last executing test programs: 53.794551411s ago: executing program 0 (id=4081): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 53.772898851s ago: executing program 0 (id=4082): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setuid(0xee01) 53.536948381s ago: executing program 0 (id=4083): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ffc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/61, 0x3d}}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="093e73f30d438dd1710008000c2d2a000000f7ffe178b855e6ee2c82fac237b2efc35cc693d5beac5f9acd26b407f7e93367ba5f3c00727a5562dcf014411d615b50b841f02305842fe93eac448a39dfef1226f175ae7ddc04fa97d22a0e7d52ab81e4ef3ae5e6a8e0310b5451ec85d1a411e5463cf966b4fe6e65ad05a1a565c1f5fb79370026971de9440f462eb1b4288b765cae849126f55cb180c6eb91fca6128be7069a511a2032ab644688eb134bdb407b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000c00)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYBLOB="0a730bd04ec9c29ce7a154022550ae691c9cb1ee9917c699a2d6eb32b7a98ed2c4c98fdbb411cb4a4d4db5b0566f36fab33caca9c739688aa9f1ff0fe84aa2fbb2713e50262cb993ea34a16e97e1344ab546646c8b355a1eb15038ca52c049e8c2983693c2a9983ae698bbfde49316ae44619ae58772b9dd96cc23ddb006365572a726b8cad886c91202c3106df3268770e023fdfa90c709d9b0feac0889"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000001e00000010000000000000000000000004e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000001000000000000000000000000001001d0084ffffffffffff7f00000000000000000000000000000000020000000000000000000000000000008000000000000000000000000000000000000000000000000001000000000000000000000000000008001f0002000000f91cb4e197d3c81a95131c943427aedc78a505d2435d334cd7cc1f1ec70eeea2a98d3607f31a91d0daba8466e1233661da6c0256965c75e7c306d4e48b8f2f530d18aeb3eb6d9e74e369b63c974d12b75cc1cd"], 0xc0}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 53.388413408s ago: executing program 0 (id=4084): r0 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0x6, 0x3, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) ptrace$peeksig(0x4209, r6, &(0x7f0000000180)={0x7, 0x1, 0x9}, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={r7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x11d, 0xf, 0x0, 0x0) 53.263067314s ago: executing program 0 (id=4086): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 2) 53.059770462s ago: executing program 0 (id=4087): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x8}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00"], 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)=0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) creat(&(0x7f00000002c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x201, 0xf, 0x2e}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xf}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@usrquota}, {@grpjquota}, {@nogrpid}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 53.059628802s ago: executing program 32 (id=4087): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x8}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00"], 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)=0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) creat(&(0x7f00000002c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x201, 0xf, 0x2e}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xf}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@usrquota}, {@grpjquota}, {@nogrpid}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.356344531s ago: executing program 3 (id=4988): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x8}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)=0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r6, 0x0, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x201, 0xf, 0x2e}, &(0x7f0000000200)=0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@usrquota}, {@grpjquota}, {@nogrpid}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.308808833s ago: executing program 3 (id=4990): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000016c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001680)={&(0x7f00000000c0)={0x15b0, r1, 0x22bbb22abbe0a83, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xdb, 0xfc, "5ca4c30029727f75785083452fcc882d289ddb5c9eb1649a539acbb29546d26a86ca23d7bdfe85c21305d5fede7a0fbbe55309c2704abb1490ef8dec45ce4ae04720789f4fcce59e686bf2dc3b8723830d7f1863d351a399416e3bed021bd5b061f766ef91a6800474ec9a0f926d7a1b7c6414f7466014c972bef362065ee8d455fda4b3bab45ccbf67b7266ffe3e56ce06b896115751fb44f6fca097d60a8f76c2688cbdde47a0f2e3f178c7222c8148b76ce767cc1e2e4d66326450a93aa5c37eb6364e808f11e8aeaabc276bdaf789230d42990c984"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x70, 0xfc, "e1bd0b594563b5b548b6e25b70e90f17b2fe00af30be4cd21fb20da68354f1edcfc22c7e3021ba39284b8ce72570b16584e5ce8dbd2c433a7dd606b9a7d2e976c888dd36f9bff8a9700385b44680af0118c29679ac424fe1e6016f1c6438151f24e3ab76896d25ec8e8acaab"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "82fd35fe03817dd69f771b"}, @NL80211_ATTR_FILS_ERP_RRK={0xea, 0xfc, "78507e957f8cf30e3c6e95877a56a333667beb8eb904cd9092c37df782338f9997ff1662f504b58a600119d63c8eae26c21cc00407e24fe448425bbcbc34e42b7023165d177341435e459c071ab635524ddfc59daea3003dba4b6eacc6b01c85f7bcc5fcaa4e537b9b8add6fda4f07bc48761764747e09796debf5f0972e23af37c524840564cceac284df1a1c7b9fb75f59eb2d2d2391e013e052f8d6193e32ea7a5b688a8d86c6a0dee5e1bcf010e5d7cf1a237670462f29549944cd59e4b9a8f19b247a0c5b7983042c5698fbfc72eb5dab1b41e58727f32a1c2a8618b3450a91bfd3255e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "a1a4e4931b51a527"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "eea8b201f268"}], @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x20}}]}, @NL80211_ATTR_IE={0x1ac, 