernel console output (not intermixed with test programs): stering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.870684][ T29] audit: type=1326 audit(1765927037.746:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 32.894066][ T29] audit: type=1326 audit(1765927037.746:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 32.917266][ T29] audit: type=1326 audit(1765927037.746:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 32.940593][ T29] audit: type=1326 audit(1765927037.746:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.4.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 33.001441][ T3883] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.052153][ T3652] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.071923][ T3652] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.080355][ T3652] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.088944][ T3652] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.110024][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.131761][ T3901] netlink: 'syz.3.108': attribute type 7 has an invalid length. [ 33.139456][ T3901] netlink: 32 bytes leftover after parsing attributes in process `syz.3.108'. [ 33.283830][ T3904] loop1: detected capacity change from 0 to 32768 [ 33.919622][ T3917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.113'. [ 33.941672][ T3917] IPVS: Error connecting to the multicast addr [ 34.083332][ T3931] loop2: detected capacity change from 0 to 512 [ 34.097387][ T3933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 34.106598][ T3931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.121660][ T3937] netlink: 14 bytes leftover after parsing attributes in process `syz.3.122'. [ 34.122965][ T3933] netlink: 'syz.1.117': attribute type 10 has an invalid length. [ 34.138428][ T3937] hsr_slave_0: left promiscuous mode [ 34.144212][ T3937] hsr_slave_1: left promiscuous mode [ 34.167523][ T3931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.196755][ T3931] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.329077][ T3946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=3946 comm=syz.1.125 [ 34.390829][ T3949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.125'. [ 34.630667][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.173555][ T3961] loop4: detected capacity change from 0 to 512 [ 35.215309][ T3961] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.130: inode has both inline data and extents flags [ 35.238820][ T3961] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.130: couldn't read orphan inode 15 (err -117) [ 35.251117][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.325884][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.376453][ T3982] loop1: detected capacity change from 0 to 512 [ 36.425394][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 36.425405][ T29] audit: type=1400 audit(1765927041.296:610): avc: denied { setopt } for pid=3983 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 36.464248][ T3982] ------------[ cut here ]------------ [ 36.469884][ T3982] EA inode 11 i_nlink=2 [ 36.469900][ T3982] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.1.134/3982 [ 36.484740][ T3982] Modules linked in: [ 36.488667][ T3982] CPU: 0 UID: 0 PID: 3982 Comm: syz.1.134 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.498314][ T3982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.508461][ T3982] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 36.515048][ T3982] Code: 11 d1 9c ff 4c 8d 2d 6a bf 20 05 49 8d 7e 40 e8 91 63 b8 ff 49 8b 6e 40 4c 89 e7 e8 a5 5e b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 ac ed ba 03 66 66 66 2e 0f 1f 84 [ 36.534670][ T3982] RSP: 0018:ffffc90000e175a0 EFLAGS: 00010246 [ 36.540747][ T3982] RAX: ffff88811bc01b10 RBX: ffff888107bee4e8 RCX: ffffffff81bb4deb [ 36.548728][ T3982] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0d40 [ 36.556688][ T3982] RBP: 000000000000000b R08: 0001888107bee49b R09: 0000000000000000 [ 36.564746][ T3982] R10: 0000000000000406 R11: 0000000000000002 R12: ffff888107bee498 [ 36.572792][ T3982] R13: ffffffff86dc0d40 R14: ffff888107bee450 R15: 0000000000000001 [ 36.580780][ T3982] FS: 00007f4e7e8376c0(0000) GS:ffff8882aedc2000(0000) knlGS:0000000000000000 [ 36.589828][ T3982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.596413][ T3982] CR2: 00007f3325d56f98 CR3: 0000000104a74000 CR4: 00000000003506f0 [ 36.604401][ T3982] Call Trace: [ 36.607731][ T3982] [ 36.610698][ T3982] ext4_xattr_set_entry+0x77f/0x1020 [ 36.616042][ T3982] ext4_xattr_ibody_set+0x184/0x3c0 [ 36.621384][ T3982] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 36.627210][ T3982] __ext4_expand_extra_isize+0x246/0x280 [ 36.632875][ T3982] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 36.638366][ T3982] ext4_evict_inode+0x7c4/0xd40 [ 36.643325][ T3982] ? __pfx_ext4_evict_inode+0x10/0x10 [ 36.648752][ T3982] evict+0x2af/0x510 [ 36.652701][ T3982] ? __dquot_initialize+0x146/0x7c0 [ 36.657967][ T3982] iput+0x4bd/0x650 [ 36.661813][ T3982] ext4_process_orphan+0x1a9/0x1c0 [ 36.666994][ T3982] ext4_orphan_cleanup+0x6a8/0xa00 [ 36.672174][ T3982] ext4_fill_super+0x3411/0x37a0 [ 36.677132][ T3982] ? set_blocksize+0x1a8/0x310 [ 36.681935][ T3982] ? sb_set_blocksize+0xfc/0x170 [ 36.686921][ T3982] ? setup_bdev_super+0x30e/0x370 [ 36.691951][ T3982] ? __pfx_ext4_fill_super+0x10/0x10 [ 36.697281][ T3982] get_tree_bdev_flags+0x291/0x300 [ 36.702414][ T3982] ? __pfx_ext4_fill_super+0x10/0x10 [ 36.707764][ T3982] get_tree_bdev+0x1f/0x30 [ 36.712245][ T3982] ext4_get_tree+0x1c/0x30 [ 36.716648][ T3982] vfs_get_tree+0x57/0x1d0 [ 36.721080][ T3982] do_new_mount+0x24d/0x6a0 [ 36.725579][ T3982] path_mount+0x4ab/0xb80 [ 36.729953][ T3982] ? user_path_at+0xbf/0x130 [ 36.734555][ T3982] __se_sys_mount+0x28c/0x2e0 [ 36.739284][ T3982] __x64_sys_mount+0x67/0x80 [ 36.743869][ T3982] x64_sys_call+0x2cca/0x3000 [ 36.751801][ T3982] do_syscall_64+0xd8/0x2c0 [ 36.756388][ T3982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.762304][ T3982] RIP: 0033:0x7f4e7fdd0eea [ 36.766715][ T3982] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.786496][ T3982] RSP: 002b:00007f4e7e836e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 36.794914][ T3982] RAX: ffffffffffffffda RBX: 00007f4e7e836ef0 RCX: 00007f4e7fdd0eea [ 36.802953][ T3982] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f4e7e836eb0 [ 36.810943][ T3982] RBP: 0000200000000180 R08: 00007f4e7e836ef0 R09: 0000000000800700 [ 36.818989][ T3982] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 36.826952][ T3982] R13: 00007f4e7e836eb0 R14: 000000000000046f R15: 000000000000002c [ 36.835004][ T3982] [ 36.838020][ T3982] ---[ end trace 0000000000000000 ]--- [ 36.872004][ T3990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.136'. [ 36.895722][ T3990] IPVS: Error connecting to the multicast addr [ 36.901909][ T29] audit: type=1326 audit(1765927041.726:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 36.925168][ T29] audit: type=1326 audit(1765927041.726:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 36.937064][ T3982] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.134: iget: bad extra_isize 90 (inode size 256) [ 36.948559][ T29] audit: type=1326 audit(1765927041.726:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 36.984976][ T29] audit: type=1326 audit(1765927041.726:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 37.008191][ T29] audit: type=1326 audit(1765927041.726:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 37.031496][ T29] audit: type=1326 audit(1765927041.726:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 37.054837][ T29] audit: type=1326 audit(1765927041.726:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 37.078105][ T29] audit: type=1326 audit(1765927041.726:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 37.101275][ T29] audit: type=1326 audit(1765927041.726:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 37.126166][ T3982] EXT4-fs (loop1): Remounting filesystem read-only [ 37.162820][ T3982] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 37.199630][ T3982] EXT4-fs (loop1): 1 orphan inode deleted [ 37.209821][ T4005] xt_hashlimit: max too large, truncated to 1048576 [ 37.221951][ T4005] No such timeout policy "syz1" [ 37.234541][ T4009] loop2: detected capacity change from 0 to 256 [ 37.241374][ T3982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.310708][ T4013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 37.330314][ T4013] netlink: 'syz.4.144': attribute type 10 has an invalid length. [ 37.339556][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.365190][ T4013] team0: Port device dummy0 added [ 37.407069][ T4023] loop4: detected capacity change from 0 to 256 [ 37.432806][ T4025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 37.448936][ T4025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4025 comm=syz.2.148 [ 37.462819][ T4025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1015 sclass=netlink_tcpdiag_socket pid=4025 comm=syz.2.148 [ 37.477550][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 37.480421][ T4026] netlink: 'syz.1.146': attribute type 3 has an invalid length. [ 37.503547][ T4026] loop1: detected capacity change from 0 to 1024 [ 37.510251][ T4026] EXT4-fs: inline encryption not supported [ 37.516064][ T4026] EXT4-fs: Ignoring removed orlov option [ 37.549048][ T4026] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 37.599197][ T4026] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 37.617051][ T4032] syzkaller0: entered allmulticast mode [ 37.627291][ T4026] System zones: 0-1, 3-12 [ 37.638534][ T4032] syzkaller0 (unregistering): left allmulticast mode [ 37.645879][ T4026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.848471][ T4041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 37.935867][ T4047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.152'. [ 37.983997][ T4049] loop2: detected capacity change from 0 to 512 [ 38.119903][ T4049] EXT4-fs: dax option not supported [ 38.224693][ T4049] loop2: detected capacity change from 0 to 1764 [ 38.332126][ T4060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 38.341932][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.382840][ T4060] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 38.470740][ T4060] team0: Port device dummy0 added [ 38.540555][ T4075] loop2: detected capacity change from 0 to 2048 [ 38.598917][ T3723] loop2: p1 < > p3 p4 [ 38.604145][ T4081] macvtap0: refused to change device tx_queue_len [ 38.604476][ T3723] loop2: p3 start 458752 is beyond EOD, truncated [ 38.617086][ T3723] loop2: p4 start 268435456 is beyond EOD, truncated [ 38.639699][ T4075] loop2: p1 < > p3 p4 [ 38.648643][ T4075] loop2: p3 start 458752 is beyond EOD, truncated [ 38.655169][ T4075] loop2: p4 start 268435456 is beyond EOD, truncated [ 38.738557][ T4077] loop0: detected capacity change from 0 to 512 [ 38.740552][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 38.745779][ T4077] EXT4-fs (loop0): blocks per group (8192) and clusters per group (2304) inconsistent [ 38.818739][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 38.966442][ T4094] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.019832][ T4094] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 40.246643][ T4129] loop4: detected capacity change from 0 to 512 [ 40.370523][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 40.535394][ T4142] loop0: detected capacity change from 0 to 128 [ 40.562275][ T4142] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 40.686602][ T4142] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.702732][ T4130] loop4: detected capacity change from 0 to 8192 [ 40.810520][ T4148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50448 sclass=netlink_route_socket pid=4148 comm=syz.1.186 [ 40.940273][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.090718][ T4160] netlink: 16 bytes leftover after parsing attributes in process `syz.3.190'. [ 41.107330][ T4160] netlink: 40 bytes leftover after parsing attributes in process `syz.3.190'. [ 41.255950][ T4176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'. [ 41.315468][ T4173] syz.3.190 uses obsolete (PF_INET,SOCK_PACKET) [ 41.375779][ T4183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.429224][ T4183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.449096][ T29] kauditd_printk_skb: 639 callbacks suppressed [ 41.449109][ T29] audit: type=1400 audit(1765927046.326:1259): avc: denied { read write } for pid=4180 comm="syz.4.199" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.478581][ T29] audit: type=1400 audit(1765927046.326:1260): avc: denied { open } for pid=4180 comm="syz.4.199" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.529230][ T29] audit: type=1400 audit(1765927046.406:1261): avc: denied { create } for pid=4193 comm="syz.2.