last executing test programs: 3.46807523s ago: executing program 1 (id=780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) eventfd2(0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) unshare(0x400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@private, 0x0, 0xecdf}, {@in6=@empty, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x800}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x4050) sendmmsg$sock(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="93f25900b594575462c5e27ce4747bcf027f07432c14f3cbde869135ac4d51320ba5c95e23da203a3bb5d901ae4d57651321d92b261198bee7259c6e6c06121de437e9224b826c7cb67ee3775847b2614030590fa65086f90114603326cb1135c7cce687641d", 0x66}], 0x1, &(0x7f0000000100)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff00}}], 0x30}}], 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r4, r4, 0x0) 3.056741572s ago: executing program 4 (id=791): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x600, &(0x7f00000004c0)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.911936154s ago: executing program 4 (id=796): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0xfffffffd, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) dup(r0) timer_create(0x0, 0x0, &(0x7f00000017c0)=0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x40005}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10006, 0x1cb, 0x12d61, 0x12d58}}, 0x44) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) timer_delete(r1) sendfile(r3, r3, 0x0, 0x1000000201005) io_setup(0x9, &(0x7f0000000340)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000300)={[{@usrquota}, {@nodelalloc}, {@resuid}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r4, 0x0, 0x0, 0x1001f0) 2.760497365s ago: executing program 1 (id=800): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r2, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 2.106890576s ago: executing program 2 (id=813): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x300, 0x20}, @exit], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x237}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() 1.922559921s ago: executing program 0 (id=814): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000440), &(0x7f0000000080)='%pB \x00'}, 0x20) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000)=0x3, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, 0x0, 0x2000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x573, &(0x7f0000000cc0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r8, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), 0x0}, 0x20) 1.875053234s ago: executing program 1 (id=815): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x1}, 0x18) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) 1.868477665s ago: executing program 3 (id=816): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 1.770725222s ago: executing program 1 (id=817): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000440), &(0x7f0000000080)='%pB \x00'}, 0x20) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000)=0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, 0x0, 0x2000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x573, &(0x7f0000000cc0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r8, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) 1.228818785s ago: executing program 2 (id=818): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1.211627386s ago: executing program 0 (id=819): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0), 0xee, 0x480, &(0x7f00000012c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) 1.162789439s ago: executing program 2 (id=820): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) socket(0x10, 0x80002, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) 1.16175621s ago: executing program 1 (id=821): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 1.160833179s ago: executing program 4 (id=822): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0x2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 1.140722361s ago: executing program 2 (id=823): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) 1.117389683s ago: executing program 2 (id=824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 1.033025499s ago: executing program 2 (id=825): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r2, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r2, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b556e3129ca"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 1.03250038s ago: executing program 4 (id=826): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/icmp6\x00') close_range(r0, r1, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) write$binfmt_format(r3, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff18110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fcntl$dupfd(r2, 0x0, r6) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000007c0)={0x116c, 0x12, 0x400, 0x70bd2c, 0x25dfdbfd, {0x28, 0x4, 0x1, 0xf9, {0x4e23, 0x4e20, [0x1ff, 0x8, 0x400, 0x299de25a], [0x3, 0x8, 0x1], 0x0, [0x4, 0x9e]}, 0x1000, 0xffffff7f}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "adcc5d887639c6f59d53a141a8328c4205f4a557c7ac712cc975c6cf534f9cff309f91d4609358ae1d23d64cf89de921407909f8c80f3acc5a1d0096e41804ed24182d7464f5b1f97b409e4bd96c3b7eab3d435d4d2b2b439a7488138c060e077acd5ef6a428a989970066583094c52d0c45ffb3a3e0d5c9af0a"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "a37982bdda26a93ee303f2570cb9bded3c652c887a57837374e90a43850e294000895ec0c6c9a9e3a779a4b237e918789cc1feed4f66edced08fcaac78fe1f7a8f3f390118edbbadf8f9d6694c197e608198ff6d900b9dfa6bc0e96225b6f023fd96999cd83f6f3bf6a27a3a4f16b9b86ff3f3a1a5b2aa1a2e2bf5a39b09ecb815db54c89f59b0506dc285e95f858e92"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "c8c977"}]}, 0x116c}, 0x1, 0x0, 0x0, 0x4000000}, 0x152712a304d5229f) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) flistxattr(r8, &(0x7f0000000280)=""/238, 0xee) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 962.706905ms ago: executing program 3 (id=827): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x1}, 0x18) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) 891.876811ms ago: executing program 0 (id=828): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_io_uring_setup(0x3b85, &(0x7f00000014c0)={0x0, 0xad84, 0x1, 0xa2, 0x339}, &(0x7f0000000180), &(0x7f0000001440)) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x7fffffff, @empty, 0xfffffffe}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x48, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "501d85d4c30be8f7096bcac751c47a7064c0905ddbda9581", "babcb20957603da1f0d40bdeece64d1a6888200cff6eb0e27af68eaa18f3616e"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x930, &(0x7f0000000800)) move_pages(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) ptrace$poke(0x21, r5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@empty, @in6=@private2}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xe8) mmap$IORING_OFF_SQES(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x10000000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_init() 883.851481ms ago: executing program 3 (id=829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 743.837792ms ago: executing program 3 (id=830): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 595.857414ms ago: executing program 3 (id=831): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000440), &(0x7f0000000080)='%pB \x00'}, 0x20) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000000)=0x3, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgsnd(0x0, 0x0, 0x2000, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x573, &(0x7f0000000cc0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r8, &(0x7f0000000700)=ANY=[@ANYBLOB="08000000020000000b"], 0x0) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), 0x0}, 0x20) 407.377598ms ago: executing program 0 (id=832): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a42438, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRES32=r0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) renameat2(r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000040)='./file1\x00', 0x0) 401.919518ms ago: executing program 4 (id=833): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) socket(0x10, 0x80002, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, 0x0, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) 273.137419ms ago: executing program 3 (id=834): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) 260.916339ms ago: executing program 0 (id=835): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={0x0, r2, 0x0, 0x1}, 0x18) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x8004}, 0x0) 128.99982ms ago: executing program 0 (id=836): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) 108.034321ms ago: executing program 4 (id=837): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) 0s ago: executing program 1 (id=838): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0), 0xee, 0x480, &(0x7f00000012c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r1]) kernel console output (not intermixed with test programs): lexible block group [ 39.215959][ T3522] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 39.246531][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.260161][ T3521] team0: Port device dummy0 removed [ 39.265560][ T3522] EXT4-fs (loop0): mount failed [ 39.271258][ T3532] loop1: detected capacity change from 0 to 1024 [ 39.299205][ T3521] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 39.331700][ T3532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.363876][ T3543] ref_ctr increment failed for inode: 0x21 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104b3de80 [ 39.386984][ T3527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10'. [ 39.436633][ T3521] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.9: missing EA_INODE flag [ 39.457653][ T3515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.468480][ T3521] EXT4-fs (loop1): Remounting filesystem read-only [ 39.493995][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.533203][ T3552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'. [ 39.542159][ T3552] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17'. [ 39.591534][ T3555] ref_ctr increment failed for inode: 0x27 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104b3de80 [ 39.724548][ T3549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'. [ 39.745613][ T3562] ref_ctr increment failed for inode: 0x2d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad96540 [ 39.763179][ T3563] netlink: 'syz.1.20': attribute type 10 has an invalid length. [ 39.773670][ T3563] bond0: (slave dummy0): Releasing backup interface [ 39.784069][ T3563] team0: Port device dummy0 added [ 39.794787][ T3563] netlink: 'syz.1.20': attribute type 10 has an invalid length. [ 39.805225][ T3563] team0: Port device dummy0 removed [ 39.814048][ T3563] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 39.831676][ T3563] loop1: detected capacity change from 0 to 1024 [ 39.850191][ T3563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.865762][ T3563] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.20: missing EA_INODE flag [ 39.877986][ T3563] EXT4-fs (loop1): Remounting filesystem read-only [ 39.900750][ T3563] syz.1.20 (3563) used greatest stack depth: 10504 bytes left [ 39.908981][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.945489][ T3568] loop1: detected capacity change from 0 to 1024 [ 39.954045][ T3568] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 39.968137][ T3515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.046316][ T3572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3572 comm=syz.3.24 [ 40.058694][ T3572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3572 comm=syz.3.24 [ 40.138540][ T3578] ref_ctr increment failed for inode: 0x26 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad95100 [ 40.304796][ T3582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.25'. [ 40.485092][ T3592] loop3: detected capacity change from 0 to 1024 [ 40.495670][ T3592] EXT4-fs: Ignoring removed orlov option [ 40.516126][ T3592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.534863][ T3592] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 40.543218][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 40.687534][ T3600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.31'. [ 40.973139][ T3603] ref_ctr increment failed for inode: 0x3f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad96c00 [ 41.069585][ T3606] ref_ctr increment failed for inode: 0x45 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104b39b00 [ 41.213024][ T3515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.229921][ T3610] loop1: detected capacity change from 0 to 512 [ 41.258564][ T3599] syz.4.31 (3599) used greatest stack depth: 9680 bytes left [ 41.267174][ T3610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.282366][ T3610] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.307355][ T1872] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.328898][ T1357] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.350023][ T1357] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.361842][ T1357] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.376969][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.394845][ T3616] ref_ctr increment failed for inode: 0x38 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104471440 [ 41.427994][ T3618] ref_ctr increment failed for inode: 0x3d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104476540 [ 41.446548][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.457889][ T3620] netem: change failed [ 41.465705][ T3620] netlink: 'syz.1.39': attribute type 10 has an invalid length. [ 41.484953][ T3620] bond0: (slave dummy0): Releasing backup interface [ 41.496561][ T3624] ref_ctr increment failed for inode: 0x3c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104476c00 [ 41.512294][ T3620] team0: Port device dummy0 added [ 41.531182][ T3627] netlink: 'syz.1.39': attribute type 10 has an invalid length. [ 41.545932][ T3627] team0: Port device dummy0 removed [ 41.552854][ T3629] ref_ctr increment failed for inode: 0x3e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104471440 [ 41.556516][ T3627] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.573560][ T3631] netem: change failed [ 41.586964][ T3631] netlink: 'syz.4.42': attribute type 10 has an invalid length. [ 41.595166][ T3620] loop1: detected capacity change from 0 to 1024 [ 41.621316][ T3626] syzkaller0: entered promiscuous mode [ 41.626865][ T3626] syzkaller0: entered allmulticast mode [ 41.630351][ T3620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.637408][ T3637] netlink: 