0x2a, [@erp={0x2a, 0x1}, @mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0x71, "26a9fbe5eee57e4f97d5dd5a73d7de52f781e1a737612f5c5a87e3df002fea07c84eee4621ff07588257fafe678cd8fc25f5d4c0f6175f3e5d46abde0456fad65f04fa3fb4c783d4291f11e863a657ac01c8a33c666d876a3364a7985f6e9340c4d133efdcaa61f68eb7844d0a68879ba1"}, @mesh_chsw={0x76, 0x6, {0x8, 0x3, 0x2, 0x2}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @measure_req={0x26, 0xe0, {0x0, 0x3, 0x3, "5a482f4321837c69f4987943f7cc10cb4d2748ed80bcdeff221ce214defa4af2d377340ec73a5ab8dd1e0acaa7a849b88ccb3d1a1d600e93663ac0251b2191de61840155d57c73f7a621c6c51d779831708ad37baf3582d5c2e7212f866c3b11ac40cd18e0e334baa3dfdae0baaa5408dd141b7ad7760c7cf01381aca25e6d44bb334b7289b6c5e8abf3991d2e3e23043dda3141ccd4c4db9b5ddc85622e2a61d52c032ad54718de27dffa22a178806fec2477d4a53f417f7c34fd230d1d8f0882759e7dab370c0598c708dec2d80fead5f8ae2dd6b2501c1ecc12187e"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @link_id={0x65, 0x12, {@initial, @broadcast}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "1e532f42e553c5a39ba069e992"}, @NL80211_ATTR_FILS_ERP_REALM={0x5e, 0xfa, "b5b56091a8a0056edd3a6c37c2fdd438a25c520311a06ae779c6fbaab5ee630c8eac6065cb07f0d586a666ba76840e83478d208fc6f1eef4b75568e2a0bfc433be071f1cab54f13925c7f2dab0cf08573d6eee7539698b5401fa"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xff}, @NL80211_ATTR_FILS_ERP_REALM={0xdc, 0xfa, "35ed3152819e9877e65de8b06b3b6b7a011f3d4fea2d193dba254e20f5289a5c0e94489e396a95b4f143eebd18e7747630522ba1d369ab70a40362d9ea90deb2f66b82c01be303d29d12ce73b99425bfcf130adb7d80f46d5a7af78024e3993b61f34eebbec207f9f19e479c74f8b15874a1240d16e6027dbdbb5bd3ee0f456c18e7fe6407b9f3adf008f1735d836ba2275861f63c2949f24d6ab136f1ee973153921a5df8f116334633af6d5b146d5fcbc659e0a00d792805883947cd65b297e4e095c74933be6c2cccf43b0be0544344b27c7d5adae095"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xc8a}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "68e8755619c4a1d18066ba8604b6"}]]}, 0x15b0}, 0x1, 0x0, 0x0, 0x8400}, 0x4006) syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r0) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x15}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x30}}, 0x4000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000018c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001900)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001940)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001a40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x68, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x80000}, 0x4000085) r8 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r8, &(0x7f0000001a80)={'#! ', './file0', [{0x20, '[:}\'#)\xbf\x88#]\'%{'}, {0x20, '\x03\x03\x03\x03\x03\x03'}, {0x20, '\\#&-\x95'}], 0xa, "fbe100f9ee07388c475e6c0c400739542247472f9f3d01cd8a7491d67ed105a42d50eaf4be58c38dcbe8d8a561ba4657234e02120458aa3e6f4b1947464acb5cdce71f426c6ae8c8b430151c1b74d2d35c5c10b3050bd0052a3ce231b418d2f617c0ddc492f183f57469bf66fee2330f2b353b50170191898316d9e737f7fd57684d01ba22808105c0834b83f1115d3a5d1408de1a8c75a7ad097123aced311248fe537e56a4350f8df6b5656e19f20e26206f910f847186308142a0caeff1edc0289d1d9831282af5b6d57971af28f4d4"}, 0xf7) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0xc, 0x25, &(0x7f0000001cc0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xaab}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff83f5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000001e00)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x48, '\x00', r7, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000001e40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001e80)={0x0, 0x3, 0x6, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000001ec0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001f00)=[{0x3, 0x3, 0x7, 0x4}, {0x1, 0x2, 0xf, 0x1}, {0x4, 0x3, 0x3, 0x8}, {0x0, 0x4, 0x3, 0xa}, {0x1, 0x1, 0xb, 0x5}, {0x3, 0x3, 0x1, 0xc}, {0x0, 0x2, 0x2, 0x1}]}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002080)={0xffffffffffffffff, 0x9}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x11, 0xf, &(0x7f0000001b80)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x912}], &(0x7f0000001c00)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x41000, 0x6e, '\x00', r7, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001c80)={0x5, 0xd, 0x5, 0x2}, 0x10, 0xffffffffffffffff, r9, 0x3, &(0x7f00000020c0)=[r10, r11, 0x1], &(0x7f0000002100)=[{0x5, 0x5, 0xa, 0x4}, {0x1, 0x3, 0x9, 0xb}, {0x1, 0x5, 0x1, 0x2}], 0x10, 0x7}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', &(0x7f0000002240)=@xfs_parent={0x1c, 0x82, {0x5, 0x420, 0x5, 0xbef3}}, &(0x7f0000002280), 0x600) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002300), r3) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r12, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002380)={&(0x7f0000002340)={0x24, r13, 0x2, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x24}}, 0x81) syz_genetlink_get_family_id$fou(&(0x7f0000002400), r3) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000025c0)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002480)={0xfc, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fffffff}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff7fff}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8005}, 