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.564589][ T4194] team0: Port device team_slave_1 removed [ 41.577793][ T29] audit: type=1400 audit(1765927046.426:1262): avc: denied { ioctl } for pid=4193 comm="syz.2.203" path="socket:[7364]" dev="sockfs" ino=7364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.602434][ T29] audit: type=1326 audit(1765927046.426:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 41.625801][ T29] audit: type=1326 audit(1765927046.426:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 41.649245][ T29] audit: type=1326 audit(1765927046.426:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 41.672560][ T29] audit: type=1326 audit(1765927046.426:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 41.695940][ T29] audit: type=1326 audit(1765927046.426:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4197 comm="syz.3.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 41.719260][ T29] audit: type=1326 audit(1765927046.436:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4192 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cfdf5f749 code=0x7ffc0000 [ 41.888126][ T4221] ieee802154 phy0 wpan0: encryption failed: -90 [ 41.894600][ T4217] wireguard0: entered promiscuous mode [ 41.895336][ T4208] EXT4-fs: Ignoring removed oldalloc option [ 41.900173][ T4217] wireguard0: entered allmulticast mode [ 41.935706][ T4208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.970763][ T4228] __nla_validate_parse: 1 callbacks suppressed [ 41.970777][ T4228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.205'. [ 41.997829][ T4208] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.039220][ T4194] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.203: lblock 0 mapped to illegal pblock 0 (length 1) [ 42.068570][ T4194] EXT4-fs (loop2): Remounting filesystem read-only [ 42.106407][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.491885][ T4279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4279 comm=syz.2.211 [ 42.508867][ T4281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.210'. [ 42.748921][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 42.825643][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 42.935664][ T4328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.219'. [ 42.968695][ T4344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.222'. [ 43.051205][ T4350] set_capacity_and_notify: 1 callbacks suppressed [ 43.051218][ T4350] loop1: detected capacity change from 0 to 512 [ 43.058981][ T4352] netlink: 'syz.2.224': attribute type 3 has an invalid length. [ 43.135755][ T4356] geneve1: entered promiscuous mode [ 43.141148][ T4356] geneve1: entered allmulticast mode [ 43.371794][ T4350] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.225: inode has both inline data and extents flags [ 43.395148][ T4350] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.225: couldn't read orphan inode 15 (err -117) [ 43.469478][ T4350] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.579158][ T4370] loop0: detected capacity change from 0 to 512 [ 43.602649][ T4370] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.613221][ T3912] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.654243][ T4370] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.687872][ T4370] EXT4-fs (loop0): 1 truncate cleaned up [ 43.693987][ T4370] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.827329][ T3619] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.875236][ T4379] netlink: 32 bytes leftover after parsing attributes in process `syz.2.233'. [ 43.900738][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.934826][ T4379] netlink: 'syz.2.233': attribute type 1 has an invalid length. [ 43.942522][ T4379] netlink: 224 bytes leftover after parsing attributes in process `syz.2.233'. [ 43.952479][ T3619] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.040239][ T3619] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.101638][ T3619] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.160182][ T4397] netlink: 'syz.3.239': attribute type 10 has an invalid length. [ 44.226758][ T3619] bridge_slave_1: left allmulticast mode [ 44.232452][ T3619] bridge_slave_1: left promiscuous mode [ 44.238270][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.296715][ T3619] bridge_slave_0: left allmulticast mode [ 44.302501][ T3619] bridge_slave_0: left promiscuous mode [ 44.308196][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.349525][ T4406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 44.410111][ T4410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 44.468474][ T3619] team0: Port device geneve1 removed [ 44.482972][ T4412] netlink: 'syz.0.242': attribute type 2 has an invalid length. [ 44.502757][ T4414] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 44.531591][ T3619] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.560521][ T3619] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.580179][ T3619] bond0 (unregistering): Released all slaves [ 44.598491][ T4414] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 44.630477][ T4410] IPVS: Error connecting to the multicast addr [ 44.653674][ T4417] macsec1: entered promiscuous mode [ 44.658897][ T4417] macsec0: entered promiscuous mode [ 44.664245][ T4417] macsec1: entered allmulticast mode [ 44.669580][ T4417] macsec0: entered allmulticast mode [ 44.674857][ T4417] veth1_macvtap: entered allmulticast mode [ 44.718495][ T4416] netlink: 'syz.2.245': attribute type 10 has an invalid length. [ 44.727750][ T4417] macsec0: left allmulticast mode [ 44.732886][ T4417] veth1_macvtap: left allmulticast mode [ 44.738487][ T4417] macsec0: left promiscuous mode [ 44.766636][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 44.789232][ T4416] team0 (unregistering): Port device dummy0 removed [ 44.812103][ T4420] hsr_slave_0: left promiscuous mode [ 44.818413][ T4420] hsr_slave_1: left promiscuous mode [ 44.839968][ T3619] hsr_slave_0: left promiscuous mode [ 44.845861][ T3619] hsr_slave_1: left promiscuous mode [ 44.851572][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.859007][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.884647][ T3619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.892054][ T3619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.921625][ T3619] veth1_macvtap: left promiscuous mode [ 44.944869][ T3619] veth0_macvtap: left promiscuous mode [ 44.955848][ T3619] veth1_vlan: left promiscuous mode [ 44.967459][ T3619] veth0_vlan: left promiscuous mode [ 45.058038][ T4431] SELinux: Context system_u:object_r:getty_etc_t:s0 is not valid (left unmapped). [ 45.082598][ T4431] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 45.185438][ T3619] team0 (unregistering): Port device team_slave_1 removed [ 45.214412][ T3619] team0 (unregistering): Port device team_slave_0 removed [ 45.269385][ T3619] team0 (unregistering): Port device dummy0 removed [ 45.287557][ T4422] IPVS: Error connecting to the multicast addr [ 45.404125][ T4387] chnl_net:caif_netlink_parms(): no params data found [ 45.502009][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.509190][ T4387] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.516543][ T4387] bridge_slave_0: entered allmulticast mode [ 45.523265][ T4387] bridge_slave_0: entered promiscuous mode [ 45.555763][ T4470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.566128][ T4470] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.590183][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.597255][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.604732][ T4387] bridge_slave_1: entered allmulticast mode [ 45.611152][ T4387] bridge_slave_1: entered promiscuous mode [ 45.684762][ T4470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.695078][ T4470] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.740825][ T4477] IPVS: Error connecting to the multicast addr [ 45.748577][ T4387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.770492][ T4387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.791854][ T4470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 45.802143][ T4470] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.854927][ T4493] macvtap0: refused to change device tx_queue_len [ 45.862090][ T4387] team0: Port device team_slave_0 added [ 45.874063][ T4387] team0: Port device team_slave_1 added [ 45.915500][ T4387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.922479][ T4387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.948432][ T4387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.981280][ T4387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.988236][ T4387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.014171][ T4387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.028504][ T4470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 46.038856][ T4470] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.080171][ T4387] hsr_slave_0: entered promiscuous mode [ 46.089525][ T4387] hsr_slave_1: entered promiscuous mode [ 46.107024][ T3615] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.115293][ T3615] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.172594][ T3615] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.180804][ T3615] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.204296][ T4505] pimreg: entered allmulticast mode [ 46.247588][ T4505] pimreg: left allmulticast mode [ 46.277274][ T3615] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.285507][ T3615] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.871699][ T29] kauditd_printk_skb: 993 callbacks suppressed [ 46.871713][ T29] audit: type=1400 audit(46.849:2262): avc: denied { create } for pid=4529 comm="syz.4.266" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 46.986960][ T29] audit: type=1400 audit(46.859:2263): avc: denied { map } for pid=4529 comm="syz.4.266" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.010399][ T29] audit: type=1400 audit(46.859:2264): avc: denied { read write } for pid=4529 comm="syz.4.266" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 47.034312][ T29] audit: type=1326 audit(46.929:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 47.056948][ T29] audit: type=1326 audit(46.929:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 47.079567][ T29] audit: type=1326 audit(46.929:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 47.091938][ T4387] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 47.102188][ T29] audit: type=1326 audit(46.939:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 47.131710][ T29] audit: type=1326 audit(46.939:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 47.154529][ T29] audit: type=1326 audit(46.939:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 47.177063][ T29] audit: type=1326 audit(46.939:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.4.