'syz.4.42': attribute type 10 has an invalid length. [ 41.655053][ T3631] team0: Port device dummy0 added [ 41.662820][ T3620] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.39: missing EA_INODE flag [ 41.674678][ T3620] EXT4-fs (loop1): Remounting filesystem read-only [ 41.674847][ T3637] team0: Port device dummy0 removed [ 41.731020][ T3637] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.761769][ T3631] loop4: detected capacity change from 0 to 1024 [ 41.774652][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.822615][ T3631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.867662][ T3631] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.42: missing EA_INODE flag [ 41.884569][ T3631] EXT4-fs (loop4): Remounting filesystem read-only [ 41.943938][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.155130][ T3686] ref_ctr increment failed for inode: 0x5e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104475e80 [ 42.178816][ T3689] ref_ctr increment failed for inode: 0x6b offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104472f40 [ 42.357854][ T3695] netem: change failed [ 42.370422][ T3695] team0: Port device dummy0 added [ 42.381959][ T3695] team0: Port device dummy0 removed [ 42.389495][ T3695] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 42.406674][ T3695] loop3: detected capacity change from 0 to 1024 [ 42.418848][ T3695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.434563][ T3695] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.64: missing EA_INODE flag [ 42.446179][ T3695] EXT4-fs (loop3): Remounting filesystem read-only [ 42.474115][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.494330][ T3701] netem: change failed [ 42.505061][ T3701] bond0: (slave dummy0): Releasing backup interface [ 42.514930][ T3701] team0: Port device dummy0 added [ 42.527119][ T3701] team0: Port device dummy0 removed [ 42.534566][ T3701] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 42.570593][ T3701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.586285][ T3701] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.66: missing EA_INODE flag [ 42.598222][ T3701] EXT4-fs (loop3): Remounting filesystem read-only [ 42.622767][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.912709][ T3711] syzkaller0: entered promiscuous mode [ 42.918584][ T3711] syzkaller0: entered allmulticast mode [ 43.020159][ T3723] process 'syz.2.70' launched '/dev/fd/7' with NULL argv: empty string added [ 43.123233][ T3728] netem: change failed [ 43.134218][ T3728] bond0: (slave dummy0): Releasing backup interface [ 43.144260][ T3728] team0: Port device dummy0 added [ 43.156260][ T3728] team0: Port device dummy0 removed [ 43.164120][ T3728] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 43.198691][ T3728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.217304][ T3728] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.72: missing EA_INODE flag [ 43.229802][ T3728] EXT4-fs (loop4): Remounting filesystem read-only [ 43.255248][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.304438][ T3739] syzkaller1: entered promiscuous mode [ 43.310070][ T3739] syzkaller1: entered allmulticast mode [ 43.331858][ T1872] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.405791][ T29] kauditd_printk_skb: 1032 callbacks suppressed [ 43.405809][ T29] audit: type=1326 audit(1765961550.625:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 43.434128][ T3751] lo speed is unknown, defaulting to 1000 [ 43.436626][ T29] audit: type=1326 audit(1765961550.625:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 43.448710][ T3751] lo speed is unknown, defaulting to 1000 [ 43.465072][ T29] audit: type=1326 audit(1765961550.625:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 43.474095][ T3751] lo speed is unknown, defaulting to 1000 [ 43.493871][ T29] audit: type=1326 audit(1765961550.625:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 43.523101][ T29] audit: type=1326 audit(1765961550.625:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 43.546625][ T29] audit: type=1326 audit(1765961550.625:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 43.551083][ T3751] infiniband sz1: set active [ 43.569992][ T29] audit: type=1326 audit(1765961550.625:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 43.574706][ T3751] infiniband sz1: added lo [ 43.598110][ T29] audit: type=1326 audit(1765961550.625:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 43.598227][ T29] audit: type=1326 audit(1765961550.625:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 43.598318][ T29] audit: type=1326 audit(1765961550.625:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3750 comm="syz.4.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 43.673965][ T3423] lo speed is unknown, defaulting to 1000 [ 43.692757][ T3751] RDS/IB: sz1: added [ 43.696949][ T3751] smc: adding ib device sz1 with port count 1 [ 43.704316][ T3751] smc: ib device sz1 port 1 has no pnetid [ 43.710699][ T3423] lo speed is unknown, defaulting to 1000 [ 43.718938][ T3751] lo speed is unknown, defaulting to 1000 [ 43.765939][ T3751] lo speed is unknown, defaulting to 1000 [ 43.779702][ T3757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.805803][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.843605][ T3751] lo speed is unknown, defaulting to 1000 [ 43.884450][ T3751] lo speed is unknown, defaulting to 1000 [ 43.887273][ T3763] __nla_validate_parse: 9 callbacks suppressed [ 43.887360][ T3763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.82'. [ 43.928636][ T3765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3765 comm=syz.2.83 [ 43.941106][ T3765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3765 comm=syz.2.83 [ 43.942131][ T3751] lo speed is unknown, defaulting to 1000 [ 44.878396][ T3776] validate_nla: 6 callbacks suppressed [ 44.878411][ T3776] netlink: 'syz.2.87': attribute type 10 has an invalid length. [ 44.900901][ T3776] team0: Port device dummy0 added [ 44.911856][ T3776] netlink: 'syz.2.87': attribute type 10 has an invalid length. [ 44.922844][ T3776] team0: Port device dummy0 removed [ 44.931280][ T3776] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.951306][ T3776] set_capacity_and_notify: 3 callbacks suppressed [ 44.951321][ T3776] loop2: detected capacity change from 0 to 1024 [ 44.983401][ T3786] ref_ctr increment failed for inode: 0x95 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104473cc0 [ 44.996900][ T3776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.012880][ T3776] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.87: missing EA_INODE flag [ 45.024663][ T3776] EXT4-fs (loop2): Remounting filesystem read-only [ 45.048605][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.357068][ T3511] Bluetooth: hci0: command 0x1003 tx timeout [ 45.363238][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.527451][ T3805] syz.4.97 (3805) used greatest stack depth: 9440 bytes left [ 45.668767][ T3815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.102'. [ 45.678351][ T3815] netem: change failed [ 45.687691][ T3815] netlink: 'syz.4.102': attribute type 10 has an invalid length. [ 45.697964][ T3815] bond0: (slave dummy0): Releasing backup interface [ 45.708340][ T3815] team0: Port device dummy0 added [ 45.720052][ T3815] netlink: 'syz.4.102': attribute type 10 has an invalid length. [ 45.735954][ T3815] team0: Port device dummy0 removed [ 45.744047][ T3815] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.765905][ T3815] loop4: detected capacity change from 0 to 1024 [ 45.778883][ T3815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.829204][ T3815] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.102: missing EA_INODE flag [ 45.842518][ T3819] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 45.854100][ T3819] bond0: (slave dummy0): Releasing backup interface [ 45.864995][ T3819] team0: Port device dummy0 added [ 45.871442][ T3815] EXT4-fs (loop4): Remounting filesystem read-only [ 45.882050][ T3819] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 45.899049][ T3819] team0: Port device dummy0 removed [ 45.919563][ T3819] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.929477][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.966858][ T3821] loop3: detected capacity change from 0 to 1024 [ 46.007841][ T3821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.044286][ T3827] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3827 comm=syz.4.104 [ 46.056758][ T3827] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3827 comm=syz.4.104 [ 46.072467][ T3819] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.103: missing EA_INODE flag [ 46.078543][ T3827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.104'. [ 46.092964][ T3827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 46.126252][ T3819] EXT4-fs (loop3): Remounting filesystem read-only [ 46.153709][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.276258][ T3837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.111'. [ 46.295529][ T3837] netlink: 'syz.3.111': attribute type 10 has an invalid length. [ 46.307336][ T3837] bond0: (slave dummy0): Releasing backup interface [ 46.319785][ T3837] team0: Port device dummy0 added [ 46.337283][ T3837] netlink: 'syz.3.111': attribute type 10 has an invalid length. [ 46.367948][ T3837] team0: Port device dummy0 removed [ 46.386149][ T3837] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.423892][ T3847] loop3: detected capacity change from 0 to 1024 [ 46.445462][ T3850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.114'. [ 46.467400][ T3853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.115'. [ 46.517115][ T3853] netem: change failed [ 46.518573][ T3847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.551929][ T3853] netlink: 'syz.1.115': attribute type 10 has an invalid length. [ 46.581820][ T3837] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.111: missing EA_INODE flag [ 46.595897][ T3853] bond0: (slave dummy0): Releasing backup interface [ 46.614170][ T3860] netlink: 'syz.1.115': attribute type 10 has an invalid length. [ 46.622511][ T3837] EXT4-fs (loop3): Remounting filesystem read-only [ 46.634579][ T3853] team0: Port device dummy0 added [ 46.689614][ T3860] team0: Port device dummy0 removed [ 46.700593][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.723354][ T3853] loop1: detected capacity change from 0 to 1024 [ 46.739087][ T3860] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.759281][ T3853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.782263][ T3853] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.115: missing EA_INODE flag [ 46.804308][ T3853] EXT4-fs (loop1): Remounting filesystem read-only [ 46.835354][ T3864] syzkaller0: entered promiscuous mode [ 46.841003][ T3864] syzkaller0: entered allmulticast mode [ 46.932833][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.030049][ T3886] bond0: (slave dummy0): Releasing backup interface [ 47.102282][ C1] hrtimer: interrupt took 38306 ns [ 47.127820][ T3886] team0: Port device dummy0 added [ 47.200354][ T3892] team0: Port device dummy0 removed [ 47.222111][ T3886] loop3: detected capacity change from 0 to 1024 [ 47.276718][ T3892] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.388091][ T3894] lo speed is unknown, defaulting to 1000 [ 47.728681][ T3886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.785455][ T3886] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.128: missing EA_INODE flag [ 47.825204][ T3886] EXT4-fs (loop3): Remounting filesystem read-only [ 47.921723][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.090476][ T3911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.136'. [ 48.135231][ T3885] loop0: detected capacity change from 0 to 1024 [ 48.183672][ T3885] ======================================================= [ 48.183672][ T3885] WARNING: The mand mount option has been deprecated and [ 48.183672][ T3885] and is ignored by this kernel. Remove the mand [ 48.183672][ T3885] option from the mount to silence this warning. [ 48.183672][ T3885] ======================================================= [ 48.232111][ T3920] syzkaller0: entered promiscuous mode [ 48.237852][ T3920] syzkaller0: entered allmulticast mode [ 48.266130][ T3929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 48.291149][ T3885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.309876][ T3929] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 48.318181][ T3929] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 48.331189][ T3929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 48.342238][ T3929] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 48.352437][ T3929] bond1 (unregistering): Released all slaves [ 48.428062][ T3934] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.129: Allocating blocks 257-513 which overlap fs metadata [ 48.448450][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 48.448612][ T29] audit: type=1400 audit(1765961555.675:1778): avc: denied { remount } for pid=3935 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.489595][ T29] audit: type=1400 audit(1765961555.685:1779): avc: denied { create } for pid=3884 comm="syz.0.129" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 48.671180][ T3885] syz.0.129 (3885) used greatest stack depth: 9160 bytes left [ 48.688361][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.915326][ T3961] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 48.980143][ T3970] __nla_validate_parse: 1 callbacks suppressed [ 48.980158][ T3970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 49.034500][ T29] audit: type=1326 audit(1765961556.255:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 49.058379][ T29] audit: type=1326 audit(1765961556.255:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 49.081900][ T29] audit: type=1326 audit(1765961556.255:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 49.105198][ T29] audit: type=1326 audit(1765961556.255:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 49.128771][ T29] audit: type=1326 audit(1765961556.255:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 49.152207][ T29] audit: type=1326 audit(1765961556.255:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 49.175744][ T29] audit: type=1326 audit(1765961556.255:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 49.199221][ T29] audit: type=1326 audit(1765961556.255:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 49.248366][ T3961] bond1: (slave batadv2): making interface the new active one [ 49.283178][ T3961] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 49.296109][ T3966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.157'. [ 49.318870][ T3966] netem: change failed [ 49.327678][ T3977] loop1: detected capacity change from 0 to 1024 [ 49.340795][ T3971] bond0: (slave dummy0): Releasing backup interface [ 49.356327][ T3977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.386328][ T3966] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.157: missing EA_INODE flag [ 49.407222][ T3982] netlink: 20 bytes leftover after parsing attributes in process `syz.4.160'. [ 49.425336][ T3971] team0: Port device dummy0 added [ 49.434168][ T3966] EXT4-fs (loop1): Remounting filesystem read-only [ 49.446137][ T3972] team0: Port device dummy0 removed [ 49.455344][ T3972] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.470339][ T3970] bond1 (unregistering): (slave batadv2): Releasing active interface [ 49.490517][ T3970] bond1 (unregistering): Released all slaves [ 49.586642][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.617898][ T3989] netlink: 24 bytes leftover after parsing attributes in process `syz.4.163'. [ 49.642988][ T3989] loop4: detected capacity change from 0 to 512 [ 49.721612][ T3989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.749211][ T3989] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.835734][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.852104][ T3999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.177'. [ 49.861619][ T3999] netem: change failed [ 49.873150][ T3999] team0: Port device dummy0 added [ 49.882144][ T3999] team0: Port device dummy0 removed [ 49.900546][ T3999] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.968112][ T4002] loop0: detected capacity change from 0 to 1024 [ 50.019264][ T4002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.108667][ T3999] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.177: missing EA_INODE flag [ 50.121165][ T3999] EXT4-fs (loop0): Remounting filesystem read-only [ 50.189130][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.275647][ T4014] netlink: 20 bytes leftover after parsing attributes in process `syz.0.171'. [ 50.403655][ T4023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.175'. [ 50.416070][ T4023] netem: change failed [ 50.455547][ T4023] validate_nla: 7 callbacks suppressed [ 50.455565][ T4023] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 50.483100][ T4023] bond0: (slave dummy0): Releasing backup interface [ 50.491583][ T4026] ref_ctr increment failed for inode: 0x87 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104476c00 [ 50.494877][ T4023] team0: Port device dummy0 added [ 50.508830][ T4028] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 50.571840][ T4023] loop2: detected capacity change from 0 to 1024 [ 50.619888][ T4028] team0: Port device dummy0 removed [ 50.632254][ T4028] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 50.642541][ T4023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.659433][ T4023] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.175: missing EA_INODE flag [ 50.741185][ T4023] EXT4-fs (loop2): Remounting filesystem read-only [ 50.752008][ T3991] loop3: detected capacity change from 0 to 1024 [ 50.835517][ T3991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.908041][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.143618][ T4046] loop4: detected capacity change from 0 to 1024 [ 51.150885][ T4046] EXT4-fs: Ignoring removed orlov option [ 51.168986][ T4046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.220828][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.426064][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.495031][ T4076] ref_ctr increment failed for inode: 0xf1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881044757c0 [ 51.564735][ T4083] ref_ctr increment failed for inode: 0xfc offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad93600 [ 51.601008][ T4086] loop4: detected capacity change from 0 to 1024 [ 51.610257][ T4086] EXT4-fs: Ignoring removed orlov option [ 51.618943][ T4086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.653085][ T4093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.198'. [ 51.674763][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.703299][ T4095] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 51.731289][ T4095] bond0: (slave dummy0): Releasing backup interface [ 51.797359][ T4098] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 51.811038][ T4100] rdma_rxe: rxe_newlink: failed to add lo [ 51.826003][ T4095] team0: Port device dummy0 added [ 51.831236][ T4101] loop4: detected capacity change from 0 to 1024 [ 51.863559][ T4101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.902206][ T4095] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.199: missing EA_INODE flag [ 51.971601][ T4098] team0: Port device dummy0 removed [ 52.005491][ T4098] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 52.083850][ T4095] EXT4-fs (loop4): Remounting filesystem read-only [ 52.150357][ T4113] netlink: 'syz.2.204': attribute type 10 has an invalid length. [ 52.192925][ T4112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.204'. [ 52.233572][ T4115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4115 comm=syz.3.205 [ 52.247879][ T4115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4115 comm=syz.3.205 [ 52.277451][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.293884][ T4116] netlink: 'syz.2.204': attribute type 10 has an invalid length. [ 52.328803][ T4112] netem: change failed [ 52.348431][ T4115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.205'. [ 52.360878][ T4113] bond0: (slave dummy0): Releasing backup interface [ 52.387147][ T4112] loop2: detected capacity change from 0 to 1024 [ 52.406694][ T4113] team0: Port device dummy0 added [ 52.423751][ T4116] team0: Port device dummy0 removed [ 52.448592][ T4112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.473122][ T4134] netlink: 'syz.3.209': attribute type 1 has an invalid length. [ 52.492548][ T4116] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 52.521199][ T4134] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 52.528474][ T4112] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.204: missing EA_INODE flag [ 52.543038][ T4134] bond1: (slave batadv3): making interface the new active one [ 52.550867][ T4112] EXT4-fs (loop2): Remounting filesystem read-only [ 52.616494][ T4134] bond1: (slave batadv3): Enslaving as an active interface with an up link [ 52.626619][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.635986][ T4138] bond1 (unregistering): (slave batadv3): Releasing active interface [ 52.672578][ T4138] bond1 (unregistering): Released all slaves [ 52.687322][ T4143] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 52.697847][ T4143] bond0: (slave dummy0): Releasing backup interface [ 52.708776][ T4143] team0: Port device dummy0 added [ 52.720622][ T4143] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 52.731672][ T4143] team0: Port device dummy0 removed [ 52.745625][ T4143] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 52.788423][ T4143] loop2: detected capacity change from 0 to 1024 [ 52.812243][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.832220][ T4145] rdma_rxe: rxe_newlink: failed to add lo [ 52.862753][ T4143] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.212: missing EA_INODE flag [ 52.888241][ T4143] EXT4-fs (loop2): Remounting filesystem read-only [ 52.919673][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.134050][ T4167] lo speed is unknown, defaulting to 1000 [ 53.970802][ T4177] loop0: detected capacity change from 0 to 512 [ 54.026196][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 54.026215][ T29] audit: type=1326 audit(1765961561.245:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 54.091560][ T29] audit: type=1326 audit(1765961561.285:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 54.115041][ T29] audit: type=1326 audit(1765961561.285:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 54.138501][ T29] audit: type=1326 audit(1765961561.285:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 54.161916][ T29] audit: type=1326 audit(1765961561.285:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 54.185538][ T29] audit: type=1326 audit(1765961561.285:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 54.208895][ T29] audit: type=1326 audit(1765961561.285:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 54.232264][ T29] audit: type=1326 audit(1765961561.285:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 54.255775][ T29] audit: type=1326 audit(1765961561.285:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 54.260070][ T4189] rdma_rxe: rxe_newlink: failed to add lo [ 54.279176][ T29] audit: type=1326 audit(1765961561.285:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4178 comm="syz.1.224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 54.366487][ T4193] __nla_validate_parse: 7 callbacks suppressed [ 54.366508][ T4193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.230'. [ 54.386445][ T4193] netlink: 'syz.2.230': attribute type 10 has an invalid length. [ 54.397911][ T4177] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.413940][ T4193] bond0: (slave dummy0): Releasing backup interface [ 54.429442][ T4177] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.453189][ T4193] team0: Port device dummy0 added [ 54.489629][ T4201] team0: Port device dummy0 removed [ 54.509848][ T4201] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 54.510621][ T4193] loop2: detected capacity change from 0 to 1024 [ 54.536809][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.562967][ T4193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.626285][ T4193] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.230: missing EA_INODE flag [ 54.638793][ T4193] EXT4-fs (loop2): Remounting filesystem read-only [ 54.691675][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.713661][ T4226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.239'. [ 54.728569][ T4226] bond0: (slave dummy0): Releasing backup interface [ 54.738891][ T4226] team0: Port device dummy0 added [ 54.749118][ T4226] team0: Port device dummy0 removed [ 54.756918][ T4226] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 54.799454][ T4226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.815853][ T4230] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 54.821378][ T4226] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.239: missing EA_INODE flag [ 54.825104][ T4230] bond1: (slave batadv1): making interface the new active one [ 54.835105][ T4226] EXT4-fs (loop2): Remounting filesystem read-only [ 54.843427][ T4230] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 54.862294][ T4230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 54.873035][ T4230] bond1 (unregistering): (slave batadv1): Releasing active interface [ 54.913529][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.930250][ T4230] bond1 (unregistering): Released all slaves [ 55.067395][ T4238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.243'. [ 55.349185][ T4255] set_capacity_and_notify: 1 callbacks suppressed [ 55.349206][ T4255] loop2: detected capacity change from 0 to 1024 [ 55.364560][ T4255] EXT4-fs: Ignoring removed orlov option [ 55.429290][ T4255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.520171][ T4261] ref_ctr increment failed for inode: 0x139 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104471440 [ 55.574397][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.617784][ T4266] syzkaller0: entered promiscuous mode [ 55.623387][ T4266] syzkaller0: entered allmulticast mode [ 55.670778][ T4247] netlink: 24 bytes leftover after parsing attributes in process `syz.0.247'. [ 55.695515][ T4268] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4268 comm=syz.2.252 [ 55.707967][ T4268] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4268 comm=syz.2.252 [ 55.722589][ T4268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.252'. [ 55.731605][ T4268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 55.778573][ T4271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.254'. [ 56.053311][ T4286] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4286 comm=syz.1.257 [ 56.066081][ T4286] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4286 comm=syz.1.257 [ 56.215406][ T4299] netlink: 28 bytes leftover after parsing attributes in process `syz.2.263'. [ 56.228501][ T4299] validate_nla: 4 callbacks suppressed [ 56.228517][ T4299] netlink: 'syz.2.263': attribute type 10 has an invalid length. [ 56.244468][ T4299] bond0: (slave dummy0): Releasing backup interface [ 56.254473][ T4299] team0: Port device dummy0 added [ 56.268171][ T4299] netlink: 'syz.2.263': attribute type 10 has an invalid length. [ 56.280794][ T4299] team0: Port device dummy0 removed [ 56.291781][ T4299] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.323519][ T4296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 56.334961][ T4299] loop2: detected capacity change from 0 to 1024 [ 56.348267][ T4305] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4305 comm=syz.4.265 [ 56.353659][ T4299] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.263: missing EA_INODE flag [ 56.360771][ T4305] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4305 comm=syz.4.265 [ 56.384842][ T4299] EXT4-fs (loop2): Remounting filesystem read-only [ 56.664632][ T4337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4337 comm=syz.4.276 [ 56.677067][ T4337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4337 comm=syz.4.276 [ 56.788752][ T4351] netlink: 'syz.3.282': attribute type 10 has an invalid length. [ 56.809905][ T4351] bond0: (slave dummy0): Releasing backup interface [ 56.820002][ T4351] team0: Port device dummy0 added [ 56.826965][ T4351] netlink: 'syz.3.282': attribute type 10 has an invalid length. [ 56.856031][ T4351] team0: Port device dummy0 removed [ 56.864285][ T4351] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.879362][ T4351] loop3: detected capacity change from 0 to 1024 [ 56.914372][ T4351] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.282: missing EA_INODE flag [ 56.926370][ T4351] EXT4-fs (loop3): Remounting filesystem read-only [ 57.223506][ T4387] 9p: Bad value for 'rfdno' [ 57.239630][ T4385] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 57.264577][ T4385] bond0: (slave dummy0): Releasing backup interface [ 57.284604][ T4385] team0: Port device dummy0 added [ 57.292114][ T4385] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 57.294640][ T4392] pimreg: entered allmulticast mode [ 57.309707][ T4396] selinux_netlink_send: 4 callbacks suppressed [ 57.309721][ T4396] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4396 comm=syz.1.301 [ 57.328537][ T4396] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4396 comm=syz.1.301 [ 57.341351][ T4385] team0: Port device