0x40008d4) syz_genetlink_get_family_id$devlink(&(0x7f0000002640), r12) sendmsg$NL80211_CMD_SET_PMK(r12, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002900)={&(0x7f0000002840)={0xb0, r1, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x34}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "334b5676297f76160b060fc1a193cb78"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3e29ded3917931efc3b0de00d3c0306a"}, @NL80211_ATTR_PMK={0x14, 0xfe, "375ffa3af8c8056a8763b098e99b5b7d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ab3c5d8c576457610735f0fc23a6ebe2"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a38dddc1f8445aee06ce2d1889b724f7"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "0c8613fa180fe39da6f0f5c9caaab43a"}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002a80)={&(0x7f00000029c0)={0xc0, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x6}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x8cd946e0c464d857}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$binfmt_misc(r8, &(0x7f0000002b00)="8b6fd6140a79", 0x6) 1.240141346s ago: executing program 1 (id=4993): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.215364337s ago: executing program 2 (id=4996): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) readv(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r8, {0xffe0}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 1.192677508s ago: executing program 3 (id=4997): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 1.14269306s ago: executing program 1 (id=4999): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) alarm(0x2) 1.061832994s ago: executing program 1 (id=5001): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1, 0x0, 0x8000000000000040}, 0x18) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000100000000000640000068048c93924e64b34e18110000", @ANYRES32=r2, @ANYRESDEC=r4], &(0x7f0000000340)='syzkaller\x00', 0x1002, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) io_setup(0x7, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r4}, 0x0, &(0x7f0000000940)=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01000400000000000200180000001800000004000000020000000000000c02000000000000000000000d0000000000005f00"], 0x0, 0x34}, 0x20) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) 1.060871754s ago: executing program 2 (id=5002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x5e) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 985.114297ms ago: executing program 1 (id=5003): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 979.096317ms ago: executing program 5 (id=5004): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 947.967428ms ago: executing program 1 (id=5005): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd"], 0x0) 909.88436ms ago: executing program 1 (id=5006): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x28f43000) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 879.896821ms ago: executing program 5 (id=5007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000e40)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) r4 = fsmount(r3, 0x0, 0x88) utimensat(r4, 0x0, &(0x7f0000000280)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) openat(r4, &(0x7f0000000000)='./file0\x00', 0x410040, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) mount$9p_tcp(0x0, &(0x7f0000001040)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000001000)=ANY=[@ANYBLOB]) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000000000000000000000006167a88100", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='spmi_write_end\x00', r9, 0x0, 0x4}, 0xe) r10 = socket$netlink(0x10, 0x3, 0x14) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r11, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}}) 864.589282ms ago: executing program 3 (id=5009): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 804.933855ms ago: executing program 5 (id=5011): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) alarm(0x2) 785.984756ms ago: executing program 5 (id=5012): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000480), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x83, 0x7}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x8a, 0x1, 0x0, 0x80000000}) 751.399037ms ago: executing program 3 (id=5013): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000070000000e000000160000e005"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c000200010000001500000008000500", @ANYRES32=0x0, @ANYBLOB="e6d52cbc6069b706cddfa757908a76b34c3416d707d9bb2e1fd61a0313ff13e34ee03791ebb385bb333b9870eaa116b0d4b9dc83db43b64d75a6ad3ba5f32906"], 0x2c}, 0x1, 0x0, 0x0, 0x400c008}, 0x4000080) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x10007ffffffff}, 0x18) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="021302000600"/16], 0x10}}, 0x4004844) sendmsg$key(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14) 726.120158ms ago: executing program 3 (id=5014): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x49, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r4, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c00000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000f68ac368c3ee524912331ae5c6796200"/43], 0x48) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2) recvmmsg(r2, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 692.08389ms ago: executing program 4 (id=5015): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 691.65089ms ago: executing program 5 (id=5016): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x8}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)=0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x201, 0xf, 0x2e}, &(0x7f0000000200)=0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@usrquota}, {@grpjquota}, {@nogrpid}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c851, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 690.20978ms ago: executing program 2 (id=5017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c0000001c000380180003801400010a050002000000000008000100200000000c00018008000100", @ANYRES32=r4], 0x3c}}, 0x0) 627.571902ms ago: executing program 5 (id=5018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) socket(0x10, 0x803, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c0000001c000380180003801400010a050002000000000008000100200000000c00018008000100", @ANYRES32=r4], 0x3c}}, 0x0) 623.537753ms ago: executing program 4 (id=5019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0xfffffffffffffdf9) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 536.021346ms ago: executing program 4 (id=5020): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@usrquota}, {@grpjquota}, {@nogrpid}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") 535.468696ms ago: executing program 2 (id=5021): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$kcm(0x2, 0x3, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed", 0x4}], 0x1}, 0x0) 495.873148ms ago: executing program 2 (id=5022): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ffc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000b00)=""/250, 0xfa, 0x0, &(0x7f00000001c0)=""/61, 0x3d}}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="093e73f30d438dd1710008000c2d2a000000f7ffe178b855e6ee2c82fac237b2efc35cc693d5beac5f9acd26b407f7e93367ba5f3c00727a5562dcf014411d615b50b841f02305842fe93eac448a39dfef1226f175ae7ddc04fa97d22a0e7d52ab81e4ef3ae5e6a8e0310b5451ec85d1a411e5463cf966b4fe6e65ad05a1a565c1f5fb79370026971de9440f462eb1b4288b765cae849126f55cb180c6eb91fca6128be7069a511a2032ab644688eb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000c00)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYBLOB="0a730bd04ec9c29ce7a154022550ae691c9cb1ee9917c699a2d6eb32b7a98ed2c4c98fdbb411cb4a4d4db5b0566f36fab33caca9c739688aa9f1ff0fe84aa2fbb2713e50262cb993ea34a16e97e1344ab546646c8b355a1eb15038ca52c049e8c2983693c2a9983ae698bbfde49316ae44619ae58772b9dd96cc23ddb006365572a726b8cad886c91202c3106df3268770e023fdfa90c709d9b0feac0889"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c00000001900674c0000000000000000ff010000000000000000000000000001e00000010000000000000000000000004e210000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000001000000000000000000000000001001d0084ffffffffffff7f00000000000000000000000000000000020000000000000000000000000000008000000000000000000000000000000000000000000000000001000000000000000000000000000008001f0002000000f91cb4e197d3c81a95131c943427aedc78a505d2435d334cd7cc1f1ec70eeea2a98d3607f31a91d0daba8466e1233661da6c0256965c75e7c306d4e48b8f2f530d18aeb3eb6d9e74e369b63c974d12b75cc1cd"], 0xc0}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 229.28434ms ago: executing program 4 (id=5023): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) 40.468918ms ago: executing program 4 (id=5024): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000070000000e000000160000e005"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c000200010000001500000008000500", @ANYRES32=0x0, @ANYBLOB="e6d52cbc6069b706cddfa757908a76b34c3416d707d9bb2e1fd61a0313ff13e34ee03791ebb385bb333b9870eaa116b0d4b9dc83db43b64d75a6ad3ba5f32906"], 0x2c}, 0x1, 0x0, 0x0, 0x400c008}, 0x4000080) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10007ffffffff}, 0x18) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="021302000600"/16], 0x10}}, 0x4004844) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x14) 15.108669ms ago: executing program 2 (id=5025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x3}, [@generic={0x65}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000b40)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) perf_event_open(0x0, 0x0, 0x5, r5, 0xd5485419bc0689c1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="34620000043aace36c7f6312daeaf22e89ace5b4604b374b93f317334cf56e30e1c7152fca3949b94faad9210d161e8c307176769328a837218334b63f8169954726", @ANYRES16=r9, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005000000"], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000340)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@barrier}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x10, 0x46f, &(0x7f00000014c0)="$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") 0s ago: executing program 4 (id=5026): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff, 0x381, 0x7, 0x6, 0xe, 0x800}, &(0x7f0000000100)={0x1, 0x40, 0x6, 0x2, 0x81, 0x2, 0x7da7, 0x5}, &(0x7f0000000140)={0x9, 0x3, 0x93a, 0xffffffffffffffff, 0x101, 0x2, 0x7e8, 0x2}, &(0x7f0000000340)={r3, r4+60000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x9693]}, 0x8}) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) sendmsg$NL80211_CMD_GET_WIPHY(r0, 0x0, 0x44) ioperm(0x3c, 0x1, 0x8) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async, rerun: 64) listen(r5, 0xfffffffc) (rerun: 64) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7, 0x0, 0x7fff}, 0x18) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000100020073797a310000000005000100070000001c0007800c00018008f20140ffffffff0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) kernel