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33272ef749 code=0x7ffc0000 [ 47.215198][ T4387] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 47.228147][ T4387] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 47.237516][ T4387] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 47.283733][ T4550] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 47.320213][ T4553] __nla_validate_parse: 3 callbacks suppressed [ 47.320226][ T4553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 47.328630][ T4547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.268'. [ 47.346439][ T4556] macvtap0: refused to change device tx_queue_len [ 47.352193][ T4553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 47.401876][ T4547] netlink: 'syz.4.268': attribute type 1 has an invalid length. [ 47.409626][ T4547] netlink: 224 bytes leftover after parsing attributes in process `syz.4.268'. [ 47.422062][ T4387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.440969][ T4553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 47.460635][ T4387] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.486248][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.490010][ T4568] netlink: 14 bytes leftover after parsing attributes in process `syz.0.272'. [ 47.493372][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.582893][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.590018][ T3644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.621978][ T4575] rdma_op ffff88811fc3a580 conn xmit_rdma 0000000000000000 [ 47.647890][ T4503] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.657802][ T4503] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.710829][ T4503] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.720677][ T4503] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.751350][ T4387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.781561][ T4503] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 47.791402][ T4503] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.935609][ T4601] bond0: Error: Cannot enslave bond to itself. [ 47.995871][ T4387] veth0_vlan: entered promiscuous mode [ 48.020073][ T4387] veth1_vlan: entered promiscuous mode [ 48.036708][ T4387] veth0_macvtap: entered promiscuous mode [ 48.047534][ T4387] veth1_macvtap: entered promiscuous mode [ 48.064302][ T4387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.076889][ T4387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.095621][ T3615] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.116917][ T3615] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.148112][ T3615] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.179252][ T3615] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.298606][ T4609] netlink: 88 bytes leftover after parsing attributes in process `syz.3.279'. [ 48.344474][ T4609] SELinux: security_context_str_to_sid () failed with errno=-22 [ 48.398650][ T4568] syz.0.272 (4568) used greatest stack depth: 7232 bytes left [ 48.479957][ T4640] loop4: detected capacity change from 0 to 512 [ 48.498563][ T4640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.539520][ T4640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.575436][ T4643] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 48.606724][ T4640] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.711347][ T4640] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.777106][ T4652] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.784175][ T4652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.794646][ T4652] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.801829][ T4652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.838047][ T4652] geneve1: left promiscuous mode [ 48.843156][ T4652] geneve1: left allmulticast mode [ 48.862012][ T4647] tc_dump_action: action bad kind [ 48.904318][ T4657] netlink: 'syz.3.292': attribute type 10 has an invalid length. [ 48.948573][ T3332] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 48.978968][ T3332] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 48.993658][ T4663] xt_connbytes: Forcing CT accounting to be enabled [ 49.006088][ T4663] Cannot find set identified by id 0 to match [ 49.073912][ T4655] netlink: 72 bytes leftover after parsing attributes in process `syz.0.291'. [ 49.232400][ T4658] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.270282][ T3630] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.314743][ T4677] netlink: 'syz.5.300': attribute type 1 has an invalid length. [ 49.322464][ T4677] netlink: 224 bytes leftover after parsing attributes in process `syz.5.300'. [ 49.350839][ T3630] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.377083][ T4682] netlink: 'syz.0.304': attribute type 10 has an invalid length. [ 49.432934][ T3630] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.492948][ T3630] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.562725][ T4705] loop0: detected capacity change from 0 to 512 [ 49.589772][ T4705] EXT4-fs: inline encryption not supported [ 49.611276][ T4705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.646283][ T3630] bridge_slave_1: left allmulticast mode [ 49.652075][ T3630] bridge_slave_1: left promiscuous mode [ 49.657830][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.666778][ T3630] bridge_slave_0: left allmulticast mode [ 49.672451][ T3630] bridge_slave_0: left promiscuous mode [ 49.678081][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.769344][ T4715] netlink: 'syz.5.311': attribute type 1 has an invalid length. [ 49.776995][ T4715] netlink: 224 bytes leftover after parsing attributes in process `syz.5.311'. [ 49.786355][ T4715] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR [ 49.791664][ T3630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.810662][ T3630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.820437][ T3630] bond0 (unregistering): Released all slaves [ 49.854100][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.887277][ T4722] IPVS: Error connecting to the multicast addr [ 49.893556][ T3630] tipc: Left network mode [ 49.903389][ T4686] chnl_net:caif_netlink_parms(): no params data found [ 49.947058][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.954487][ T3630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.962101][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.969533][ T3630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.982283][ T3630] veth1_macvtap: left promiscuous mode [ 49.987790][ T3630] veth0_macvtap: left promiscuous mode [ 49.993655][ T3630] veth1_vlan: left promiscuous mode [ 50.001757][ T3630] veth0_vlan: left promiscuous mode [ 50.087396][ T3630] team0 (unregistering): Port device team_slave_1 removed [ 50.099645][ T3630] team0 (unregistering): Port device team_slave_0 removed [ 50.122323][ T4743] loop0: detected capacity change from 0 to 512 [ 50.132730][ T4743] ext4: Bad value for 'max_batch_time' [ 50.140493][ T3630] team0 (unregistering): Port device dummy0 removed [ 50.178236][ T3972] infiniband syz1: ib_query_port failed (-19) [ 50.189441][ T4744] bridge1: entered promiscuous mode [ 50.194648][ T4744] bridge1: entered allmulticast mode [ 50.208025][ T4750] netlink: 'syz.0.325': attribute type 39 has an invalid length. [ 50.217172][ T4686] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.224417][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.243740][ T4686] bridge_slave_0: entered allmulticast mode [ 50.251662][ T4686] bridge_slave_0: entered promiscuous mode [ 50.283245][ T4686] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.290383][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.318060][ T4686] bridge_slave_1: entered allmulticast mode [ 50.324635][ T4686] bridge_slave_1: entered promiscuous mode [ 50.380423][ T3614] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.388813][ T3614] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.397085][ T4775] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 50.409077][ T4686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.443767][ T3614] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.452047][ T3614] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.461468][ T4686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.469732][ T4782] loop5: detected capacity change from 0 to 128 [ 50.492965][ T3614] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.501244][ T3614] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.556760][ T3614] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.564984][ T3614] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.575688][ T4789] rdma_op ffff888120f57180 conn xmit_rdma 0000000000000000 [ 50.600457][ T4785] can0: slcan on ttyS3. [ 50.607721][ T4686] team0: Port device team_slave_0 added [ 50.635702][ T4686] team0: Port device team_slave_1 added [ 50.695867][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.702973][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.728960][ T4686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.739074][ T4785] can0 (unregistered): slcan off ttyS3. [ 50.778248][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.785437][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.811500][ T4686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.089912][ T4686] hsr_slave_0: entered promiscuous mode [ 51.096254][ T4686] hsr_slave_1: entered promiscuous mode [ 51.097316][ T4888] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 51.102799][ T4686] debugfs: 'hsr0' already exists in 'hsr' [ 51.115595][ T4686] Cannot create hsr debugfs directory [ 51.217846][ T4895] netlink: 'syz.3.351': attribute type 10 has an invalid length. [ 51.273672][ T4898] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.283464][ T4898] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.312356][ T4912] netlink: 'syz.3.351': attribute type 3 has an invalid length. [ 51.353464][ T4895] ipvlan2: entered promiscuous mode [ 51.372382][ T4895] bridge0: port 3(ipvlan2) entered blocking state [ 51.378905][ T4895] bridge0: port 3(ipvlan2) entered disabled state [ 51.406179][ T4895] ipvlan2: entered allmulticast mode [ 51.411516][ T4895] bridge0: entered allmulticast mode [ 51.427319][ T4895] ipvlan2: left allmulticast mode [ 51.432405][ T4895] bridge0: left allmulticast mode [ 51.456135][ T4918] IPVS: Unknown mcast interface: ipvlan1 [ 51.478950][ T4898] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.488753][ T4898] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.537207][ T4924] can0: slcan on ttyS3. [ 51.563354][ T4898] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.573148][ T4898] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.612211][ T4930] loop0: detected capacity change from 0 to 128 [ 51.621581][ T4924] can0 (unregistered): slcan off ttyS3. [ 51.639099][ T4930] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.665912][ T4930] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.678503][ T4898] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 51.688393][ T4898] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.718896][ T3668] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.803720][ T4686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.833633][ T4686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.857512][ T4686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 51.881093][ T4942] loop5: detected capacity change from 0 to 512 [ 51.898189][ T4686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 51.912834][ T4942] EXT4-fs (loop5): 1 truncate cleaned up [ 51.944957][ T4942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.089904][ T4686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.111291][ T4387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.116069][ T4686] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.155314][ T3668] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.162398][ T3668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.186105][ T3668] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.193168][ T3668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.268545][ T4980] netlink: 'syz.0.366': attribute type 10 has an invalid length. [ 52.281693][ T4686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.291122][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 52.291135][ T29] audit: type=1326 audit(52.269:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 52.347201][ T4984] FAULT_INJECTION: forcing a failure. [ 52.347201][ T4984] name failslab, interval 1, probability 0, space 0, times 0 [ 52.359947][ T4984] CPU: 1 UID: 0 PID: 4984 Comm: syz.0.367 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.359980][ T4984] Tainted: [W]=WARN [ 52.359986][ T4984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.360040][ T4984] Call Trace: [ 52.360047][ T4984] [ 52.360053][ T4984] __dump_stack+0x1d/0x30 [ 52.360074][ T4984] dump_stack_lvl+0xe8/0x140 [ 52.360093][ T4984] dump_stack+0x15/0x1b [ 52.360112][ T4984] should_fail_ex+0x265/0x280 [ 52.360165][ T4984] should_failslab+0x8c/0xb0 [ 52.360184][ T4984] __kmalloc_noprof+0xb9/0x5a0 [ 52.360209][ T4984] ? ___neigh_create+0x4c9/0x1290 [ 52.360242][ T4984] ? __alloc_skb+0x24d/0x4d0 [ 52.360263][ T4984] ___neigh_create+0x4c9/0x1290 [ 52.360311][ T4984] ? netlbl_enabled+0x25/0x40 [ 52.360338][ T4984] ? selinux_ip_postroute+0x1b7/0xb50 [ 52.360371][ T4984] __neigh_create+0x54/0x70 [ 52.360400][ T4984] ip6_finish_output2+0x622/0xd10 [ 52.360462][ T4984] ? nf_nat_ipv6_out+0x187/0x230 [ 52.360559][ T4984] ? __rcu_read_unlock+0x34/0x70 [ 52.360580][ T4984] ? __pfx_ip6_mtu+0x10/0x10 [ 52.360607][ T4984] ip6_finish_output+0x3a4/0x540 [ 52.360715][ T4984] ip6_output+0x10a/0x250 [ 52.360751][ T4984] ? __pfx_ip6_finish_output+0x10/0x10 [ 52.360781][ T4984] ip6_local_out+0x79/0xe0 [ 52.360804][ T4984] ip6_send_skb+0x5a/0x130 [ 52.360821][ T4984] udp_v6_send_skb+0x7a3/0xc70 [ 52.360913][ T4984] udpv6_sendmsg+0x151d/0x15b0 [ 52.360942][ T4984] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 52.361034][ T4984] ? __rcu_read_unlock+0x4f/0x70 [ 52.361135][ T4984] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 52.361164][ T4984] inet6_sendmsg+0xac/0xd0 [ 52.361190][ T4984] __sock_sendmsg+0x8b/0x180 [ 52.361207][ T4984] ____sys_sendmsg+0x345/0x4a0 [ 52.361294][ T4984] ___sys_sendmsg+0x17b/0x1d0 [ 52.361352][ T4984] __sys_sendmmsg+0x178/0x300 [ 52.361465][ T4984] __x64_sys_sendmmsg+0x57/0x70 [ 52.361489][ T4984] x64_sys_call+0x1e28/0x3000 [ 52.361573][ T4984] do_syscall_64+0xd8/0x2c0 [ 52.361601][ T4984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.361619][ T4984] RIP: 0033:0x7f2cfdf5f749 [ 52.361634][ T4984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.361653][ T4984] RSP: 002b:00007f2cfc9bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 52.361710][ T4984] RAX: ffffffffffffffda RBX: 00007f2cfe1b5fa0 RCX: 00007f2cfdf5f749 [ 52.361723][ T4984] RDX: 0000000000000002 RSI: 0000200000000e80 RDI: 0000000000000006 [ 52.361736][ T4984] RBP: 00007f2cfc9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 52.361748][ T4984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.361758][ T4984] R13: 00007f2cfe1b6038 R14: 00007f2cfe1b5fa0 R15: 00007ffc06871138 [ 52.361775][ T4984] [ 52.362723][ T29] audit: type=1326 audit(52.269:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 52.620899][ T4998] netlink: 'syz.0.370': attribute type 10 has an invalid length. [ 52.627502][ T29] audit: type=1326 audit(52.269:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 52.691541][ T29] audit: type=1326 audit(52.269:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4972 comm="syz.5.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 52.702906][ T4686] veth0_vlan: entered promiscuous mode [ 52.715605][ T29] audit: type=1326 audit(52.429:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 52.742241][ T29] audit: type=1326 audit(52.429:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 52.765126][ T29] audit: type=1326 audit(52.429:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 52.773106][ T4686] veth1_vlan: entered promiscuous mode [ 52.787848][ T29] audit: type=1326 audit(52.429:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 52.802209][ T4686] veth0_macvtap: entered promiscuous mode [ 52.815774][ T29] audit: type=1326 audit(52.429:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 52.823138][ T4686] veth1_macvtap: entered promiscuous mode [ 52.844072][ T29] audit: type=1326 audit(52.439:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4986 comm="syz.5.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 52.855300][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.917319][ T5006] netlink: 'syz.0.372': attribute type 10 has an invalid length. [ 52.918694][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.940235][ T3668] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.978444][ T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.008258][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.017230][ T5009] $Hÿ: renamed from bond0 (while UP) [ 53.029928][ T5009] $Hÿ: entered promiscuous mode [ 53.034960][ T5009] bond_slave_0: entered promiscuous mode [ 53.040791][ T5009] bond_slave_1: entered promiscuous mode [ 53.057135][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.090012][ T5011] __nla_validate_parse: 10 callbacks suppressed [ 53.090024][ T5011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.374'. [ 53.132270][ T5014] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 53.146157][ T5016] loop6: detected capacity change from 0 to 512 [ 53.156180][ T5011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.374'. [ 53.165572][ T5016] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 53.187071][ T5016] loop6: detected capacity change from 0 to 512 [ 53.206057][ T5016] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.302: iget: bad extra_isize 90 (inode size 256) [ 53.219545][ T5011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.374'. [ 53.232187][ T5016] EXT4-fs (loop6): Remounting filesystem read-only [ 53.252025][ T5016] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 53.267931][ T5016] EXT4-fs (loop6): 1 orphan inode deleted [ 53.291962][ T5016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.313670][ T5016] netlink: 96 bytes leftover after parsing attributes in process `syz.6.302'. [ 53.326217][ T5016] team0: Device dummy0 is up. Set it down before adding it as a team port [ 53.360104][ T4686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.590586][ T5040] rdma_op ffff888104512180 conn xmit_rdma 0000000000000000 [ 53.636616][ T5036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=5036 comm=syz.0.380 [ 53.686655][ T5036] netlink: 60 bytes leftover after parsing attributes in process `syz.0.380'. [ 53.837803][ T5051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 53.972164][ T5055] loop6: detected capacity change from 0 to 1024 [ 54.005352][ T5055] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 54.015157][ T5055] EXT4-fs (loop6): group descriptors corrupted! [ 54.047873][ T5051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 54.082713][ T5051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.386'. [ 54.311880][ T5073] rdma_op ffff888119c5bd80 conn xmit_rdma 0000000000000000 [ 54.393207][ T5077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.395'. [ 54.402410][ T5077] netem: change failed [ 54.661122][ T5088] loop5: detected capacity change from 0 to 512 [ 54.769862][ T5088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.801205][ T5088] FAULT_INJECTION: forcing a failure. [ 54.801205][ T5088] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.814360][ T5088] CPU: 1 UID: 0 PID: 5088 Comm: syz.5.400 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.814404][ T5088] Tainted: [W]=WARN [ 54.814412][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.814423][ T5088] Call Trace: [ 54.814429][ T5088] [ 54.814436][ T5088] __dump_stack+0x1d/0x30 [ 54.814462][ T5088] dump_stack_lvl+0xe8/0x140 [ 54.814483][ T5088] dump_stack+0x15/0x1b [ 54.814569][ T5088] should_fail_ex+0x265/0x280 [ 54.814590][ T5088] should_fail+0xb/0x20 [ 54.814607][ T5088] should_fail_usercopy+0x1a/0x20 [ 54.814640][ T5088] _copy_to_user+0x20/0xa0 [ 54.814667][ T5088] ext4_ioctl+0x1dd1/0x2d20 [ 54.814692][ T5088] ? file_ioctl+0x146/0x530 [ 54.814845][ T5088] ? do_vfs_ioctl+0x7ca/0xe10 [ 54.814919][ T5088] ? selinux_file_ioctl+0x308/0x3a0 [ 54.815039][ T5088] ? __fget_files+0x184/0x1c0 [ 54.815061][ T5088] ? __pfx_ext4_ioctl+0x10/0x10 [ 54.815082][ T5088] __se_sys_ioctl+0xce/0x140 [ 54.815128][ T5088] __x64_sys_ioctl+0x43/0x50 [ 54.815178][ T5088] x64_sys_call+0x14b0/0x3000 [ 54.815203][ T5088] do_syscall_64+0xd8/0x2c0 [ 54.815275][ T5088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.815344][ T5088] RIP: 0033:0x7f7b579af749 [ 54.815357][ T5088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.815372][ T5088] RSP: 002b:00007f7b5640f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.815388][ T5088] RAX: ffffffffffffffda RBX: 00007f7b57c05fa0 RCX: 00007f7b579af749 [ 54.815399][ T5088] RDX: 0000200000000080 RSI: 00000000c028660f RDI: 0000000000000006 [ 54.815451][ T5088] RBP: 00007f7b5640f090 R08: 0000000000000000 R09: 0000000000000000 [ 54.815523][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.815588][ T5088] R13: 00007f7b57c06038 R14: 00007f7b57c05fa0 R15: 00007fff47452488 [ 54.815680][ T5088] [ 55.051120][ T4387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.151692][ T3615] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.159983][ T3615] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.185704][ T3615] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.193948][ T3615] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.210459][ T3615] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.218775][ T3615] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.246711][ T3615] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.255032][ T3615] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.469409][ T5104] loop5: detected capacity change from 0 to 512 [ 55.486627][ T5104] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.504540][ T5104] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.405: inode has both inline data and extents flags [ 55.518842][ T5104] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.405: couldn't read orphan inode 15 (err -117) [ 55.571776][ T5104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.618888][ T4387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.639749][ T5120] netlink: 76 bytes leftover after parsing attributes in process `syz.0.409'. [ 55.660117][ T5117] macvtap0: refused to change device tx_queue_len [ 55.797116][ T5135] tipc: Enabling of bearer rejected, failed to enable media [ 55.921653][ T5140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=5140 comm=syz.5.417 [ 56.037508][ T5139] infiniband syz1: set active [ 56.042278][ T5139] infiniband syz1: added veth0_to_bond [ 56.099746][ T5139] RDS/IB: syz1: added [ 56.114546][ T5149] FAULT_INJECTION: forcing a failure. [ 56.114546][ T5149] name failslab, interval 1, probability 0, space 0, times 0 [ 56.119512][ T5139] smc: adding ib device syz1 with port count 1 [ 56.127191][ T5149] CPU: 1 UID: 0 PID: 5149 Comm: syz.0.421 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 56.127234][ T5149] Tainted: [W]=WARN [ 56.127258][ T5149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.127270][ T5149] Call Trace: [ 56.127277][ T5149] [ 56.127284][ T5149] __dump_stack+0x1d/0x30 [ 56.127307][ T5149] dump_stack_lvl+0xe8/0x140 [ 56.127329][ T5149] dump_stack+0x15/0x1b [ 56.127388][ T5149] should_fail_ex+0x265/0x280 [ 56.127411][ T5149] should_failslab+0x8c/0xb0 [ 56.127463][ T5149] kmem_cache_alloc_noprof+0x69/0x4b0 [ 56.127485][ T5149] ? skb_clone+0x151/0x1f0 [ 56.127513][ T5149] skb_clone+0x151/0x1f0 [ 56.127574][ T5149] __netlink_deliver_tap+0x2c9/0x500 [ 56.127608][ T5149] netlink_unicast+0x66b/0x690 [ 56.127710][ T5149] netlink_sendmsg+0x58b/0x6b0 [ 56.127805][ T5149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.127840][ T5149] __sock_sendmsg+0x145/0x180 [ 56.127859][ T5149] ____sys_sendmsg+0x31e/0x4a0 [ 56.127965][ T5149] ___sys_sendmsg+0x17b/0x1d0 [ 56.128036][ T5149] __x64_sys_sendmsg+0xd4/0x160 [ 56.128073][ T5149] x64_sys_call+0x17ba/0x3000 [ 56.128096][ T5149] do_syscall_64+0xd8/0x2c0 [ 56.128277][ T5149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.128298][ T5149] RIP: 0033:0x7f2cfdf5f749 [ 56.128311][ T5149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.128326][ T5149] RSP: 002b:00007f2cfc9bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.128344][ T5149] RAX: ffffffffffffffda RBX: 00007f2cfe1b5fa0 RCX: 00007f2cfdf5f749 [ 56.128424][ T5149] RDX: 0000000000008804 RSI: 00002000000002c0 RDI: 000000000000000a [ 56.128435][ T5149] RBP: 00007f2cfc9bf090 R08: 0000000000000000 R09: 0000000000000000 [ 56.128447][ T5149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.128484][ T5149] R13: 00007f2cfe1b6038 R14: 00007f2cfe1b5fa0 R15: 00007ffc06871138 [ 56.128503][ T5149] [ 56.256337][ T5153] rdma_op ffff88811f855580 conn xmit_rdma 0000000000000000 [ 56.259888][ T5139] smc: ib device syz1 port 1 has no pnetid [ 56.707998][ T5173] can0: slcan on ttyS3. [ 56.820335][ T5176] can0 (unregistered): slcan off ttyS3. [ 57.398867][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 57.398911][ T29] audit: type=1326 audit(57.379:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 57.524959][ T29] audit: type=1326 audit(57.409:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 57.547652][ T29] audit: type=1326 audit(57.409:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 57.570311][ T29] audit: type=1326 audit(57.419:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 57.592981][ T29] audit: type=1326 audit(57.419:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 57.615660][ T29] audit: type=1326 audit(57.419:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 57.638309][ T29] audit: type=1326 audit(57.419:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 57.660963][ T29] audit: type=1326 audit(57.419:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 57.683612][ T29] audit: type=1326 audit(57.419:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 57.706222][ T29] audit: type=1326 audit(57.419:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5212 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 58.220899][ T5236] loop0: detected capacity change from 0 to 512 [ 58.280620][ T5236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.347806][ T5247] tipc: Enabling of bearer rejected, failed to enable media [ 58.464532][ T5242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.501340][ T5236] SELinux: Context @ is not valid (left unmapped). [ 58.505953][ T5242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.604896][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.791141][ T5264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=5264 comm=syz.6.464 [ 58.887401][ T5266] __nla_validate_parse: 5 callbacks suppressed [ 58.887416][ T5266] netlink: 60 bytes leftover after parsing attributes in process `syz.6.464'. [ 59.254941][ T5267] netlink: 188 bytes leftover after parsing attributes in process `syz.2.459'. [ 59.375543][ T5272] syz_tun: entered allmulticast mode [ 59.445543][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 59.639061][ T5272] syz_tun (unregistering): left allmulticast mode [ 60.228511][ T5294] tipc: Enabling of bearer rejected, failed to enable media [ 61.024256][ T5307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.033082][ T5307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.310894][ T5313] validate_nla: 1 callbacks suppressed [ 61.310906][ T5313] netlink: 'syz.5.479': attribute type 29 has an invalid length. [ 61.346364][ T5313] netlink: 'syz.5.479': attribute type 29 has an invalid length. [ 61.366119][ T5313] netlink: 36 bytes leftover after parsing attributes in process `syz.5.479'. [ 61.375128][ T5313] netlink: 36 bytes leftover after parsing attributes in process `syz.5.479'. [ 61.383982][ T5313] netlink: 14 bytes leftover after parsing attributes in process `syz.5.479'. [ 61.424287][ T5315] rdma_op ffff888104a56980 conn xmit_rdma 0000000000000000 [ 61.427977][ T5317] netlink: 500 bytes leftover after parsing attributes in process `syz.5.479'. [ 61.444509][ T5318] loop0: detected capacity change from 0 to 1024 [ 61.556664][ T5323] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 61.567236][ T5326] netlink: 16 bytes leftover after parsing attributes in process `syz.5.484'. [ 61.587431][ T5318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.619330][ T5323] bond1: entered promiscuous mode [ 61.624387][ T5323] bond1: entered allmulticast mode [ 61.662558][ T5323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.674412][ T5318] netlink: 'syz.0.481': attribute type 1 has an invalid length. [ 61.703218][ T5318] bond0: entered promiscuous mode [ 61.798602][ T5318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.098621][ T5352] netlink: 24 bytes leftover after parsing attributes in process `syz.5.489'. [ 62.211210][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.447911][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 62.447923][ T29] audit: type=1326 audit(62.419:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 62.768623][ T29] audit: type=1326 audit(62.459:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 62.791422][ T29] audit: type=1326 audit(62.459:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 62.814086][ T29] audit: type=1326 audit(62.459:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 62.836733][ T29] audit: type=1326 audit(62.459:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 62.859411][ T29] audit: type=1326 audit(62.459:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 62.882116][ T29] audit: type=1326 audit(62.459:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 62.904733][ T29] audit: type=1326 audit(62.459:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 62.927388][ T29] audit: type=1326 audit(62.459:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 62.950029][ T29] audit: type=1326 audit(62.459:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5356 comm="syz.5.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 63.483268][ T5362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.491'. [ 63.509541][ T5362] IPVS: Unknown mcast interface: ipvlan1 [ 63.528566][ T5357] IPVS: Error connecting to the multicast addr [ 64.461939][ T5396] rdma_op ffff88811fff8980 conn xmit_rdma 0000000000000000 [ 64.520781][ T5398] 9p: Bad value for 'source' [ 64.582439][ T5390] loop0: detected capacity change from 0 to 1024 [ 64.621010][ T5403] netlink: 'syz.6.511': attribute type 29 has an invalid length. [ 64.642522][ T5390] EXT4-fs: inline encryption not supported [ 64.648446][ T5390] EXT4-fs: Ignoring removed i_version option [ 64.674160][ T5403] netlink: 'syz.6.511': attribute type 29 has an invalid length. [ 64.688716][ T5390] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.704561][ T5403] __nla_validate_parse: 1 callbacks suppressed [ 64.704575][ T5403] netlink: 36 bytes leftover after parsing attributes in process `syz.6.511'. [ 64.719662][ T5403] netlink: 36 bytes leftover after parsing attributes in process `syz.6.511'. [ 64.728672][ T5403] netlink: 14 bytes leftover after parsing attributes in process `syz.6.511'. [ 64.751813][ T5415] 9p: Bad value for 'source' [ 64.759050][ T5390] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.505: lblock 2 mapped to illegal pblock 2 (length 1) [ 64.788585][ T5390] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.505: lblock 0 mapped to illegal pblock 48 (length 1) [ 64.810001][ T5390] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.505: Failed to acquire dquot type 0 [ 64.876422][ T5390] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 64.887629][ T5423] xt_connbytes: Forcing CT accounting to be enabled [ 64.895276][ T5403] netlink: 500 bytes leftover after parsing attributes in process `syz.6.511'. [ 64.923022][ T5390] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.505: mark_inode_dirty error [ 64.924301][ T5423] Cannot find set identified by id 0 to match [ 64.961835][ T5428] tipc: Enabling of bearer rejected, failed to enable media [ 64.970316][ T5421] netlink: 72 bytes leftover after parsing attributes in process `syz.3.516'. [ 65.018518][ T5390] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 65.062972][ T5432] rdma_op ffff88811fffbd80 conn xmit_rdma 0000000000000000 [ 65.069080][ T5390] EXT4-fs (loop0): 1 orphan inode deleted [ 65.077852][ T5390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.098648][ T3667] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:61: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.121210][ T5435] 9p: Bad value for 'source' [ 65.139382][ T3667] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:61: Failed to release dquot type 0 [ 65.179368][ T5390] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.205784][ T5390] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.505: Invalid inode table block 1 in block_group 0 [ 65.240935][ T5390] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 65.278462][ T5390] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.505: mark_inode_dirty error [ 65.388689][ T5444] netlink: 24 bytes leftover after parsing attributes in process `syz.6.526'. [ 65.515740][ T5452] 9p: Bad value for 'source' [ 65.873320][ T5464] netlink: 24 bytes leftover after parsing attributes in process `syz.6.533'. [ 65.906812][ T5468] netlink: 'syz.2.535': attribute type 10 has an invalid length. [ 65.912300][ T5464] IPVS: Error connecting to the multicast addr [ 66.090037][ T5479] netlink: 'syz.0.538': attribute type 10 has an invalid length. [ 66.139841][ T5479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.152944][ T5483] netlink: 552 bytes leftover after parsing attributes in process `syz.2.540'. [ 66.189295][ T5479] batadv0: entered promiscuous mode [ 66.217840][ T5479] $Hÿ: (slave batadv0): Enslaving as an active interface with an up link [ 66.258971][ T5485] tipc: Enabling of bearer rejected, failed to enable media [ 66.299270][ T5487] netlink: 'syz.6.542': attribute type 29 has an invalid length. [ 66.332189][ T5487] netlink: 'syz.6.542': attribute type 29 has an invalid length. [ 66.369503][ T5487] netlink: 500 bytes leftover after parsing attributes in process `syz.6.542'. [ 66.426822][ T5495] netlink: 'syz.3.546': attribute type 10 has an invalid length. [ 66.499509][ T5504] tipc: Enabling of bearer rejected, failed to enable media [ 66.885744][ T5529] netlink: 'syz.3.560': attribute type 10 has an invalid length. [ 66.917252][ T5531] tipc: Enabling of bearer rejected, failed to enable media [ 66.991811][ T5533] netlink: 996 bytes leftover after parsing attributes in process `syz.3.562'. [ 67.101565][ T3615] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x18 [ 67.155693][ T5543] bond0: entered promiscuous mode [ 67.160860][ T5543] bond_slave_0: entered promiscuous mode [ 67.166661][ T5543] bond_slave_1: entered promiscuous mode [ 67.214385][ T5543] batadv0: entered promiscuous mode [ 67.243879][ T5543] debugfs: 'hsr0' already exists in 'hsr' [ 67.249635][ T5543] Cannot create hsr debugfs directory [ 67.280640][ T5543] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 67.377040][ T5554] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5554 comm=syz.5.566 [ 67.440265][ T5558] netlink: 'syz.3.569': attribute type 1 has an invalid length. [ 67.485690][ T5558] bond2: entered promiscuous mode [ 67.490758][ T5558] bond2: entered allmulticast mode [ 67.508273][ T5558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.528817][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 67.528830][ T29] audit: type=1326 audit(67.509:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.6.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 67.557617][ T29] audit: type=1326 audit(67.509:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.6.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 67.628503][ T29] audit: type=1326 audit(67.509:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.6.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 67.651179][ T29] audit: type=1326 audit(67.509:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.6.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 67.673778][ T29] audit: type=1326 audit(67.539:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.6.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 67.696449][ T29] audit: type=1326 audit(67.539:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.6.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 67.719041][ T29] audit: type=1326 audit(67.539:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.6.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 67.741677][ T29] audit: type=1326 audit(67.539:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.6.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 67.764324][ T29] audit: type=1326 audit(67.539:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.6.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 67.786907][ T29] audit: type=1326 audit(67.539:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5565 comm="syz.6.