dummy0 removed [ 57.354332][ T4385] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.363228][ T4392] pimreg: left allmulticast mode [ 57.369812][ T4397] loop2: detected capacity change from 0 to 1024 [ 57.403095][ T4385] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.297: missing EA_INODE flag [ 57.415726][ T4385] EXT4-fs (loop2): Remounting filesystem read-only [ 57.489124][ T4403] loop2: detected capacity change from 0 to 1024 [ 57.495937][ T4403] EXT4-fs: Ignoring removed orlov option [ 57.589624][ T4414] ref_ctr increment failed for inode: 0x170 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104474380 [ 57.641427][ T4421] 9p: Bad value for 'rfdno' [ 58.581959][ T4452] 9p: Bad value for 'rfdno' [ 58.649499][ T4454] loop4: detected capacity change from 0 to 1024 [ 58.653597][ T4456] syzkaller0: entered promiscuous mode [ 58.661440][ T4456] syzkaller0: entered allmulticast mode [ 58.667393][ T4454] EXT4-fs: Ignoring removed orlov option [ 58.734414][ T4459] netlink: 'syz.3.324': attribute type 10 has an invalid length. [ 58.749072][ T4459] bond0: (slave dummy0): Releasing backup interface [ 58.759821][ T4459] team0: Port device dummy0 added [ 58.773087][ T4459] netlink: 'syz.3.324': attribute type 10 has an invalid length. [ 58.789054][ T4459] team0: Port device dummy0 removed [ 58.806328][ T4459] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.844453][ T4459] loop3: detected capacity change from 0 to 1024 [ 58.876884][ T4459] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.324: missing EA_INODE flag [ 58.894133][ T4459] EXT4-fs (loop3): Remounting filesystem read-only [ 59.793986][ T4494] loop1: detected capacity change from 0 to 1024 [ 59.801379][ T4500] loop4: detected capacity change from 0 to 1024 [ 59.803812][ T4500] EXT4-fs: Ignoring removed orlov option [ 59.892835][ T4510] __nla_validate_parse: 16 callbacks suppressed [ 59.892906][ T4510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.343'. [ 59.939615][ T29] kauditd_printk_skb: 667 callbacks suppressed [ 59.939632][ T29] audit: type=1326 audit(1765961567.165:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 59.940882][ T4510] netlink: 'syz.3.343': attribute type 10 has an invalid length. [ 59.957282][ T29] audit: type=1326 audit(1765961567.165:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 60.000321][ T29] audit: type=1326 audit(1765961567.165:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 60.012458][ T4513] netlink: 'syz.3.343': attribute type 10 has an invalid length. [ 60.023727][ T29] audit: type=1326 audit(1765961567.165:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 60.054969][ T29] audit: type=1326 audit(1765961567.165:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 60.078737][ T29] audit: type=1326 audit(1765961567.165:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 60.102105][ T29] audit: type=1326 audit(1765961567.165:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 60.125646][ T29] audit: type=1326 audit(1765961567.165:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 60.149478][ T4510] bond0: (slave dummy0): Releasing backup interface [ 60.161147][ T4516] loop3: detected capacity change from 0 to 1024 [ 60.161704][ T4510] team0: Port device dummy0 added [ 60.173262][ T4512] ref_ctr increment failed for inode: 0x1cd offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104475e80 [ 60.252614][ T29] audit: type=1326 audit(1765961567.465:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 60.276205][ T29] audit: type=1326 audit(1765961567.465:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 60.300128][ T4513] team0: Port device dummy0 removed [ 60.303633][ T4510] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.343: missing EA_INODE flag [ 60.308369][ T4513] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 60.319366][ T4510] EXT4-fs (loop3): Remounting filesystem read-only [ 60.338228][ T4518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4518 comm=syz.2.345 [ 60.350824][ T4518] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4518 comm=syz.2.345 [ 60.372764][ T4518] netlink: 16 bytes leftover after parsing attributes in process `syz.2.345'. [ 60.381790][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 60.530439][ T4534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.351'. [ 60.586977][ T4534] bond0: (slave dummy0): Releasing backup interface [ 60.600002][ T4534] team0: Port device dummy0 added [ 60.643379][ T4534] team0: Port device dummy0 removed [ 60.653295][ T4534] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 60.688747][ T4542] loop4: detected capacity change from 0 to 1024 [ 60.739004][ T4534] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.351: missing EA_INODE flag [ 60.756551][ T4534] EXT4-fs (loop4): Remounting filesystem read-only [ 60.801899][ T4546] loop3: detected capacity change from 0 to 1024 [ 61.003139][ T4554] ref_ctr increment failed for inode: 0x1e5 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104472880 [ 61.020213][ T4546] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.355: Allocating blocks 497-513 which overlap fs metadata [ 61.274683][ T4566] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4566 comm=syz.3.360 [ 61.287227][ T4566] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4566 comm=syz.3.360 [ 61.385044][ T4566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.360'. [ 61.394166][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 61.574789][ T4583] loop3: detected capacity change from 0 to 1024 [ 61.616929][ T4502] loop0: detected capacity change from 0 to 1024 [ 61.650994][ T4536] loop2: detected capacity change from 0 to 1024 [ 61.765035][ T4594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.368'. [ 61.818038][ T4594] validate_nla: 2 callbacks suppressed [ 61.818055][ T4594] netlink: 'syz.4.368': attribute type 10 has an invalid length. [ 61.851086][ T4595] lo speed is unknown, defaulting to 1000 [ 62.069502][ T4583] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.366: Allocating blocks 497-513 which overlap fs metadata [ 62.096064][ T4597] netlink: 'syz.4.368': attribute type 10 has an invalid length. [ 62.185323][ T4583] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.366: Allocating blocks 497-513 which overlap fs metadata [ 62.244368][ T4597] loop4: detected capacity change from 0 to 1024 [ 62.251282][ T4594] bond0: (slave dummy0): Releasing backup interface [ 62.251306][ T4598] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.352: Allocating blocks 257-513 which overlap fs metadata [ 62.295080][ T4583] EXT4-fs (loop3): pa ffff888100554070: logic 48, phys. 177, len 21 [ 62.303216][ T4583] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 62.324408][ T4594] team0: Port device dummy0 added [ 62.352127][ T4600] ref_ctr increment failed for inode: 0x1c8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104473600 [ 62.370549][ T4594] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.368: missing EA_INODE flag [ 62.400298][ T4594] EXT4-fs (loop4): Remounting filesystem read-only [ 62.653760][ T4628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.377'. [ 62.668063][ T4628] netlink: 'syz.4.377': attribute type 10 has an invalid length. [ 62.689887][ T4627] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4627 comm=syz.3.376 [ 62.702393][ T4627] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4627 comm=syz.3.376 [ 62.704022][ T4628] netlink: 'syz.4.377': attribute type 10 has an invalid length. [ 62.723844][ T4628] team0: Port device dummy0 removed [ 62.733347][ T4628] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.738217][ T4627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.376'. [ 62.751096][ T4627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 62.760981][ T4628] loop4: detected capacity change from 0 to 1024 [ 62.801285][ T4633] pimreg: entered allmulticast mode [ 62.810617][ T4633] pimreg: left allmulticast mode [ 62.939137][ T4628] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.377: missing EA_INODE flag [ 62.993893][ T4628] EXT4-fs (loop4): Remounting filesystem read-only [ 63.273756][ T4650] ref_ctr increment failed for inode: 0x213 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104472880 [ 63.347480][ T4658] netlink: 'syz.2.383': attribute type 10 has an invalid length. [ 63.370697][ T4658] bond0: (slave dummy0): Releasing backup interface [ 63.382165][ T4658] team0: Port device dummy0 added [ 63.395919][ T4658] netlink: 'syz.2.383': attribute type 10 has an invalid length. [ 63.409547][ T4658] team0: Port device dummy0 removed [ 63.417527][ T4658] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.474199][ T4658] loop2: detected capacity change from 0 to 1024 [ 63.512008][ T4658] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.383: missing EA_INODE flag [ 63.524259][ T4658] EXT4-fs (loop2): Remounting filesystem read-only [ 63.534024][ T4673] ref_ctr increment failed for inode: 0x178 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104475e80 [ 63.646386][ T4683] syzkaller0: entered promiscuous mode [ 63.651990][ T4683] syzkaller0: entered allmulticast mode [ 63.701301][ T4680] syzkaller0: entered promiscuous mode [ 63.706920][ T4680] syzkaller0: entered allmulticast mode [ 63.958919][ T4702] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 64.004452][ T4702] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 64.021784][ T4702] bond1: (slave batadv1): making interface the new active one [ 64.033445][ T4702] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 64.049780][ T4702] bond1 (unregistering): (slave batadv1): Releasing active interface [ 64.061133][ T4702] bond1 (unregistering): Released all slaves [ 64.544784][ T4726] ref_ctr increment failed for inode: 0x234 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104472f40 [ 64.580586][ T4730] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4730 comm=syz.3.406 [ 64.593153][ T4730] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4730 comm=syz.3.406 [ 64.609577][ T4733] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 64.628763][ T4733] bond0: (slave dummy0): Releasing backup interface [ 64.639618][ T4733] team0: Port device dummy0 added [ 64.659114][ T4733] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 64.707344][ T4733] team0: Port device dummy0 removed [ 64.715998][ T4733] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.800099][ T4739] syzkaller0: entered promiscuous mode [ 64.805670][ T4739] syzkaller0: entered allmulticast mode [ 64.818343][ T4745] loop1: detected capacity change from 0 to 1024 [ 64.845688][ T4745] EXT4-fs: Ignoring removed orlov option [ 64.998727][ T4766] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4766 comm=syz.1.418 [ 65.011209][ T4766] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4766 comm=syz.1.418 [ 65.029400][ T4771] ref_ctr increment failed for inode: 0x206 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad94380 [ 65.048773][ T4766] __nla_validate_parse: 9 callbacks suppressed [ 65.048869][ T4766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.418'. [ 65.064129][ T4766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'. [ 65.212480][ T4781] netlink: 'syz.2.425': attribute type 10 has an invalid length. [ 65.228695][ T4788] loop3: detected capacity change from 0 to 1024 [ 65.235522][ T4788] EXT4-fs: Ignoring removed orlov option [ 65.406430][ T4795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'. [ 65.447486][ T4795] netem: change failed [ 65.479912][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 65.479927][ T29] audit: type=1326 audit(1765961572.705:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4790 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 65.530383][ T4793] bond0: (slave dummy0): Releasing backup interface [ 65.558142][ T4793] team0: Port device dummy0 added [ 65.586790][ T4795] team0: Port device dummy0 removed [ 65.676691][ T29] audit: type=1326 audit(1765961572.735:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4790 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 65.688842][ T4795] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.700462][ T29] audit: type=1326 audit(1765961572.735:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4790 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 65.732242][ T29] audit: type=1326 audit(1765961572.735:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4790 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 65.755949][ T29] audit: type=1326 audit(1765961572.735:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4790 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 65.779358][ T29] audit: type=1326 audit(1765961572.735:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4790 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 65.802728][ T29] audit: type=1326 audit(1765961572.735:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4790 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 65.826504][ T29] audit: type=1326 audit(1765961572.735:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4790 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 65.849986][ T29] audit: type=1326 audit(1765961572.735:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4790 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 65.873331][ T29] audit: type=1326 audit(1765961572.735:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4790 comm="syz.1.