console output (not intermixed with test programs): : writeback. [ 335.560668][T12005] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.244652][T13270] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 336.265097][T16334] loop3: detected capacity change from 0 to 164 [ 336.482239][ T4895] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.534449][ T4895] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.600604][ T4895] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.639742][ T4895] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.943501][ T4895] bond0 (unregistering): Released all slaves [ 336.950067][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4090'. [ 336.951576][T16369] sch_fq: defrate 4294967295 ignored. [ 336.957215][T16352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16352 comm=syz.4.4090 [ 336.957820][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.978616][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.978694][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.012041][ T4897] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.147832][T16384] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.148024][T16384] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.166652][ T4895] hsr_slave_0: left promiscuous mode [ 337.170076][ T4895] hsr_slave_1: left promiscuous mode [ 337.173228][ T4895] veth1_macvtap: left promiscuous mode [ 337.173258][ T4895] veth0_macvtap: left promiscuous mode [ 337.173306][ T4895] veth1_vlan: left promiscuous mode [ 337.173482][ T4895] veth0_vlan: left promiscuous mode [ 337.289201][T16394] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 337.775736][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 337.775751][ T29] audit: type=1326 audit(1763603262.953:18311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.4.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 337.805976][ T29] audit: type=1326 audit(1763603262.953:18312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.4.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 337.829923][ T29] audit: type=1326 audit(1763603262.953:18313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.4.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 337.849712][T16411] sch_fq: defrate 4294967295 ignored. [ 337.853605][ T29] audit: type=1326 audit(1763603262.953:18314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.4.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f180611f783 code=0x7ffc0000 [ 337.866070][T16411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16411 comm=syz.2.4102 [ 337.882477][ T29] audit: type=1326 audit(1763603262.953:18315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.4.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f180611f783 code=0x7ffc0000 [ 337.919391][ T29] audit: type=1326 audit(1763603262.953:18316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.4.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 337.943698][ T29] audit: type=1326 audit(1763603262.953:18317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.4.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 337.967667][ T29] audit: type=1326 audit(1763603262.953:18318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.4.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 337.992118][ T29] audit: type=1326 audit(1763603262.953:18319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.4.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 338.015841][ T29] audit: type=1326 audit(1763603262.953:18320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.4.4099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 338.067887][T16341] chnl_net:caif_netlink_parms(): no params data found [ 338.170195][T16428] loop3: detected capacity change from 0 to 2048 [ 338.241335][T16428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.285532][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.310106][T16341] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.317488][T16341] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.338383][T16341] bridge_slave_0: entered allmulticast mode [ 338.357336][T16341] bridge_slave_0: entered promiscuous mode [ 338.369037][T16341] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.376287][T16341] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.397235][T16341] bridge_slave_1: entered allmulticast mode [ 338.409975][T16465] loop2: detected capacity change from 0 to 512 [ 338.417887][T16341] bridge_slave_1: entered promiscuous mode [ 338.424172][T16465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 338.437344][T16465] EXT4-fs (loop2): orphan cleanup on readonly fs [ 338.463131][T16465] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4113: Failed to acquire dquot type 1 [ 338.480736][T16465] EXT4-fs (loop2): 1 truncate cleaned up [ 338.492863][T16465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.541794][T12814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.591034][T16478] loop2: detected capacity change from 0 to 512 [ 338.598311][T16478] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 338.634656][T16478] EXT4-fs (loop2): orphan cleanup on readonly fs [ 338.641905][T16478] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4116: Failed to acquire dquot type 1 [ 338.654163][T16478] EXT4-fs (loop2): 1 truncate cleaned up [ 338.660318][T16478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 