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 67.925404][ T5576] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5576 comm=syz.6.575 [ 67.957762][ T5583] netlink: 'syz.0.578': attribute type 62 has an invalid length. [ 68.160537][ T5580] loop5: detected capacity change from 0 to 1024 [ 68.170614][ T5604] IPVS: Error connecting to the multicast addr [ 68.193754][ T5580] EXT4-fs: inline encryption not supported [ 68.199645][ T5580] EXT4-fs: Ignoring removed i_version option [ 68.251949][ T5580] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.287000][ T5580] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.577: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.323197][ T5580] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.577: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.416951][ T5580] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.577: Failed to acquire dquot type 0 [ 68.468094][ T5580] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 68.492135][ T5580] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.577: mark_inode_dirty error [ 68.544675][ T5580] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 68.578420][ T5580] EXT4-fs (loop5): 1 orphan inode deleted [ 68.584507][ T5580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.598697][ T3614] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 68.615207][ T3614] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 68.655052][ T5580] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.685086][ T5580] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.577: Invalid inode table block 1 in block_group 0 [ 68.727280][ T5580] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 68.757210][ T5580] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.577: mark_inode_dirty error [ 68.951148][ T5642] bridge_slave_1: left allmulticast mode [ 68.956832][ T5642] bridge_slave_1: left promiscuous mode [ 68.962582][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.009893][ T5642] bridge_slave_0: left promiscuous mode [ 69.015617][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.348957][ T5656] process 'syz.2.605' launched '/dev/fd/4' with NULL argv: empty string added [ 69.524966][ T5674] netlink: 'syz.6.611': attribute type 29 has an invalid length. [ 69.545075][ T5674] netlink: 'syz.6.611': attribute type 29 has an invalid length. [ 69.671249][ T5685] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=5685 comm=syz.0.616 [ 69.728426][ T5691] netlink: 'syz.0.616': attribute type 4 has an invalid length. [ 69.736174][ T5691] __nla_validate_parse: 4 callbacks suppressed [ 69.736199][ T5691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.616'. [ 69.785522][ T5685] loop0: detected capacity change from 0 to 512 [ 70.001239][ T5689] FAULT_INJECTION: forcing a failure. [ 70.001239][ T5689] name failslab, interval 1, probability 0, space 0, times 0 [ 70.013881][ T5689] CPU: 1 UID: 0 PID: 5689 Comm: syz.2.618 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.013909][ T5689] Tainted: [W]=WARN [ 70.013915][ T5689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 70.013925][ T5689] Call Trace: [ 70.013930][ T5689] [ 70.013936][ T5689] __dump_stack+0x1d/0x30 [ 70.013957][ T5689] dump_stack_lvl+0xe8/0x140 [ 70.013979][ T5689] dump_stack+0x15/0x1b [ 70.013998][ T5689] should_fail_ex+0x265/0x280 [ 70.014021][ T5689] should_failslab+0x8c/0xb0 [ 70.014042][ T5689] kmem_cache_alloc_noprof+0x69/0x4b0 [ 70.014060][ T5689] ? vm_area_dup+0x33/0x2c0 [ 70.014083][ T5689] vm_area_dup+0x33/0x2c0 [ 70.014102][ T5689] __split_vma+0xe9/0x660 [ 70.014130][ T5689] vma_modify+0xb53/0xd50 [ 70.014154][ T5689] ? find_vma+0x6c/0xa0 [ 70.014179][ T5689] ? queue_pages_test_walk+0x39c/0x3c0 [ 70.014214][ T5689] vma_modify_policy+0x101/0x130 [ 70.014244][ T5689] mbind_range+0x1b8/0x440 [ 70.014274][ T5689] ? mas_find+0x5d5/0x700 [ 70.014304][ T5689] __se_sys_mbind+0x648/0xac0 [ 70.014332][ T5689] __x64_sys_mbind+0x78/0x90 [ 70.014352][ T5689] x64_sys_call+0x2a2b/0x3000 [ 70.014372][ T5689] do_syscall_64+0xd8/0x2c0 [ 70.014402][ T5689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.014419][ T5689] RIP: 0033:0x7fed11a2f749 [ 70.014431][ T5689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.014445][ T5689] RSP: 002b:00007fed1048f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 70.014460][ T5689] RAX: ffffffffffffffda RBX: 00007fed11c85fa0 RCX: 00007fed11a2f749 [ 70.014470][ T5689] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 70.014482][ T5689] RBP: 00007fed1048f090 R08: 0000000000000000 R09: 0000000000000002 [ 70.014493][ T5689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.014503][ T5689] R13: 00007fed11c86038 R14: 00007fed11c85fa0 R15: 00007ffd3390e3a8 [ 70.014518][ T5689] [ 70.320785][ T5706] loop0: detected capacity change from 0 to 1024 [ 70.330667][ T5706] EXT4-fs: dax option not supported [ 70.340086][ T5711] netlink: 'syz.5.626': attribute type 29 has an invalid length. [ 70.341840][ T5706] random: crng reseeded on system resumption [ 70.349758][ T5711] netlink: 532 bytes leftover after parsing attributes in process `syz.5.626'. [ 70.552944][ T5739] netlink: 24 bytes leftover after parsing attributes in process `syz.5.637'. [ 70.686441][ T5748] netlink: 'syz.5.641': attribute type 29 has an invalid length. [ 70.715068][ T5748] netlink: 532 bytes leftover after parsing attributes in process `syz.5.641'. [ 71.223883][ T5787] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 71.348675][ T5796] loop6: detected capacity change from 0 to 128 [ 71.563486][ T5804] loop2: detected capacity change from 0 to 1024 [ 71.602533][ T5804] EXT4-fs: inline encryption not supported [ 71.608398][ T5804] EXT4-fs: Ignoring removed i_version option [ 71.666948][ T5804] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.711956][ T5804] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.659: lblock 2 mapped to illegal pblock 2 (length 1) [ 71.738495][ T5804] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.659: lblock 0 mapped to illegal pblock 48 (length 1) [ 71.765546][ T5815] netlink: 224 bytes leftover after parsing attributes in process `syz.6.663'. [ 71.786345][ T5804] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.659: Failed to acquire dquot type 0 [ 71.824038][ T5804] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 71.847894][ T5804] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.659: mark_inode_dirty error [ 71.875064][ T5804] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 71.908044][ T5804] EXT4-fs (loop2): 1 orphan inode deleted [ 71.924086][ T5804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.936254][ T3617] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.960513][ T3617] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 0 [ 71.983948][ T5804] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.000061][ T5804] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.659: Invalid inode table block 1 in block_group 0 [ 72.039943][ T5804] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 72.066121][ T5804] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz.2.659: mark_inode_dirty error [ 72.162128][ T5830] netlink: 'syz.0.668': attribute type 1 has an invalid length. [ 72.181314][ T5833] netlink: 'syz.5.669': attribute type 10 has an invalid length. [ 72.188351][ T5830] bond1: entered promiscuous mode [ 72.194103][ T5830] bond1: entered allmulticast mode [ 72.208375][ T5830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 72.224103][ T5833] team0: Port device dummy0 added [ 73.278325][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 73.278340][ T29] audit: type=1326 audit(73.209:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed11a2f749 code=0x7ffc0000 [ 73.307145][ T29] audit: type=1326 audit(73.209:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed11a2f749 code=0x7ffc0000 [ 73.329765][ T29] audit: type=1326 audit(73.209:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed11a2f749 code=0x7ffc0000 [ 73.352346][ T29] audit: type=1326 audit(73.209:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed11a2f749 code=0x7ffc0000 [ 73.374940][ T29] audit: type=1326 audit(73.209:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed11a2f749 code=0x7ffc0000 [ 73.397747][ T29] audit: type=1326 audit(73.219:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed11a2f749 code=0x7ffc0000 [ 73.420339][ T29] audit: type=1326 audit(73.219:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed11a2f749 code=0x7ffc0000 [ 73.442925][ T29] audit: type=1326 audit(73.219:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed11a2f749 code=0x7ffc0000 [ 73.465571][ T29] audit: type=1326 audit(73.219:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed11a2f749 code=0x7ffc0000 [ 73.488221][ T29] audit: type=1326 audit(73.219:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5876 comm="syz.2.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed11a2f749 code=0x7ffc0000 [ 73.744424][ T5889] tipc: Enabling of bearer rejected, failed to enable media [ 73.756582][ T5887] rdma_op ffff888119c5a580 conn xmit_rdma 0000000000000000 [ 73.768574][ T5891] loop0: detected capacity change from 0 to 512 [ 73.793611][ T5891] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.690: error while reading EA inode 32 err=-116 [ 73.840740][ T5891] EXT4-fs (loop0): Remounting filesystem read-only [ 73.866667][ T5891] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 73.889432][ T5894] bond2: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 73.918194][ T5891] EXT4-fs (loop0): 1 orphan inode deleted [ 73.929773][ T5891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.949916][ T5894] bond2 (unregistering): Released all slaves [ 74.018263][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.383594][ T5918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.700'. [ 74.392793][ T5918] IPVS: Error connecting to the multicast addr [ 74.454434][ T5924] tipc: Enabling of bearer rejected, failed to enable media [ 74.487899][ T5926] loop0: detected capacity change from 0 to 2048 [ 74.512019][ T5926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.525884][ T5926] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.703: bg 0: block 234: padding at end of block bitmap is not set [ 74.547932][ T5926] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 117 [ 74.560472][ T5926] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.560472][ T5926] [ 74.788565][ T5956] netlink: 'syz.6.713': attribute type 10 has an invalid length. [ 74.799994][ T5956] team0: Port device dummy0 added [ 74.832334][ T3644] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 74.844558][ T3644] EXT4-fs (loop0): This should not happen!! Data will be lost [ 74.844558][ T3644] [ 74.854193][ T3644] EXT4-fs (loop0): Total free blocks count 0 [ 74.860169][ T3644] EXT4-fs (loop0): Free/Dirty block details [ 74.866087][ T3644] EXT4-fs (loop0): free_blocks=0 [ 74.871017][ T3644] EXT4-fs (loop0): dirty_blocks=16 [ 74.876111][ T3644] EXT4-fs (loop0): Block reservation details [ 74.914380][ T5961] netlink: 32 bytes leftover after parsing attributes in process `syz.6.715'. [ 74.923525][ T5961] netlink: 'syz.6.715': attribute type 1 has an invalid length. [ 74.931312][ T5961] netlink: 224 bytes leftover after parsing attributes in process `syz.6.715'. [ 74.946434][ T5968] tipc: Enabling of bearer rejected, failed to enable media [ 75.055569][ T5982] loop0: detected capacity change from 0 to 2048 [ 75.084280][ T5982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.285740][ T5989] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 75.619055][ T6004] loop5: detected capacity change from 0 to 1024 [ 75.625738][ T6004] EXT4-fs: inline encryption not supported [ 75.631608][ T6004] EXT4-fs: Ignoring removed i_version option [ 75.638196][ T6004] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.650459][ T6004] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.732: lblock 2 mapped to illegal pblock 2 (length 1) [ 75.664556][ T6004] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.732: lblock 0 mapped to illegal pblock 48 (length 1) [ 75.680816][ T6004] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.732: Failed to acquire dquot type 0 [ 75.692268][ T6004] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 75.701751][ T6004] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.732: mark_inode_dirty error [ 75.719790][ T6004] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 75.731090][ T6004] EXT4-fs (loop5): 1 orphan inode deleted [ 75.737265][ T6004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.799000][ T3614] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.814822][ T3614] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 75.840082][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.840269][ T6004] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.859117][ T6004] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz.5.732: Invalid inode table block 1 in block_group 0 [ 75.871901][ T6004] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 75.881476][ T6004] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz.5.732: mark_inode_dirty error [ 75.926753][ T6011] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 75.941152][ T6011] bond2: entered promiscuous mode [ 75.946191][ T6011] bond2: entered allmulticast mode [ 75.952837][ T6011] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.009262][ T6019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.738'. [ 