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a92f749 code=0x7ffc0000 [ 65.886467][ T4793] loop1: detected capacity change from 0 to 1024 [ 65.937590][ T4793] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.429: missing EA_INODE flag [ 65.995427][ T4793] EXT4-fs (loop1): Remounting filesystem read-only [ 66.070927][ T4805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.433'. [ 66.105933][ T4817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.434'. [ 66.176897][ T4823] ref_ctr increment failed for inode: 0x15f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad96540 [ 66.200590][ T4827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.440'. [ 66.239357][ T4834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.441'. [ 66.255485][ T4827] bond0: (slave dummy0): Releasing backup interface [ 66.287442][ T4827] team0: Port device dummy0 added [ 66.316732][ T4834] bond0: (slave dummy0): Releasing backup interface [ 66.387893][ T4843] loop2: detected capacity change from 0 to 1024 [ 66.410832][ T4834] team0: Port device dummy0 added [ 66.411932][ T4843] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.441: missing EA_INODE flag [ 66.428502][ T4843] EXT4-fs (loop2): Remounting filesystem read-only [ 66.447693][ T4839] team0: Port device dummy0 removed [ 66.456935][ T4839] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.500391][ T4840] team0: Port device dummy0 removed [ 66.512324][ T4840] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.994176][ T4859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 67.058376][ T4842] loop1: detected capacity change from 0 to 1024 [ 67.220011][ T4876] ref_ctr increment failed for inode: 0x170 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad95e80 [ 67.346914][ T4883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.456'. [ 67.364483][ T4883] validate_nla: 6 callbacks suppressed [ 67.364501][ T4883] netlink: 'syz.2.456': attribute type 10 has an invalid length. [ 67.380648][ T4883] bond0: (slave dummy0): Releasing backup interface [ 67.396816][ T4883] team0: Port device dummy0 added [ 67.404047][ T4883] netlink: 'syz.2.456': attribute type 10 has an invalid length. [ 67.428515][ T4887] syzkaller0: entered promiscuous mode [ 67.434085][ T4887] syzkaller0: entered allmulticast mode [ 67.446971][ T4883] team0: Port device dummy0 removed [ 67.464280][ T4890] loop2: detected capacity change from 0 to 1024 [ 67.482441][ T4883] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.522526][ T4883] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.456: missing EA_INODE flag [ 67.539150][ T4883] EXT4-fs (loop2): Remounting filesystem read-only [ 67.638269][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.462'. [ 67.662757][ T4901] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 67.675123][ T4901] bond0: (slave dummy0): Releasing backup interface [ 67.694499][ T4901] team0: Port device dummy0 added [ 67.712888][ T4901] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 67.827620][ T4901] team0: Port device dummy0 removed [ 67.854761][ T4907] loop4: detected capacity change from 0 to 1024 [ 67.869714][ T4901] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 68.031040][ T4889] loop3: detected capacity change from 0 to 1024 [ 68.180003][ T4901] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.462: missing EA_INODE flag [ 68.193349][ T4901] EXT4-fs (loop4): Remounting filesystem read-only [ 68.418685][ T4926] pimreg: entered allmulticast mode [ 68.461450][ T4926] pimreg: left allmulticast mode [ 68.608995][ T4940] netlink: 'syz.2.471': attribute type 10 has an invalid length. [ 68.619674][ T4940] bond0: (slave dummy0): Releasing backup interface [ 68.630504][ T4940] team0: Port device dummy0 added [ 68.799824][ T4948] loop2: detected capacity change from 0 to 1024 [ 68.843404][ T4946] netlink: 'syz.2.471': attribute type 10 has an invalid length. [ 68.930859][ T4945] lo speed is unknown, defaulting to 1000 [ 69.105721][ T4946] team0: Port device dummy0 removed [ 69.119068][ T4946] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 69.141668][ T4948] EXT4-fs mount: 50 callbacks suppressed [ 69.141689][ T4948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.171348][ T4940] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.471: missing EA_INODE flag [ 69.175221][ T4963] loop4: detected capacity change from 0 to 512 [ 69.193438][ T4963] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.205272][ T4940] EXT4-fs (loop2): Remounting filesystem read-only [ 69.218786][ T4963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.236408][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.240396][ T4963] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.338966][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.452566][ T4984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.046389][ T4989] loop4: detected capacity change from 0 to 1024 [ 70.083701][ T4989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.287206][ T5019] pimreg: entered allmulticast mode [ 70.296128][ T5019] pimreg: left allmulticast mode [ 70.318726][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.437605][ T5031] loop4: detected capacity change from 0 to 1024 [ 70.457890][ T5031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.516463][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 70.516487][ T29] audit: type=1326 audit(1765961577.735:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5030 comm="syz.4.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 70.558271][ T5046] ref_ctr increment failed for inode: 0x1f5 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104475100 [ 70.570589][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.591086][ T5048] __nla_validate_parse: 6 callbacks suppressed [ 70.591105][ T5048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.504'. [ 70.660486][ T5052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.504'. [ 70.905476][ T5065] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5065 comm=syz.4.510 [ 70.918291][ T5065] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5065 comm=syz.4.510 [ 71.002439][ T5067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 71.011474][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 71.099906][ T5070] pimreg: entered allmulticast mode [ 71.331913][ T5070] pimreg: left allmulticast mode [ 71.598342][ T5083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'. [ 71.704066][ T5086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.516'. [ 71.906334][ T5075] lo speed is unknown, defaulting to 1000 [ 72.082626][ T29] audit: type=1326 audit(1765961579.305:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 72.116486][ T29] audit: type=1326 audit(1765961579.305:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 72.117342][ T5096] netlink: 68 bytes leftover after parsing attributes in process `syz.4.522'. [ 72.140695][ T29] audit: type=1326 audit(1765961579.305:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 72.173021][ T29] audit: type=1326 audit(1765961579.305:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 72.196567][ T29] audit: type=1326 audit(1765961579.305:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 72.220323][ T29] audit: type=1326 audit(1765961579.305:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 72.243798][ T29] audit: type=1326 audit(1765961579.305:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 72.267150][ T29] audit: type=1326 audit(1765961579.305:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 72.290462][ T29] audit: type=1326 audit(1765961579.305:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5097 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 72.361580][ T5103] ref_ctr increment failed for inode: 0x2b8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104475e80 [ 72.454261][ T5114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.528'. [ 72.474847][ T5114] loop2: detected capacity change from 0 to 1024 [ 72.502860][ T5114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.517745][ T5114] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.528: missing EA_INODE flag [ 72.529492][ T5114] EXT4-fs (loop2): Remounting filesystem read-only [ 72.608690][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.770304][ T5125] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5125 comm=syz.4.531 [ 72.782799][ T5125] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5125 comm=syz.4.531 [ 72.799428][ T5125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 72.808435][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 73.023698][ T5136] netem: change failed [ 73.036069][ T5136] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 73.048415][ T5136] bond0: (slave dummy0): Releasing backup interface [ 73.060336][ T5136] team0: Port device dummy0 added [ 73.068115][ T5136] netlink: 'syz.0.534': attribute type 10 has an invalid length. [ 73.079652][ T5136] team0: Port device dummy0 removed [ 73.090135][ T5136] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 73.106161][ T5136] loop0: detected capacity change from 0 to 1024 [ 73.145840][ T5136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.158266][ T5142] FAULT_INJECTION: forcing a failure. [ 73.158266][ T5142] name failslab, interval 1, probability 0, space 0, times 1 [ 73.171044][ T5142] CPU: 1 UID: 0 PID: 5142 Comm: syz.4.537 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.171071][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 73.171088][ T5142] Call Trace: [ 73.171101][ T5142] [ 73.171112][ T5142] __dump_stack+0x1d/0x30 [ 73.171281][ T5142] dump_stack_lvl+0xe8/0x140 [ 73.171308][ T5142] dump_stack+0x15/0x1b [ 73.171367][ T5142] should_fail_ex+0x265/0x280 [ 73.171443][ T5142] should_failslab+0x8c/0xb0 [ 73.171479][ T5142] kmem_cache_alloc_noprof+0x69/0x4b0 [ 73.171510][ T5142] ? pidfs_xattr_set+0xa3/0x150 [ 73.171558][ T5142] pidfs_xattr_set+0xa3/0x150 [ 73.171622][ T5142] ? __pfx_pidfs_xattr_set+0x10/0x10 [ 73.171657][ T5142] __vfs_removexattr+0x2c7/0x2f0 [ 73.171683][ T5142] __vfs_removexattr_locked+0x181/0x1c0 [ 73.171709][ T5142] vfs_removexattr+0x75/0x170 [ 73.171758][ T5142] path_removexattrat+0x356/0x570 [ 73.171804][ T5142] __x64_sys_fremovexattr+0x35/0x40 [ 73.171842][ T5142] x64_sys_call+0x4da/0x3000 [ 73.171870][ T5142] do_syscall_64+0xd8/0x2c0 [ 73.172057][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.172084][ T5142] RIP: 0033:0x7fd974fdf749 [ 73.172111][ T5142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.172162][ T5142] RSP: 002b:00007fd973a3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 73.172195][ T5142] RAX: ffffffffffffffda RBX: 00007fd975235fa0 RCX: 00007fd974fdf749 [ 73.172212][ T5142] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 73.172229][ T5142] RBP: 00007fd973a3f090 R08: 0000000000000000 R09: 0000000000000000 [ 73.172245][ T5142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.172262][ T5142] R13: 00007fd975236038 R14: 00007fd975235fa0 R15: 00007fffaddc8f88 [ 73.172287][ T5142] [ 73.175164][ T5136] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.534: missing EA_INODE flag [ 73.433236][ T5151] loop3: detected capacity change from 0 to 512 [ 73.440467][ T5151] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 73.440480][ T5136] EXT4-fs (loop0): Remounting filesystem read-only [ 73.478205][ T5153] ref_ctr increment failed for inode: 0x21c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104476c00 [ 73.482694][ T5151] EXT4-fs (loop3): invalid journal inode [ 73.498772][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.527875][ T5155] netem: change failed [ 73.540678][ T5155] netlink: 'syz.0.542': attribute type 10 has an invalid length. [ 73.550519][ T5155] bond0: (slave dummy0): Releasing backup interface [ 73.560007][ T5151] program syz.3.539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.590145][ T5155] team0: Port device dummy0 added [ 73.600772][ T5160] netlink: 'syz.0.542': attribute type 10 has an invalid length. [ 73.624264][ T5163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5163 comm=syz.1.545 [ 73.636769][ T5163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5163 comm=syz.1.545 [ 73.669840][ T5160] team0: Port device dummy0 removed [ 73.676406][ T5155] loop0: detected capacity change from 0 to 1024 [ 73.732281][ T5169] netlink: 'syz.2.546': attribute type 10 has an invalid length. [ 73.741781][ T5155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.775834][ T5155] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.542: missing EA_INODE flag [ 73.789552][ T5160] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 73.798440][ T5173] netlink: 'syz.2.546': attribute type 10 has an invalid length. [ 73.817586][ T5155] EXT4-fs (loop0): Remounting filesystem read-only [ 73.825879][ T5169] bond0: (slave dummy0): Releasing backup interface [ 73.850573][ T5169] team0: Port device dummy0 added [ 73.890574][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.900605][ T5165] loop2: detected capacity change from 0 to 1024 [ 73.922187][ T5173] team0: Port device dummy0 removed [ 73.929860][ T5173] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 73.947517][ T5165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.009170][ T5165] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.546: missing EA_INODE flag [ 74.039807][ T5165] EXT4-fs (loop2): Remounting filesystem read-only [ 74.084899][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.236943][ T5150] loop4: detected capacity change from 0 to 1024 [ 74.240938][ T5189] syzkaller0: entered promiscuous mode [ 74.250081][ T5189] syzkaller0: entered allmulticast mode [ 74.308445][ T5150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.436551][ T5197] ref_ctr increment failed for inode: 0x2d2 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad93cc0 [ 74.442339][ T5199] netem: change failed [ 74.459400][ T5199] netlink: 'syz.1.554': attribute type 10 has an invalid length. [ 74.472465][ T5199] bond0: (slave dummy0): Releasing backup interface [ 74.483588][ T5199] team0: Port device dummy0 added [ 74.494530][ T5199] netlink: 'syz.1.554': attribute type 10 has an invalid length. [ 74.501660][ T5201] loop3: detected capacity change from 0 to 1024 [ 74.509723][ T5199] team0: Port device dummy0 removed [ 74.510125][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.519782][ T5199] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 74.524649][ T5201] EXT4-fs: Ignoring removed orlov option [ 74.554624][ T5201] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.586353][ T5199] loop1: detected capacity change from 0 to 1024 [ 74.594954][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.620506][ T5199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.640497][ T5209] netlink: 'syz.4.557': attribute type 10 has an invalid length. [ 74.654963][ T5209] bond0: (slave dummy0): Releasing backup interface [ 74.665566][ T5209] team0: Port device dummy0 added [ 74.671621][ T5211] ref_ctr increment failed for inode: 0x270 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881044706c0 [ 74.677191][ T5209] netlink: 'syz.4.557': attribute type 10 has an invalid length. [ 74.697812][ T5209] team0: Port device dummy0 removed [ 74.703480][ T5199] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.554: missing EA_INODE flag [ 74.709150][ T5209] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 74.724686][ T5199] EXT4-fs (loop1): Remounting filesystem read-only [ 74.749610][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.771066][ T5209] loop4: detected capacity change from 0 to 1024 [ 74.828295][ T5209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.843646][ T5220] ref_ctr increment failed for inode: 0x23c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad921c0 [ 74.861309][ T5209] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.557: missing EA_INODE flag [ 74.875022][ T5209] EXT4-fs (loop4): Remounting filesystem read-only [ 74.907563][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.529688][ T5268] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5268 comm=syz.3.575 [ 75.532123][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 75.532144][ T29] audit: type=1326 audit(1765961582.755:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 75.542256][ T5268] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5268 comm=syz.3.575 [ 75.548571][ T29] audit: type=1326 audit(1765961582.775:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5262 comm="syz.4.