338.676959][T16341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.686317][T16472] sch_fq: defrate 4294967295 ignored. [ 338.705346][T12814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.717353][T16341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.732977][T16472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16472 comm=syz.1.4114 [ 338.781395][T16341] team0: Port device team_slave_0 added [ 338.802829][T16487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16487 comm=syz.2.4117 [ 338.803093][T16472] __nla_validate_parse: 10 callbacks suppressed [ 338.803113][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4114'. [ 338.855252][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4114'. [ 338.867476][T16341] team0: Port device team_slave_1 added [ 338.873449][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4114'. [ 338.939459][T16341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.946759][T16341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.972726][T16341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.008570][T16341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.015620][T16341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.041855][T16341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.059283][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4121'. [ 339.117844][T16341] hsr_slave_0: entered promiscuous mode [ 339.130535][T16341] hsr_slave_1: entered promiscuous mode [ 339.137409][T16341] debugfs: 'hsr0' already exists in 'hsr' [ 339.143241][T16341] Cannot create hsr debugfs directory [ 339.215070][T16530] loop2: detected capacity change from 0 to 164 [ 339.269451][T16532] loop3: detected capacity change from 0 to 512 [ 339.277876][T16532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.304502][T16341] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 339.315638][T16341] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 339.315933][T16532] EXT4-fs (loop3): orphan cleanup on readonly fs [ 339.318397][T16341] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.322141][T16532] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4127: Failed to acquire dquot type 1 [ 339.352022][T16341] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 339.362524][T16532] EXT4-fs (loop3): 1 truncate cleaned up [ 339.363172][T16532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.398689][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.449768][T16341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.454491][T16549] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.491868][T16341] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.501027][ T4896] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.508160][ T4896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.521724][ T4896] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.521770][ T4896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.543413][T16549] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.592192][T16549] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.629880][T16549] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.639570][T16341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.683223][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.699217][ T4895] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.713648][ T4895] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.761607][T16575] loop3: detected capacity change from 0 to 512 [ 339.761813][ T169] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.780232][T16575] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.791411][T16575] EXT4-fs (loop3): orphan cleanup on readonly fs [ 339.810561][T16575] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4136: Failed to acquire dquot type 1 [ 339.811167][T16575] EXT4-fs (loop3): 1 truncate cleaned up [ 339.811731][T16575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.851928][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.968025][T16341] veth0_vlan: entered promiscuous mode [ 339.980843][T16593] loop3: detected capacity change from 0 to 512 [ 339.983259][T16593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.984675][T16341] veth1_vlan: entered promiscuous mode [ 339.985191][T16593] EXT4-fs (loop3): orphan cleanup on readonly fs [ 339.986733][T16593] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4140: Failed to acquire dquot type 1 [ 339.987880][T16593] EXT4-fs (loop3): 1 truncate cleaned up [ 339.998114][T16593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.035078][T16341] veth0_macvtap: entered promiscuous mode [ 340.042545][T16341] veth1_macvtap: entered promiscuous mode [ 340.052791][T16341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.072091][T16599] loop1: detected capacity change from 0 to 1024 [ 340.080101][T16341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.119713][T16599] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 340.151464][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.160708][T16605] netlink: 'syz.4.4147': attribute type 21 has an invalid length. [ 340.168714][T16605] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4147'. [ 340.187772][ T4895] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.198532][ T4895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.208225][T16605] netlink: 'syz.4.4147': attribute type 4 has an invalid length. [ 340.208658][T16599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.216147][T16605] netlink: 'syz.4.4147': attribute type 5 has an invalid