76.110773][ T6030] tipc: Enabling of bearer rejected, failed to enable media [ 76.112534][ T6028] 9p: Bad value for 'source' [ 76.170970][ T6038] netlink: 'syz.0.747': attribute type 1 has an invalid length. [ 76.185969][ T6038] bond3: entered promiscuous mode [ 76.191206][ T6038] bond3: entered allmulticast mode [ 76.206374][ T6038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.229571][ T6050] netlink: 40 bytes leftover after parsing attributes in process `syz.5.751'. [ 76.264153][ T6057] tipc: Enabling of bearer rejected, failed to enable media [ 76.396174][ T6073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6073 comm=syz.5.761 [ 76.463650][ T6077] netlink: 'syz.3.763': attribute type 1 has an invalid length. [ 76.476779][ T6077] bond3: entered promiscuous mode [ 76.481891][ T6077] bond3: entered allmulticast mode [ 76.487504][ T6077] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.518241][ T6073] infiniband !yz!: set active [ 76.523092][ T6073] infiniband !yz!: added team_slave_0 [ 76.537666][ T6073] RDS/IB: !yz!: added [ 76.541879][ T6073] smc: adding ib device !yz! with port count 1 [ 76.548224][ T6073] smc: ib device !yz! port 1 has no pnetid [ 76.581065][ T6089] tipc: Enabling of bearer rejected, failed to enable media [ 76.753808][ T6095] team0: Port device dummy0 removed [ 76.773437][ T6095] bridge_slave_0: left allmulticast mode [ 76.779243][ T6095] bridge_slave_0: left promiscuous mode [ 76.784902][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.804394][ T6103] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6103 comm=syz.6.770 [ 76.811163][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 76.816775][ T6103] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6103 comm=syz.6.770 [ 76.843219][ T6095] bridge_slave_1: left allmulticast mode [ 76.848974][ T6095] bridge_slave_1: left promiscuous mode [ 76.854673][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.919198][ T6095] bond0: (slave bond_slave_0): Releasing backup interface [ 76.930998][ T6095] bond0: (slave bond_slave_1): Releasing backup interface [ 76.943294][ T6095] team0: Port device team_slave_0 removed [ 76.955450][ T6095] team0: Port device team_slave_1 removed [ 76.975417][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.982879][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.994816][ T6118] netlink: 'syz.6.770': attribute type 10 has an invalid length. [ 77.006661][ T6119] netlink: 32 bytes leftover after parsing attributes in process `syz.5.779'. [ 77.006715][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.023179][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.056417][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.770'. [ 77.076896][ T6095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 77.292517][ T6118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.313560][ T6118] team0: Port device bond0 added [ 77.361239][ T6133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=6133 comm=syz.0.782 [ 77.406261][ T6120] team0 (unregistering): Port device bond0 removed [ 77.444297][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 77.499588][ T6136] netlink: 60 bytes leftover after parsing attributes in process `syz.0.782'. [ 77.703533][ T6149] netlink: 'syz.3.791': attribute type 1 has an invalid length. [ 77.724120][ T6149] bond4: entered promiscuous mode [ 77.729423][ T6149] bond4: entered allmulticast mode [ 77.735647][ T6149] 8021q: adding VLAN 0 to HW filter on device bond4 [ 77.861859][ T6165] 9p: Bad value for 'source' [ 77.892548][ T6167] netlink: 24 bytes leftover after parsing attributes in process `syz.5.797'. [ 77.901852][ T6167] IPVS: Error connecting to the multicast addr [ 78.018410][ T6175] loop5: detected capacity change from 0 to 1024 [ 78.031633][ T6175] EXT4-fs: Ignoring removed oldalloc option [ 78.072439][ T6175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.092148][ T6173] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.800: lblock 0 mapped to illegal pblock 0 (length 1) [ 78.105576][ T6173] EXT4-fs (loop5): Remounting filesystem read-only [ 78.759716][ T4387] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 79.109933][ T29] kauditd_printk_skb: 871 callbacks suppressed [ 79.109948][ T29] audit: type=1400 audit(79.089:5029): avc: denied { shutdown } for pid=6185 comm="syz.2.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.186681][ T29] audit: type=1326 audit(79.159:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 79.226554][ T29] audit: type=1326 audit(79.159:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 79.249273][ T29] audit: type=1326 audit(79.159:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 79.271930][ T29] audit: type=1326 audit(79.159:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 79.294555][ T29] audit: type=1326 audit(79.159:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.3.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 79.294646][ T29] audit: type=1326 audit(79.159:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.5.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 79.294668][ T29] audit: type=1326 audit(79.159:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.5.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 79.294704][ T29] audit: type=1326 audit(79.159:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.5.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 79.294725][ T29] audit: type=1326 audit(79.159:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6196 comm="syz.5.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f7b579af749 code=0x7ffc0000 [ 79.299300][ T6205] netlink: 'syz.6.808': attribute type 10 has an invalid length. [ 79.381173][ T6217] FAULT_INJECTION: forcing a failure. [ 79.381173][ T6217] name failslab, interval 1, probability 0, space 0, times 0 [ 79.381203][ T6217] CPU: 0 UID: 0 PID: 6217 Comm: syz.2.814 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 79.381231][ T6217] Tainted: [W]=WARN [ 79.381236][ T6217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.381310][ T6217] Call Trace: [ 79.381316][ T6217] [ 79.381324][ T6217] __dump_stack+0x1d/0x30 [ 79.381346][ T6217] dump_stack_lvl+0xe8/0x140 [ 79.381365][ T6217] dump_stack+0x15/0x1b [ 79.381382][ T6217] should_fail_ex+0x265/0x280 [ 79.381454][ T6217] should_failslab+0x8c/0xb0 [ 79.381474][ T6217] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 79.381494][ T6217] ? __alloc_skb+0x324/0x4d0 [ 79.381519][ T6217] __alloc_skb+0x324/0x4d0 [ 79.381550][ T6217] ? __alloc_skb+0x24d/0x4d0 [ 79.381585][ T6217] alloc_skb_with_frags+0x7d/0x470 [ 79.381613][ T6217] ? terminate_walk+0x1e6/0x210 [ 79.381638][ T6217] ? path_openat+0x1d88/0x23b0 [ 79.381667][ T6217] virtio_transport_alloc_skb+0x91/0x710 [ 79.381742][ T6217] virtio_transport_send_pkt_info+0x43d/0x820 [ 79.381790][ T6217] virtio_transport_notify_buffer_size+0xb8/0xe0 [ 79.381825][ T6217] ? __pfx_virtio_transport_notify_buffer_size+0x10/0x10 [ 79.381891][ T6217] vsock_update_buffer_size+0xc4/0x110 [ 79.381913][ T6217] vsock_connectible_setsockopt+0x68f/0x6d0 [ 79.381935][ T6217] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 79.381954][ T6217] __sys_setsockopt+0x184/0x200 [ 79.382098][ T6217] __x64_sys_setsockopt+0x64/0x80 [ 79.382123][ T6217] x64_sys_call+0x21d5/0x3000 [ 79.382213][ T6217] do_syscall_64+0xd8/0x2c0 [ 79.382248][ T6217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.382270][ T6217] RIP: 0033:0x7fed11a2f749 [ 79.382284][ T6217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.382329][ T6217] RSP: 002b:00007fed1048f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 79.382345][ T6217] RAX: ffffffffffffffda RBX: 00007fed11c85fa0 RCX: 00007fed11a2f749 [ 79.382356][ T6217] RDX: 0000000000000001 RSI: 0000000000000028 RDI: 0000000000000006 [ 79.382369][ T6217] RBP: 00007fed1048f090 R08: 0000000000000112 R09: 0000000000000000 [ 79.382383][ T6217] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 79.382396][ T6217] R13: 00007fed11c86038 R14: 00007fed11c85fa0 R15: 00007ffd3390e3a8 [ 79.382477][ T6217] [ 79.486417][ T6227] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 79.611859][ T6241] netlink: 'syz.6.823': attribute type 10 has an invalid length. [ 80.205527][ T6275] __nla_validate_parse: 6 callbacks suppressed [ 80.205542][ T6275] netlink: 14 bytes leftover after parsing attributes in process `syz.6.837'. [ 80.230799][ T6277] hub 1-0:1.0: USB hub found [ 80.235419][ T6277] hub 1-0:1.0: 8 ports detected [ 80.314135][ T6287] netlink: 'syz.0.842': attribute type 10 has an invalid length. [ 80.328782][ T6287] netlink: 'syz.0.842': attribute type 10 has an invalid length. [ 80.337501][ T6287] team0: Port device dummy0 removed [ 80.359827][ T6287] dummy0: entered promiscuous mode [ 80.387463][ T6287] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 80.637069][ T6300] loop2: detected capacity change from 0 to 512 [ 80.689887][ T6300] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.847: error while reading EA inode 32 err=-116 [ 80.765819][ T6300] EXT4-fs (loop2): Remounting filesystem read-only [ 80.772701][ T6300] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 80.783074][ T6298] xt_connbytes: Forcing CT accounting to be enabled [ 80.789920][ T6298] Cannot find set identified by id 0 to match [ 80.796151][ T6300] EXT4-fs (loop2): 1 orphan inode deleted [ 80.802805][ T6300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.815685][ T6298] netlink: 72 bytes leftover after parsing attributes in process `syz.0.845'. [ 80.958561][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.995143][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.849'. [ 81.121365][ T6313] hub 1-0:1.0: USB hub found [ 81.126249][ T6313] hub 1-0:1.0: 8 ports detected [ 81.225844][ T6321] netlink: 152 bytes leftover after parsing attributes in process `syz.6.850'. [ 81.247249][ T6322] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.708153][ T6329] netlink: 'syz.3.856': attribute type 29 has an invalid length. [ 81.744985][ T6329] netlink: 'syz.3.856': attribute type 29 has an invalid length. [ 81.789801][ T6329] netlink: 500 bytes leftover after parsing attributes in process `syz.3.856'. [ 82.408762][ T6364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=6364 comm=syz.5.868 [ 82.468077][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.868'. [ 82.552494][ T6364] netlink: 60 bytes leftover after parsing attributes in process `syz.5.868'. [ 83.414131][ T6388] netlink: 'syz.2.876': attribute type 10 has an invalid length. [ 83.541568][ T6399] tipc: Enabling of bearer rejected, failed to enable media [ 84.158871][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 84.158885][ T29] audit: type=1400 audit(84.139:5289): avc: denied { execute } for pid=6424 comm="syz.6.889" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.207552][ T6431] loop2: detected capacity change from 0 to 1024 [ 84.217075][ T6431] EXT4-fs: Ignoring removed orlov option [ 84.234269][ T29] audit: type=1400 audit(84.189:5290): avc: denied { mounton } for pid=6421 comm="syz.2.888" path="/168/bus" dev="tmpfs" ino=906 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.439368][ T29] audit: type=1326 audit(84.419:5291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 84.470352][ T29] audit: type=1326 audit(84.439:5292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 84.492994][ T29] audit: type=1326 audit(84.439:5293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 84.495868][ T6431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.515701][ T29] audit: type=1326 audit(84.439:5294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 84.515725][ T29] audit: type=1326 audit(84.439:5295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 84.573243][ T29] audit: type=1326 audit(84.439:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 84.595884][ T29] audit: type=1326 audit(84.439:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 84.618536][ T29] audit: type=1326 audit(84.439:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6434 comm="syz.6.890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa2c757f749 code=0x7ffc0000 [ 84.687644][ T6445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 84.767845][ T6456] netlink: 'syz.6.898': attribute type 10 has an invalid length. [ 84.786085][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.882081][ T6464] tipc: Enabling of bearer rejected, failed to enable media [ 