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 75.613403][ T5268] __nla_validate_parse: 15 callbacks suppressed [ 75.613424][ T5268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.575'. [ 75.628759][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 75.674857][ T5275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.577'. [ 75.687622][ T29] audit: type=1326 audit(1765961582.915:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 75.715843][ T29] audit: type=1326 audit(1765961582.935:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 75.739471][ T29] audit: type=1326 audit(1765961582.935:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 75.762864][ T29] audit: type=1326 audit(1765961582.935:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 75.786346][ T29] audit: type=1326 audit(1765961582.935:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 75.809680][ T29] audit: type=1326 audit(1765961582.935:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 75.832928][ T29] audit: type=1326 audit(1765961582.935:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 75.856377][ T29] audit: type=1326 audit(1765961582.935:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.3.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 75.887197][ T5275] bond0: (slave dummy0): Releasing backup interface [ 75.903444][ T5275] team0: Port device dummy0 added [ 75.922173][ T5276] lo speed is unknown, defaulting to 1000 [ 76.147426][ T5277] team0: Port device dummy0 removed [ 76.160978][ T5278] loop3: detected capacity change from 0 to 1024 [ 76.184118][ T5277] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.222487][ T5282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.579'. [ 76.235176][ T5278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.256840][ T5282] netem: change failed [ 76.310599][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.580'. [ 76.351529][ T5282] bond0: (slave dummy0): Releasing backup interface [ 76.368336][ T5282] team0: Port device dummy0 added [ 76.373844][ T5275] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.577: missing EA_INODE flag [ 76.392395][ T5275] EXT4-fs (loop3): Remounting filesystem read-only [ 76.399696][ T5293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.580'. [ 76.409249][ T5282] team0: Port device dummy0 removed [ 76.418679][ T5282] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.425210][ T5213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.468341][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.478991][ T5282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.493193][ T5295] EXT4-fs: Ignoring removed orlov option [ 76.514253][ T5295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.578380][ T5282] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.579: missing EA_INODE flag [ 76.634184][ T5306] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.560: Allocating blocks 257-513 which overlap fs metadata [ 76.641340][ T5282] EXT4-fs (loop0): Remounting filesystem read-only [ 76.655220][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.745146][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.813973][ T5323] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5323 comm=syz.0.592 [ 76.826567][ T5323] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5323 comm=syz.0.592 [ 76.841335][ T5323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.592'. [ 76.850542][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'. [ 76.871655][ T5311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.589'. [ 76.916017][ T5328] ref_ctr increment failed for inode: 0x2a1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad96c00 [ 76.916389][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.005257][ T5330] EXT4-fs: Ignoring removed orlov option [ 77.016651][ T5330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.119812][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.321797][ T5356] syzkaller0: entered promiscuous mode [ 77.327417][ T5356] syzkaller0: entered allmulticast mode [ 77.355944][ T5358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.604'. [ 77.366569][ T5358] netem: change failed [ 77.391949][ T5358] bond0: (slave dummy0): Releasing backup interface [ 77.402530][ T5358] team0: Port device dummy0 added [ 77.414299][ T5358] team0: Port device dummy0 removed [ 77.422577][ T5358] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.472185][ T5358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.502939][ T5358] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.604: missing EA_INODE flag [ 77.540489][ T5358] EXT4-fs (loop0): Remounting filesystem read-only [ 77.617881][ T5368] bond0: (slave dummy0): Releasing backup interface [ 77.630557][ T5368] team0: Port device dummy0 added [ 77.655787][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.665368][ T5368] team0: Port device dummy0 removed [ 77.678417][ T5368] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.719842][ T5375] set_capacity_and_notify: 5 callbacks suppressed [ 77.719876][ T5375] loop4: detected capacity change from 0 to 1024 [ 77.742251][ T5374] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5374 comm=syz.0.607 [ 77.754725][ T5374] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5374 comm=syz.0.607 [ 77.779449][ T5375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.844103][ T5386] bond0: (slave dummy0): Releasing backup interface [ 77.854808][ T5386] team0: Port device dummy0 added [ 77.862311][ T5388] loop0: detected capacity change from 0 to 512 [ 77.880071][ T5368] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.606: missing EA_INODE flag [ 77.892626][ T5368] EXT4-fs (loop4): Remounting filesystem read-only [ 77.912865][ T5388] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 77.921983][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.932203][ T5386] team0: Port device dummy0 removed [ 77.954755][ T5386] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 77.971288][ T5393] loop2: detected capacity change from 0 to 1024 [ 77.971878][ T5388] EXT4-fs (loop0): invalid journal inode [ 77.996181][ T5396] netem: change failed [ 78.023319][ T5397] ref_ctr increment failed for inode: 0x312 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104475e80 [ 78.037823][ T5396] validate_nla: 10 callbacks suppressed [ 78.037836][ T5396] netlink: 'syz.1.616': attribute type 10 has an invalid length. [ 78.053786][ T5393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.072461][ T5396] bond0: (slave dummy0): Releasing backup interface [ 78.082484][ T5396] team0: Port device dummy0 added [ 78.090802][ T5396] netlink: 'syz.1.616': attribute type 10 has an invalid length. [ 78.100347][ T5386] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.611: missing EA_INODE flag [ 78.117529][ T5386] EXT4-fs (loop2): Remounting filesystem read-only [ 78.125398][ T5396] team0: Port device dummy0 removed [ 78.134117][ T5396] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.148459][ T5406] loop1: detected capacity change from 0 to 1024 [ 78.159883][ T5406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.161692][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.215899][ T5396] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.616: missing EA_INODE flag [ 78.257500][ T5396] EXT4-fs (loop1): Remounting filesystem read-only [ 78.284045][ T5416] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5416 comm=syz.0.622 [ 78.296548][ T5416] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5416 comm=syz.0.622 [ 78.389724][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.508648][ T5431] loop0: detected capacity change from 0 to 1024 [ 78.524020][ T5431] EXT4-fs: Ignoring removed orlov option [ 78.602282][ T5439] lo speed is unknown, defaulting to 1000 [ 78.784978][ T5444] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 78.848226][ T5446] loop3: detected capacity change from 0 to 512 [ 78.856731][ T5446] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 78.874344][ T5446] EXT4-fs (loop3): invalid journal inode [ 78.906003][ T5446] program syz.3.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.000747][ T5431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.045081][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.143160][ T5455] netem: change failed [ 79.151157][ T5455] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 79.162632][ T5455] bond0: (slave dummy0): Releasing backup interface [ 79.173784][ T5455] team0: Port device dummy0 added [ 79.203928][ T5457] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5457 comm=syz.2.639 [ 79.216652][ T5457] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5457 comm=syz.2.639 [ 79.257167][ T5458] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 79.278503][ T5455] loop0: detected capacity change from 0 to 1024 [ 79.295714][ T5458] team0: Port device dummy0 removed [ 79.304796][ T5458] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 79.318876][ T5459] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 79.328433][ T5455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.345205][ T5455] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.638: missing EA_INODE flag [ 79.368863][ T5455] EXT4-fs (loop0): Remounting filesystem read-only [ 79.404045][ T5467] netlink: 'syz.3.642': attribute type 10 has an invalid length. [ 79.419017][ T5467] bond0: (slave dummy0): Releasing backup interface [ 79.426465][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.438215][ T5467] team0: Port device dummy0 added [ 79.448590][ T5467] netlink: 'syz.3.642': attribute type 10 has an invalid length. [ 79.463014][ T5467] team0: Port device dummy0 removed [ 79.478299][ T5467] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 79.521497][ T5467] loop3: detected capacity change from 0 to 1024 [ 79.549553][ T5467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.564490][ T5467] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.642: missing EA_INODE flag [ 79.577293][ T5467] EXT4-fs (loop3): Remounting filesystem read-only [ 79.618576][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.879975][ T5483] loop3: detected capacity change from 0 to 1024 [ 79.935430][ T5483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.974263][ T5495] ref_ctr increment failed for inode: 0x299 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104475100 [ 80.032752][ T5500] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.647: Allocating blocks 257-513 which overlap fs metadata [ 80.094327][ T5502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5502 comm=syz.4.654 [ 80.107019][ T5502] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5502 comm=syz.4.654 [ 80.180602][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.207435][ T5508] netlink: 'syz.3.657': attribute type 10 has an invalid length. [ 80.217399][ T5508] bond0: (slave dummy0): Releasing backup interface [ 80.231357][ T5508] team0: Port device dummy0 added [ 80.242809][ T5508] netlink: 'syz.3.657': attribute type 10 has an invalid length. [ 80.265421][ T5508] team0: Port device dummy0 removed [ 80.273615][ T5508] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 80.290721][ T5508] loop3: detected capacity change from 0 to 1024 [ 80.380661][ T5508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.401248][ T5508] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.657: missing EA_INODE flag [ 80.444044][ T5508] EXT4-fs (loop3): Remounting filesystem read-only [ 80.503739][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.625617][ T29] kauditd_printk_skb: 648 callbacks suppressed [ 80.625637][ T29] audit: type=1326 audit(1765961587.845:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 80.643108][ T5527] __nla_validate_parse: 20 callbacks suppressed [ 80.643128][ T5527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'. [ 80.681294][ T29] audit: type=1326 audit(1765961587.845:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 80.705210][ T29] audit: type=1326 audit(1765961587.845:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 80.728496][ T29] audit: type=1326 audit(1765961587.845:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 80.751852][ T29] audit: type=1326 audit(1765961587.845:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 80.775230][ T29] audit: type=1326 audit(1765961587.845:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 80.798915][ T29] audit: type=1326 audit(1765961587.845:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 80.822250][ T29] audit: type=1326 audit(1765961587.845:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 80.845809][ T29] audit: type=1326 audit(1765961587.845:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 80.869710][ T29] audit: type=1326 audit(1765961587.845:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5526 comm="syz.4.664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd974fdf749 code=0x7ffc0000 [ 81.225852][ T5504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.380506][ T5558] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.655: Allocating blocks 497-513 which overlap fs metadata [ 81.435936][ T5562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.675'. [ 81.458583][ T5562] netlink: 'syz.4.675': attribute type 10 has an invalid length. [ 81.481012][ T5562] bond0: (slave dummy0): Releasing backup interface [ 81.492293][ T5562] team0: Port device dummy0 added [ 81.497782][ T5566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.676'. [ 81.510036][ T5562] netlink: 'syz.4.675': attribute type 10 has an invalid length. [ 81.523615][ T5566] bond0: (slave dummy0): Releasing backup interface [ 81.534671][ T5566] team0: Port device dummy0 added [ 81.578819][ T5566] team0: Port device dummy0 removed [ 81.586562][ T5567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.613987][ T5566] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 81.629691][ T5567] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.675: missing EA_INODE flag [ 81.642943][ T5567] EXT4-fs (loop4): Remounting filesystem read-only [ 81.650005][ T5562] team0: Port device dummy0 removed [ 81.667738][ T5562] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 81.676489][ T5574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.678'. [ 81.692585][ T5574] bond0: (slave dummy0): Releasing backup interface [ 81.704101][ T5572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.717728][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.741089][ T5574] team0: Port device dummy0 added [ 81.744448][ T5566] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.676: missing EA_INODE flag [ 81.757765][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.767293][ T5577] team0: Port device dummy0 removed [ 81.776356][ T5566] EXT4-fs (loop2): Remounting filesystem read-only [ 81.785730][ T5577] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 81.833209][ T5574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.887938][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.900482][ T5574] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.678: missing EA_INODE flag [ 81.918295][ T5574] EXT4-fs (loop3): Remounting filesystem read-only [ 81.999161][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.019785][ T5605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.687'. [ 82.036436][ T5605] bond0: (slave dummy0): Releasing backup interface [ 82.058726][ T5605] team0: Port device dummy0 added [ 82.069919][ T5605] team0: Port device dummy0 removed [ 82.078233][ T5605] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.087231][ T5612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.690'. [ 82.096116][ T5612] netem: change failed [ 82.122207][ T5612] bond0: (slave dummy0): Releasing backup interface [ 82.140201][ T5605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.143521][ T5612] team0: Port device dummy0 added [ 82.163700][ T5603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.685'. [ 82.174443][ T5612] team0: Port device dummy0 removed [ 82.176406][ T5605] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.687: missing EA_INODE flag [ 82.182695][ T5612] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.193518][ T5605] EXT4-fs (loop2): Remounting filesystem read-only [ 82.233976][ T5612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.258963][ T5612] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.690: missing EA_INODE flag [ 82.270906][ T5612] EXT4-fs (loop0): Remounting filesystem read-only [ 82.290859][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.303290][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.550377][ T5655] EXT4-fs: inline encryption not supported [ 82.556712][ T5655] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.569883][ T5655] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.750110][ T5655] EXT4-fs (loop3): 1 truncate cleaned up [ 82.766037][ T5655] FAULT_INJECTION: forcing a failure. [ 82.766037][ T5655] name failslab, interval 1, probability 0, space 0, times 0 [ 82.778953][ T5655] CPU: 1 UID: 0 PID: 5655 Comm: syz.3.704 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.778982][ T5655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.778999][ T5655] Call Trace: [ 82.779008][ T5655] [ 82.779019][ T5655] __dump_stack+0x1d/0x30 [ 82.779051][ T5655] dump_stack_lvl+0xe8/0x140 [ 82.779078][ T5655] dump_stack+0x15/0x1b [ 82.779169][ T5655] should_fail_ex+0x265/0x280 [ 82.779193][ T5655] should_failslab+0x8c/0xb0 [ 82.779230][ T5655] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 82.779308][ T5655] ? __alloc_skb+0x324/0x4d0 [ 82.779335][ T5655] __alloc_skb+0x324/0x4d0 [ 82.779406][ T5655] ? __alloc_skb+0x24d/0x4d0 [ 82.779434][ T5655] netlink_alloc_large_skb+0xbf/0xf0 [ 82.779464][ T5655] netlink_sendmsg+0x3cf/0x6b0 [ 82.779502][ T5655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.779552][ T5655] __sock_sendmsg+0x145/0x180 [ 82.779578][ T5655] ____sys_sendmsg+0x31e/0x4a0 [ 82.779626][ T5655] ___sys_sendmsg+0x17b/0x1d0 [ 82.779717][ T5655] __x64_sys_sendmsg+0xd4/0x160 [ 82.779757][ T5655] x64_sys_call+0x17ba/0x3000 [ 82.779823][ T5655] do_syscall_64+0xd8/0x2c0 [ 82.779887][ T5655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.779909][ T5655] RIP: 0033:0x7f11a7f1f749 [ 82.779928][ T5655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.779947][ T5655] RSP: 002b:00007f11a697f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.779970][ T5655] RAX: ffffffffffffffda RBX: 00007f11a8175fa0 RCX: 00007f11a7f1f749 [ 82.779982][ T5655] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 82.779997][ T5655] RBP: 00007f11a697f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.780063][ T5655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.780079][ T5655] R13: 00007f11a8176038 R14: 00007f11a8175fa0 R15: 00007ffc08394df8 [ 82.780104][ T5655] [ 83.036529][ T5661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.706'. [ 83.056475][ T5661] validate_nla: 8 callbacks suppressed [ 83.056495][ T5661] netlink: 'syz.4.706': attribute type 10 has an invalid length. [ 83.072710][ T5664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.705'. [ 83.099703][ T5661] bond0: (slave dummy0): Releasing backup interface [ 83.103843][ T5664] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 83.114674][ T5665] netlink: 'syz.4.706': attribute type 10 has an invalid length. [ 83.127914][ T5661] team0: Port device dummy0 added [ 83.154684][ T5670] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 83.157736][ T5665] team0: Port device dummy0 removed [ 83.176457][ T5665] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.186078][ T5661] set_capacity_and_notify: 8 callbacks suppressed [ 83.186095][ T5661] loop4: detected capacity change from 0 to 1024 [ 83.202680][ T5664] bond0: (slave dummy0): Releasing backup interface [ 83.216403][ T5672] loop3: detected capacity change from 0 to 1024 [ 83.229715][ T5664] team0: Port device dummy0 added [ 83.237244][ T5672] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.705: missing EA_INODE flag [ 83.267194][ T5672] EXT4-fs (loop3): Remounting filesystem read-only [ 83.315137][ T5661] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.706: missing EA_INODE flag [ 83.333377][ T5670] team0: Port device dummy0 removed [ 83.342701][ T5670] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.352038][ T5661] EXT4-fs (loop4): Remounting filesystem read-only [ 83.360092][ T5680] ref_ctr increment failed for inode: 0x25e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad91b00 [ 83.374527][ T5673] pimreg: entered allmulticast mode [ 83.382202][ T5673] pimreg: left allmulticast mode [ 83.505023][ T5690] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5690 comm=syz.0.715 [ 83.517523][ T5690] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5690 comm=syz.0.715 [ 83.532153][ T5690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.715'. [ 83.756046][ T5712] netlink: 'syz.3.724': attribute type 10 has an invalid length. [ 83.785683][ T5712] bond0: (slave dummy0): Releasing backup interface [ 83.795404][ T5712] team0: Port device dummy0 added [ 83.802214][ T5712] netlink: 'syz.3.724': attribute type 10 has an invalid length. [ 83.813513][ T5712] team0: Port device dummy0 removed [ 83.821460][ T5712] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.842320][ T5712] loop3: detected capacity change from 0 to 1024 [ 83.906288][ T5713] lo speed is unknown, defaulting to 1000 [ 84.113310][ T5712] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.724: missing EA_INODE flag [ 84.158784][ T5712] EXT4-fs (loop3): Remounting filesystem read-only [ 84.379359][ T5721] ref_ctr increment failed for inode: 0x372 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad92f40 [ 84.392237][ T5722] netlink: 'syz.3.725': attribute type 1 has an invalid length. [ 84.428674][ T5722] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 84.437846][ T5722] bond1: (slave batadv5): making interface the new active one [ 84.446785][ T5722] bond1: (slave batadv5): Enslaving as an active interface with an up link [ 84.572457][ T5722] bond1 (unregistering): (slave batadv5): Releasing active interface [ 84.591308][ T5696] loop1: detected capacity change from 0 to 1024 [ 84.598208][ T5730] loop0: detected capacity change from 0 to 512 [ 84.610582][ T5722] bond1 (unregistering): Released all slaves [ 84.628576][ T5730] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 84.640848][ T5730] EXT4-fs (loop0): invalid journal inode [ 84.666137][ T5730] program syz.0.728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.698409][ T5731] pimreg: entered allmulticast mode [ 84.709004][ T5731] pimreg: left allmulticast mode [ 84.938758][ T5744] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.717: Allocating blocks 257-513 which overlap fs metadata [ 85.126463][ T5756] team0 (unregistering): Port device team_slave_0 removed [ 85.170480][ T5756] team0 (unregistering): Port device team_slave_1 removed [ 85.350764][ T5758] netlink: 'syz.4.739': attribute type 10 has an invalid length. [ 85.366831][ T5758] bond0: (slave dummy0): Releasing backup interface [ 85.389036][ T5758] netlink: 'syz.4.739': attribute type 10 has an invalid length. [ 85.400388][ T5758] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 85.421731][ T5758] loop4: detected capacity change from 0 to 1024 [ 85.449254][ T5758] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.739: missing EA_INODE flag [ 85.461976][ T5758] EXT4-fs (loop4): Remounting filesystem read-only [ 85.657949][ T5776] __nla_validate_parse: 5 callbacks suppressed [ 85.657967][ T5776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.746'. [ 85.688137][ T5776] netem: change failed [ 85.701419][ T5778] pimreg: entered allmulticast mode [ 85.711225][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 85.711241][ T29] audit: type=1326 audit(1765961592.935:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 85.712202][ T5776] netlink: 'syz.0.746': attribute type 10 has an invalid length. [ 85.726108][ T5778] pimreg: left allmulticast mode [ 85.753999][ T29] audit: type=1326 audit(1765961592.935:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 85.777590][ T29] audit: type=1326 audit(1765961592.935:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 85.801171][ T29] audit: type=1326 audit(1765961592.935:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 85.824517][ T29] audit: type=1326 audit(1765961592.935:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 85.848449][ T29] audit: type=1326 audit(1765961592.935:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 85.871708][ T29] audit: type=1326 audit(1765961592.935:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 85.895247][ T29] audit: type=1326 audit(1765961592.935:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 85.923598][ T5776] bond0: (slave dummy0): Releasing backup interface [ 85.931420][ T5785] loop1: detected capacity change from 0 to 2048 [ 85.941780][ T5776] team0: Port device dummy0 added [ 85.947142][ T5786] loop0: detected capacity change from 0 to 1024 [ 85.969581][ T29] audit: type=1326 audit(1765961593.195:5449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 85.993156][ T29] audit: type=1326 audit(1765961593.195:5450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.0.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc973ef749 code=0x7ffc0000 [ 86.019346][ T5782] team0: Port device dummy0 removed [ 86.030748][ T5782] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 86.049264][ T5788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.750'. [ 86.058229][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 86.114287][ T5776] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.746: missing EA_INODE flag [ 86.158235][ T5776] EXT4-fs (loop0): Remounting filesystem read-only [ 87.162805][ T5835] ref_ctr increment failed for inode: 0x3a4 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104470000 [ 87.204527][ T5799] loop4: detected capacity change from 0 to 1024 [ 87.290762][ T5843] loop3: detected capacity change from 0 to 512 [ 87.298652][ T5843] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 87.307265][ T5843] EXT4-fs (loop3): invalid journal inode [ 87.359358][ T5837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.768'. [ 87.466736][ T5850] pimreg: entered allmulticast mode [ 87.479695][ T5850] pimreg: left allmulticast mode [ 87.503138][ T5805] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.754: Allocating blocks 257-513 which overlap fs metadata [ 87.706732][ T5866] ref_ctr increment failed for inode: 0x3d0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104474a40 [ 87.708842][ T5868] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 87.731929][ T5868] EXT4-fs (loop0): invalid journal inode [ 87.756314][ T5868] program syz.0.781 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.874558][ T5879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.785'. [ 87.887056][ T5879] netem: change failed [ 87.896323][ T5879] bond0: (slave dummy0): Releasing backup interface [ 87.914611][ T5879] team0: Port device dummy0 added [ 87.928805][ T5879] team0: Port device dummy0 removed [ 87.938616][ T5879] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 87.960624][ T5881] pimreg: entered allmulticast mode [ 87.968925][ T5881] pimreg: left allmulticast mode [ 87.982797][ T5879] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.785: missing EA_INODE flag [ 87.994768][ T5879] EXT4-fs (loop0): Remounting filesystem read-only [ 88.150700][ T5898] ref_ctr increment failed for inode: 0x3b0 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104471440 [ 88.400452][ T5913] pimreg: entered allmulticast mode [ 88.424608][ T5913] pimreg: left allmulticast mode [ 88.561919][ T5926] set_capacity_and_notify: 2 callbacks suppressed [ 88.561940][ T5926] loop2: detected capacity change from 0 to 1024 [ 88.583936][ T5926] EXT4-fs: Ignoring removed orlov option [ 88.587510][ T5916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.800'. [ 88.763254][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.809'. [ 88.795434][ T5940] netem: change failed [ 88.823619][ T5940] validate_nla: 3 callbacks suppressed [ 88.823638][ T5940] netlink: 'syz.0.809': attribute type 10 has an invalid length. [ 88.869400][ T5945] netlink: 'syz.0.809': attribute type 10 has an invalid length. [ 88.877563][ T5940] bond0: (slave dummy0): Releasing backup interface [ 88.888778][ T5940] team0: Port device dummy0 added [ 88.993404][ T5945] team0: Port device dummy0 removed [ 89.010104][ T5945] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.088405][ T5940] loop0: detected capacity change from 0 to 1024 [ 89.135445][ T5940] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.809: missing EA_INODE flag [ 89.161824][ T5940] EXT4-fs (loop0): Remounting filesystem read-only [ 89.270586][ T5955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.814'. [ 89.302318][ T5955] netem: change failed [ 89.394984][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.817'. [ 89.406133][ T5955] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 89.421656][ T5961] netem: change failed [ 89.428666][ T5955] bond0: (slave