length. [ 340.236072][T16605] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4147'. [ 340.247824][T16607] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.259811][ T4895] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.276312][ T4895] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.290825][T16615] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 340.305804][T16607] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.344141][T16607] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.401674][T16607] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.426008][T11778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.578866][ T4895] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.995914][ T4895] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.004680][ T4895] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.013192][ T4895] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.040650][T16645] loop3: detected capacity change from 0 to 512 [ 341.059195][T16645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 341.071055][T16647] syz!: rxe_newlink: already configured on team_slave_0 [ 341.083680][T16645] EXT4-fs (loop3): orphan cleanup on readonly fs [ 341.093437][T16645] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4156: Failed to acquire dquot type 1 [ 341.119105][T16645] EXT4-fs (loop3): 1 truncate cleaned up [ 341.127950][T16652] netlink: 'syz.1.4159': attribute type 21 has an invalid length. [ 341.136010][T16652] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4159'. [ 341.146010][T16652] netlink: 'syz.1.4159': attribute type 4 has an invalid length. [ 341.146274][T16645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.153886][T16652] netlink: 'syz.1.4159': attribute type 5 has an invalid length. [ 341.153905][T16652] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4159'. [ 341.270980][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.327323][T16667] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.391895][T16667] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.434729][T16681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4170'. [ 341.456807][T16681] loop7: detected capacity change from 0 to 6 [ 341.463602][T12093] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.472930][T12093] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.480826][T12093] loop7: unable to read partition table [ 341.487868][T16667] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.498134][T16681] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.509831][T16685] FAULT_INJECTION: forcing a failure. [ 341.509831][T16685] name failslab, interval 1, probability 0, space 0, times 0 [ 341.522576][T16685] CPU: 1 UID: 0 PID: 16685 Comm: syz.1.4172 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 341.522615][T16685] Tainted: [W]=WARN [ 341.522622][T16685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.522634][T16685] Call Trace: [ 341.522676][T16685] [ 341.522687][T16685] __dump_stack+0x1d/0x30 [ 341.522715][T16685] dump_stack_lvl+0xe8/0x140 [ 341.522742][T16685] dump_stack+0x15/0x1b [ 341.522764][T16685] should_fail_ex+0x265/0x280 [ 341.522877][T16685] should_failslab+0x8c/0xb0 [ 341.522908][T16685] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 341.522999][T16685] ? __alloc_skb+0x101/0x320 [ 341.523041][T16685] __alloc_skb+0x101/0x320 [ 341.523076][T16685] ? audit_log_start+0x342/0x720 [ 341.523173][T16685] audit_log_start+0x3a0/0x720 [ 341.523201][T16685] ? kstrtouint+0x76/0xc0 [ 341.523236][T16685] audit_seccomp+0x48/0x100 [ 341.523302][T16685] ? __seccomp_filter+0x82d/0x1250 [ 341.523337][T16685] __seccomp_filter+0x83e/0x1250 [ 341.523376][T16685] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 341.523417][T16685] ? vfs_write+0x7e8/0x960 [ 341.523447][T16685] ? __rcu_read_unlock+0x4f/0x70 [ 341.523596][T16685] ? __fget_files+0x184/0x1c0 [ 341.523689][T16685] __secure_computing+0x82/0x150 [ 341.523754][T16685] syscall_trace_enter+0xcf/0x1e0 [ 341.523828][T16685] do_syscall_64+0xac/0x200 [ 341.523856][T16685] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 341.523930][T16685] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 341.523968][T16685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.523993][T16685] RIP: 0033:0x7f0b84bcf749 [ 341.524033][T16685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.524055][T16685] RSP: 002b:00007f0b8362f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 341.524079][T16685] RAX: ffffffffffffffda RBX: 00007f0b84e25fa0 RCX: 00007f0b84bcf749 [ 341.524135][T16685] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000069 [ 341.524147][T16685] RBP: 00007f0b8362f090 R08: 0000000000000000 R09: 0000000000000000 [ 341.524159][T16685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.524174][T16685] R13: 00007f0b84e26038 R14: 00007f0b84e25fa0 R15: 00007ffcc497a828 [ 341.524199][T16685] [ 341.752519][T16681] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.760475][T16681] loop7: unable to read partition table [ 341.766203][T16681] loop_reread_partitions: partition scan of loop7 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 341.779306][T12093] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.787706][T12093] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.795700][T12093] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.803710][T12093] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.812159][T12093] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.820517][T12093] Buffer