84.922182][ T6468] netlink: 'syz.6.904': attribute type 29 has an invalid length. [ 84.939112][ T6468] netlink: 'syz.6.904': attribute type 29 has an invalid length. [ 84.971151][ T6468] netlink: 500 bytes leftover after parsing attributes in process `syz.6.904'. [ 84.980144][ T6468] unsupported nla_type 66 [ 85.056309][ T6479] sch_fq: defrate 0 ignored. [ 85.140912][ T6481] netlink: 'syz.6.910': attribute type 4 has an invalid length. [ 85.148616][ T6481] netlink: 17 bytes leftover after parsing attributes in process `syz.6.910'. [ 85.164491][ T6184] IPVS: starting estimator thread 0... [ 85.180495][ T6487] IPVS: Error connecting to the multicast addr [ 85.229845][ T6493] hub 1-0:1.0: USB hub found [ 85.244639][ T6493] hub 1-0:1.0: 8 ports detected [ 85.258487][ T6491] IPVS: using max 2400 ests per chain, 120000 per kthread [ 85.453881][ T6505] loop0: detected capacity change from 0 to 512 [ 85.493169][ T6505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.509079][ T6505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.531603][ T6511] __nla_validate_parse: 1 callbacks suppressed [ 85.531616][ T6511] netlink: 24 bytes leftover after parsing attributes in process `syz.5.922'. [ 85.591795][ T6513] loop5: detected capacity change from 0 to 8192 [ 85.599875][ T6513] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 85.618905][ T6513] netlink: 76 bytes leftover after parsing attributes in process `syz.5.923'. [ 85.804079][ T6526] netlink: 'syz.6.929': attribute type 10 has an invalid length. [ 86.029125][ T6543] netlink: 32 bytes leftover after parsing attributes in process `syz.3.935'. [ 86.071556][ T6548] tipc: Enabling of bearer rejected, failed to enable media [ 86.195865][ T6554] hub 1-0:1.0: USB hub found [ 86.219852][ T6554] hub 1-0:1.0: 8 ports detected [ 86.241330][ T6560] FAULT_INJECTION: forcing a failure. [ 86.241330][ T6560] name failslab, interval 1, probability 0, space 0, times 0 [ 86.254015][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz.5.944 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.254124][ T6560] Tainted: [W]=WARN [ 86.254131][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.254144][ T6560] Call Trace: [ 86.254151][ T6560] [ 86.254158][ T6560] __dump_stack+0x1d/0x30 [ 86.254180][ T6560] dump_stack_lvl+0xe8/0x140 [ 86.254257][ T6560] dump_stack+0x15/0x1b [ 86.254316][ T6560] should_fail_ex+0x265/0x280 [ 86.254336][ T6560] should_failslab+0x8c/0xb0 [ 86.254396][ T6560] __kmalloc_noprof+0xb9/0x5a0 [ 86.254420][ T6560] ? tun_device_event+0x103/0x9a0 [ 86.254443][ T6560] tun_device_event+0x103/0x9a0 [ 86.254463][ T6560] ? bond_netdev_event+0x5c/0x750 [ 86.254541][ T6560] ? inetdev_event+0x54a/0xba0 [ 86.254563][ T6560] ? macvlan_device_event+0x76/0x4f0 [ 86.254607][ T6560] ? __pfx_tun_device_event+0x10/0x10 [ 86.254628][ T6560] raw_notifier_call_chain+0x6f/0x1b0 [ 86.254660][ T6560] ? netif_change_tx_queue_len+0x112/0x200 [ 86.254683][ T6560] netif_change_tx_queue_len+0x126/0x200 [ 86.254727][ T6560] dev_change_tx_queue_len+0xc0/0x170 [ 86.254751][ T6560] dev_ifsioc+0x1a1/0xaa0 [ 86.254777][ T6560] ? mutex_lock+0x58/0x90 [ 86.254833][ T6560] dev_ioctl+0x70a/0x960 [ 86.254930][ T6560] sock_do_ioctl+0x197/0x220 [ 86.254964][ T6560] sock_ioctl+0x41b/0x610 [ 86.254998][ T6560] ? __pfx_sock_ioctl+0x10/0x10 [ 86.255051][ T6560] __se_sys_ioctl+0xce/0x140 [ 86.255137][ T6560] __x64_sys_ioctl+0x43/0x50 [ 86.255163][ T6560] x64_sys_call+0x14b0/0x3000 [ 86.255185][ T6560] do_syscall_64+0xd8/0x2c0 [ 86.255220][ T6560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.255244][ T6560] RIP: 0033:0x7f7b579af749 [ 86.255257][ T6560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.255272][ T6560] RSP: 002b:00007f7b5640f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.255289][ T6560] RAX: ffffffffffffffda RBX: 00007f7b57c05fa0 RCX: 00007f7b579af749 [ 86.255416][ T6560] RDX: 0000200000000100 RSI: 0000000000008943 RDI: 0000000000000005 [ 86.255475][ T6560] RBP: 00007f7b5640f090 R08: 0000000000000000 R09: 0000000000000000 [ 86.255486][ T6560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.255496][ T6560] R13: 00007f7b57c06038 R14: 00007f7b57c05fa0 R15: 00007fff47452488 [ 86.255512][ T6560] [ 86.255519][ T6560] syz_tun: refused to change device tx_queue_len [ 86.544428][ T6184] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 86.562588][ T6184] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.580374][ T6563] loop5: detected capacity change from 0 to 2048 [ 86.616909][ T6563] syz_tun: refused to change device tx_queue_len [ 86.752669][ T6576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=6576 comm=syz.0.950 [ 86.792267][ T6575] loop2: detected capacity change from 0 to 1024 [ 86.828544][ T6579] netlink: 'syz.3.954': attribute type 1 has an invalid length. [ 86.836838][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.950'. [ 86.846786][ T6575] EXT4-fs: inline encryption not supported [ 86.852692][ T6575] EXT4-fs: Ignoring removed i_version option [ 86.863529][ T6583] netlink: 24 bytes leftover after parsing attributes in process `syz.5.952'. [ 86.888883][ T6579] bond5: entered promiscuous mode [ 86.893916][ T6579] bond5: entered allmulticast mode [ 86.899229][ T6579] 8021q: adding VLAN 0 to HW filter on device bond5 [ 86.930442][ T6576] netlink: 60 bytes leftover after parsing attributes in process `syz.0.950'. [ 87.049683][ T6575] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.073276][ T6575] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.951: lblock 2 mapped to illegal pblock 2 (length 1) [ 87.104917][ T6575] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.951: lblock 0 mapped to illegal pblock 48 (length 1) [ 87.282909][ T6601] netlink: 'syz.6.958': attribute type 10 has an invalid length. [ 87.301469][ T6575] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.951: Failed to acquire dquot type 0 [ 87.356832][ T6575] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 87.378212][ T6607] hub 1-0:1.0: USB hub found [ 87.383004][ T6607] hub 1-0:1.0: 8 ports detected [ 87.422202][ T6609] netlink: 'syz.6.961': attribute type 29 has an invalid length. [ 87.457189][ T6575] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.951: mark_inode_dirty error [ 87.469903][ T6609] netlink: 'syz.6.961': attribute type 29 has an invalid length. [ 87.495580][ T6609] netlink: 500 bytes leftover after parsing attributes in process `syz.6.961'. [ 87.512467][ T6575] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 87.560458][ T6575] EXT4-fs (loop2): 1 orphan inode deleted [ 87.578927][ T1831] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 87.597214][ T6575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.637561][ T1831] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 87.681723][ T6620] loop6: detected capacity change from 0 to 256 [ 87.705975][ T6620] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 87.923377][ T6642] netlink: 24 bytes leftover after parsing attributes in process `syz.6.977'. [ 87.958034][ T6644] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.098139][ T6654] hub 1-0:1.0: USB hub found [ 88.127800][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.141059][ T6654] hub 1-0:1.0: 8 ports detected [ 88.183464][ T3316] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 88.238526][ T3316] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 88.257128][ T6662] netlink: 500 bytes leftover after parsing attributes in process `syz.6.986'. [ 88.268325][ T3316] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 88.358205][ T6668] tipc: Enabling of bearer rejected, failed to enable media [ 88.513445][ T6679] validate_nla: 2 callbacks suppressed [ 88.513458][ T6679] netlink: 'syz.2.993': attribute type 1 has an invalid length. [ 88.544224][ T6683] netlink: 16 bytes leftover after parsing attributes in process `syz.5.995'. [ 88.627684][ T6689] loop6: detected capacity change from 0 to 1024 [ 88.650114][ T6689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.704044][ T6689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.770418][ T4686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.880755][ T6710] netlink: 'syz.2.1007': attribute type 1 has an invalid length. [ 88.937526][ T6719] hub 1-0:1.0: USB hub found [ 88.942322][ T6719] hub 1-0:1.0: 8 ports detected [ 89.294729][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 89.294813][ T29] audit: type=1326 audit(89.269:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.3.1012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7483ff749 code=0x0 [ 89.355753][ T29] audit: type=1326 audit(89.319:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 89.378522][ T29] audit: type=1326 audit(89.319:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 89.401255][ T29] audit: type=1326 audit(89.319:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 89.423992][ T29] audit: type=1326 audit(89.319:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 89.446753][ T29] audit: type=1326 audit(89.319:5629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 89.469355][ T29] audit: type=1326 audit(89.319:5630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 89.492119][ T29] audit: type=1326 audit(89.319:5631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 89.514808][ T29] audit: type=1400 audit(89.319:5632): avc: denied { setopt } for pid=6720 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.533809][ T29] audit: type=1326 audit(89.319:5633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6720 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7483ff749 code=0x7ffc0000 [ 89.731941][ T6749] netlink: 'syz.5.1023': attribute type 10 has an invalid length. [ 89.785887][ T6751] netlink: 'syz.6.1024': attribute type 10 has an invalid length. [ 89.937853][ T6764] IPVS: Error connecting to the multicast addr [ 90.130837][ T6773] loop5: detected capacity change from 0 to 512 [ 90.184333][ T6773] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.366894][ T6773] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.007513][ T6790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=103 sclass=netlink_route_socket pid=6790 comm=syz.5.1041 [ 91.058065][ T6790] __nla_validate_parse: 4 callbacks suppressed [ 91.058079][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1041'. [ 91.108907][ T6793] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1041'. [ 91.485330][ T6799] netlink: 'syz.3.1045': attribute type 10 has an invalid length. [ 91.652046][ T6807] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1044'. [ 92.086244][ T3638] ================================================================== [ 92.094350][ T3638] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 92.102868][ T3638] [ 92.105184][ T3638] write to 0xffff88811a9aa508 of 44 bytes by task 6835 on cpu 0: [ 92.112881][ T3638] tty_set_termios+0xc0/0x8c0 [ 92.117555][ T3638] set_termios+0x35b/0x4d0 [ 92.121967][ T3638] tty_mode_ioctl+0x379/0x5c0 [ 92.126656][ T3638] n_tty_ioctl_helper+0x91/0x210 [ 92.131606][ T3638] n_tty_ioctl+0x101/0x230 [ 92.136027][ T3638] tty_ioctl+0x83f/0xb80 [ 92.140266][ T3638] __se_sys_ioctl+0xce/0x140 [ 92.144862][ T3638] __x64_sys_ioctl+0x43/0x50 [ 92.149462][ T3638] x64_sys_call+0x14b0/0x3000 [ 92.154137][ T3638] do_syscall_64+0xd8/0x2c0 [ 92.158643][ T3638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.164527][ T3638] [ 92.166838][ T3638] read to 0xffff88811a9aa521 of 1 bytes by task 3638 on cpu 1: [ 92.174365][ T3638] n_tty_receive_char_flow_ctrl+0x23/0x1d0 [ 92.180168][ T3638] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 92.185715][ T3638] tty_port_default_lookahead_buf+0x91/0xc0 [ 92.191597][ T3638] flush_to_ldisc+0x288/0x340 [ 92.196264][ T3638] process_scheduled_works+0x4ce/0x9d0 [ 92.201717][ T3638] worker_thread+0x582/0x770 [ 92.206294][ T3638] kthread+0x489/0x510 [ 92.210351][ T3638] ret_from_fork+0x149/0x290 [ 92.214930][ T3638] ret_from_fork_asm+0x1a/0x30 [ 92.219684][ T3638] [ 92.221987][ T3638] value changed: 0x11 -> 0xcd [ 92.226642][ T3638] [ 92.228950][ T3638] Reported by Kernel Concurrency Sanitizer on: [ 92.235081][ T3638] CPU: 1 UID: 0 PID: 3638 Comm: kworker/u8:36 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.246607][ T3638] Tainted: [W]=WARN [ 92.250389][ T3638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.260428][ T3638] Workqueue: events_unbound flush_to_ldisc [ 92.266227][ T3638] ==================================================================