dummy0): Releasing backup interface [ 89.441820][ T5955] team0: Port device dummy0 added [ 89.451956][ T5961] netlink: 'syz.1.817': attribute type 10 has an invalid length. [ 89.460508][ T5963] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 89.464707][ T5905] loop4: detected capacity change from 0 to 1024 [ 89.476030][ T5961] bond0: (slave dummy0): Releasing backup interface [ 89.495757][ T5961] team0: Port device dummy0 added [ 89.650244][ T5963] team0: Port device dummy0 removed [ 89.656500][ T5961] netlink: 'syz.1.817': attribute type 10 has an invalid length. [ 89.700349][ T5955] loop0: detected capacity change from 0 to 1024 [ 89.706875][ T5968] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.796: Allocating blocks 257-513 which overlap fs metadata [ 89.732422][ T5969] loop1: detected capacity change from 0 to 1024 [ 89.743822][ T5963] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.788549][ T5969] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.817: missing EA_INODE flag [ 89.854632][ T5955] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.814: missing EA_INODE flag [ 89.888803][ T5969] EXT4-fs (loop1): Remounting filesystem read-only [ 89.897457][ T5955] EXT4-fs (loop0): Remounting filesystem read-only [ 89.907543][ T5961] team0: Port device dummy0 removed [ 89.915315][ T5961] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.986969][ T5980] loop0: detected capacity change from 0 to 512 [ 90.064220][ T5980] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 90.072918][ T5980] EXT4-fs (loop0): invalid journal inode [ 90.178802][ T5993] ref_ctr increment failed for inode: 0x3fa offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810ad957c0 [ 90.196368][ T5980] program syz.0.819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.315356][ T5991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'. [ 90.392051][ T6002] loop0: detected capacity change from 0 to 2048 [ 90.583107][ T6008] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 90.602036][ T6008] bond0: (slave dummy0): Releasing backup interface [ 90.615798][ T6008] team0: Port device dummy0 added [ 90.627247][ T6008] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 90.641058][ T6008] team0: Port device dummy0 removed [ 90.650509][ T6008] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 90.676360][ T6008] loop3: detected capacity change from 0 to 1024 [ 90.713947][ T6008] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.831: missing EA_INODE flag [ 90.736323][ T6008] EXT4-fs (loop3): Remounting filesystem read-only [ 90.772811][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 90.772831][ T29] audit: type=1326 audit(1765961597.995:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 90.817163][ T29] audit: type=1326 audit(1765961597.995:6050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 90.840577][ T29] audit: type=1326 audit(1765961598.035:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 90.864291][ T29] audit: type=1326 audit(1765961598.035:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 90.887677][ T29] audit: type=1326 audit(1765961598.035:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 90.911501][ T29] audit: type=1326 audit(1765961598.035:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 90.934935][ T29] audit: type=1326 audit(1765961598.035:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 90.958584][ T29] audit: type=1326 audit(1765961598.035:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 90.982153][ T29] audit: type=1326 audit(1765961598.035:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 91.005517][ T29] audit: type=1326 audit(1765961598.035:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6007 comm="syz.3.831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a7f1f749 code=0x7ffc0000 [ 91.124203][ T6024] loop1: detected capacity change from 0 to 512 [ 91.139792][ T6024] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 91.163219][ T6024] EXT4-fs (loop1): invalid journal inode [ 91.171394][ T3315] ================================================================== [ 91.179645][ T3315] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 91.187249][ T3315] [ 91.189601][ T3315] read-write to 0xffff888237c26468 of 1 bytes by task 3307 on cpu 0: [ 91.197736][ T3315] folio_add_lru+0xa5/0x1f0 [ 91.202278][ T3315] folio_add_lru_vma+0x49/0x70 [ 91.207089][ T3315] handle_mm_fault+0x2858/0x2c60 [ 91.212061][ T3315] do_user_addr_fault+0x3fe/0x1080 [ 91.217260][ T3315] exc_page_fault+0x62/0xa0 [ 91.221800][ T3315] asm_exc_page_fault+0x26/0x30 [ 91.226682][ T3315] rep_movs_alternative+0x4a/0x90 [ 91.228419][ T6024] program syz.1.838 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.231734][ T3315] _copy_to_iter+0x141/0xe70 [ 91.231765][ T3315] copy_page_to_iter+0x18f/0x2d0 [ 91.231789][ T3315] filemap_read+0x407/0xa00 [ 91.231812][ T3315] blkdev_read_iter+0x22d/0x2e0 [ 91.259808][ T3315] vfs_read+0x64c/0x770 [ 91.263992][ T3315] ksys_read+0xda/0x1a0 [ 91.268167][ T3315] __x64_sys_read+0x40/0x50 [ 91.272697][ T3315] x64_sys_call+0x2889/0x3000 [ 91.277416][ T3315] do_syscall_64+0xd8/0x2c0 [ 91.281970][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.287928][ T3315] [ 91.290259][ T3315] read to 0xffff888237c26468 of 1 bytes by task 3315 on cpu 1: [ 91.297805][ T3315] __lru_add_drain_all+0x17e/0x450 [ 91.302937][ T3315] lru_add_drain_all+0x10/0x20 [ 91.307731][ T3315] invalidate_bdev+0x47/0x70 [ 91.312335][ T3315] ext4_put_super+0x624/0x7d0 [ 91.317042][ T3315] generic_shutdown_super+0xe6/0x210 [ 91.322359][ T3315] kill_block_super+0x2a/0x70 [ 91.327048][ T3315] ext4_kill_sb+0x42/0x80 [ 91.331512][ T3315] deactivate_locked_super+0x75/0x1c0 [ 91.336909][ T3315] deactivate_super+0x97/0xa0 [ 91.341605][ T3315] cleanup_mnt+0x2a9/0x320 [ 91.346044][ T3315] __cleanup_mnt+0x19/0x20 [ 91.350624][ T3315] task_work_run+0x131/0x1a0 [ 91.355223][ T3315] exit_to_user_mode_loop+0x1fe/0x740 [ 91.360629][ T3315] do_syscall_64+0x1ef/0x2c0 [ 91.365246][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.371152][ T3315] [ 91.373481][ T3315] value changed: 0x07 -> 0x08 [ 91.378165][ T3315] [ 91.380490][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 91.386645][ T3315] CPU: 1 UID: 0 PID: 3315 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.396551][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.406653][ T3315] ================================================================== SYZFAIL: failed to send rpc fd=3 want=5176 sent=0 n=-1 (errno 32: Broken pipe) [ 91.992957][ T861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.100203][ T861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.171359][ T861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.231035][ T861] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.307330][ T861] bridge_slave_1: left allmulticast mode [ 92.313027][ T861] bridge_slave_1: left promiscuous mode [ 92.318871][ T861] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.327851][ T861] bridge_slave_0: left allmulticast mode [ 92.333529][ T861] bridge_slave_0: left promiscuous mode [ 92.339391][ T861] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.419338][ T861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.429558][ T861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.439728][ T861] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 92.448761][ T861] bond0 (unregistering): Released all slaves [ 92.531980][ T861] hsr_slave_0: left promiscuous mode [ 92.538169][ T861] hsr_slave_1: left promiscuous mode [ 92.544019][ T861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.551505][ T861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.562171][ T861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.569917][ T861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.579544][ T861] veth1_macvtap: left promiscuous mode [ 92.585038][ T861] veth0_macvtap: left promiscuous mode [ 92.590885][ T861] veth1_vlan: left promiscuous mode [ 92.596277][ T861] veth0_vlan: left promiscuous mode [ 92.660868][ T861] team0 (unregistering): Port device team_slave_1 removed [ 92.670671][ T861] team0 (unregistering): Port device team_slave_0 removed [ 92.981446][ T861] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.029008][ T861] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.091943][ T861] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.138679][ T861] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.211709][ T861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.252306][ T861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.290711][ T861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.342243][ T861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.428263][ T861] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.470814][ T861] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.520786][ T861] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.570371][ T861] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.646481][ T861] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.700466][ T861] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.751430][ T861] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.811960][ T861] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.867631][ T861] bridge_slave_1: left allmulticast mode [ 93.873325][ T861] bridge_slave_1: left promiscuous mode [ 93.879150][ T861] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.887529][ T861] bridge_slave_0: left allmulticast mode [ 93.893191][ T861] bridge_slave_0: left promiscuous mode [ 93.899337][ T861] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.908116][ T861] bridge_slave_1: left allmulticast mode [ 93.913912][ T861] bridge_slave_1: left promiscuous mode [ 93.919649][ T861] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.927605][ T861] bridge_slave_0: left allmulticast mode [ 93.933259][ T861] bridge_slave_0: left promiscuous mode [ 93.938937][ T861] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.947463][ T861] bridge_slave_1: left allmulticast mode [ 93.953204][ T861] bridge_slave_1: left promiscuous mode [ 93.958991][ T861] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.967355][ T861] bridge_slave_0: left allmulticast mode [ 93.973009][ T861] bridge_slave_0: left promiscuous mode [ 93.978865][ T861] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.987267][ T861] bridge_slave_1: left allmulticast mode [ 93.992990][ T861] bridge_slave_1: left promiscuous mode [ 93.998920][ T861] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.006816][ T861] bridge_slave_0: left allmulticast mode [ 94.012568][ T861] bridge_slave_0: left promiscuous mode [ 94.018390][ T861] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.159704][ T861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.169626][ T861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.179837][ T861] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 94.188875][ T861] bond0 (unregistering): Released all slaves [ 94.289897][ T861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.299784][ T861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.309764][ T861] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 94.319019][ T861] bond0 (unregistering): Released all slaves [ 94.360303][ T861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.370286][ T861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.380617][ T861] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 94.389669][ T861] bond0 (unregistering): Released all slaves [ 94.460146][ T861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.470180][ T861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.480571][ T861] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 94.489652][ T861] bond0 (unregistering): Released all slaves [ 94.632214][ T861] hsr_slave_0: left promiscuous mode [ 94.639869][ T861] hsr_slave_1: left promiscuous mode [ 94.645581][ T861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.653144][ T861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.661200][ T861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.668694][ T861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.678300][ T861] hsr_slave_0: left promiscuous mode [ 94.684158][ T861] hsr_slave_1: left promiscuous mode [ 94.689910][ T861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.697355][ T861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.704818][ T861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.712246][ T861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.721656][ T861] hsr_slave_0: left promiscuous mode [ 94.727453][ T861] hsr_slave_1: left promiscuous mode [ 94.733198][ T861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.740660][ T861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.748316][ T861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.755958][ T861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.765339][ T861] hsr_slave_0: left promiscuous mode [ 94.771344][ T861] hsr_slave_1: left promiscuous mode [ 94.777172][ T861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.784568][ T861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.792331][ T861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.799856][ T861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.812700][ T861] veth1_macvtap: left promiscuous mode [ 94.818293][ T861] veth0_macvtap: left promiscuous mode [ 94.823958][ T861] veth1_vlan: left promiscuous mode [ 94.829268][ T861] veth0_vlan: left promiscuous mode [ 94.835251][ T861] veth1_macvtap: left promiscuous mode [ 94.840858][ T861] veth0_macvtap: left promiscuous mode [ 94.846507][ T861] veth1_vlan: left promiscuous mode [ 94.851817][ T861] veth0_vlan: left promiscuous mode [ 94.857784][ T861] veth1_macvtap: left promiscuous mode [ 94.863284][ T861] veth0_macvtap: left promiscuous mode [ 94.868917][ T861] veth1_vlan: left promiscuous mode [ 94.874254][ T861] veth0_vlan: left promiscuous mode [ 94.880518][ T861] veth1_macvtap: left promiscuous mode [ 94.886046][ T861] veth0_macvtap: left promiscuous mode [ 94.891814][ T861] veth1_vlan: left promiscuous mode [ 94.897099][ T861] veth0_vlan: left promiscuous mode [ 95.064349][ T861] team0 (unregistering): Port device team_slave_1 removed [ 95.074669][ T861] team0 (unregistering): Port device team_slave_0 removed [ 95.133161][ T861] team0 (unregistering): Port device team_slave_1 removed [ 95.143311][ T861] team0 (unregistering): Port device team_slave_0 removed [ 95.226426][ T12] smc: removing ib device sz1 [ 95.275815][ T861] team0 (unregistering): Port device team_slave_1 removed [ 95.285879][ T861] team0 (unregistering): Port device team_slave_0 removed [ 95.319729][ T3485] lo speed is unknown, defaulting to 1000 [ 95.325518][ T3485] sz1: Port: 1 Link DOWN