I/O error on dev loop7, logical block 0, async page read [ 341.833492][T16681] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16681 comm=syz.2.4170 [ 341.860033][T16667] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.885975][T16691] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.554589][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 342.554605][ T29] audit: type=1326 audit(1763603268.002:18623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 342.585155][ T29] audit: type=1326 audit(1763603268.002:18624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 342.609036][ T29] audit: type=1326 audit(1763603268.002:18625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 342.632943][ T29] audit: type=1326 audit(1763603268.002:18626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 342.657088][ T29] audit: type=1326 audit(1763603268.002:18627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 342.681141][ T29] audit: type=1326 audit(1763603268.002:18628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 342.704924][ T29] audit: type=1326 audit(1763603268.002:18629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 342.728632][ T29] audit: type=1326 audit(1763603268.013:18630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 342.752230][ T29] audit: type=1326 audit(1763603268.013:18631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 342.775857][ T29] audit: type=1326 audit(1763603268.034:18632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16711 comm="syz.4.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 342.800463][T16715] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 342.867507][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4186'. [ 342.994550][T16726] sch_fq: defrate 4294967295 ignored. [ 343.000697][T16726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16726 comm=syz.1.4186 [ 343.088423][T16734] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 343.193468][T16741] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 343.342680][T16754] IPv4: Oversized IP packet from 127.202.26.0 [ 343.384015][T16761] loop2: detected capacity change from 0 to 512 [ 343.426201][T16762] IPv4: Oversized IP packet from 127.202.26.0 [ 343.468014][T16761] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.658429][T16761] EXT4-fs (loop2): orphan cleanup on readonly fs [ 343.724308][T16761] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.4203: Failed to acquire dquot type 1 [ 343.757734][T16761] EXT4-fs (loop2): 1 truncate cleaned up [ 343.858894][T16761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 343.897309][T12814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.973632][T16691] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.004545][T16774] __nla_validate_parse: 5 callbacks suppressed [ 344.004562][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4207'. [ 344.057114][T16779] loop2: detected capacity change from 0 to 1024 [ 344.065711][T16779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.096885][T16779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.115372][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4208'. [ 344.292197][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'. [ 344.592044][T16691] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.648509][T16788] sch_fq: defrate 4294967295 ignored. [ 344.689896][T16785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16785 comm=syz.1.4209 [ 344.703932][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'. [ 344.723068][T12814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.741929][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'. [ 344.752282][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'. [ 344.774168][T16790] loop2: detected capacity change from 0 to 164 [ 344.811656][T16691] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.885790][ T146] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.904294][ T146] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.909132][ T3335] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.930896][T16799] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 344.959251][ T3335] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.074176][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4218'. [ 345.074274][T16813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.079535][T16813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.157731][T16822] loop2: detected capacity change from 0 to 1024 [ 346.224402][T16822] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 346.239462][T16824] loop1: detected capacity change from 0 to 512 [ 346.255046][T16822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.269145][T16824] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.4222: iget: bad extra_isize 90 (inode size 256) [ 346.274182][T16831] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16831 comm=syz.4.4224 [ 346.283394][T16824] EXT4-fs (loop1): Remounting filesystem read-only [ 346.295433][T16831] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16831 comm=syz.4.4224 [ 346.303283][T16824] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 346.324083][T16824] EXT4-fs (loop1): 1 orphan inode deleted [ 346.330644][T16824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.350174][T16824] netlink: 'syz.1.4222': attribute type 21 has an invalid length. [ 346.358208][T16824] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4222'. [ 346.384212][T16824] netlink: 'syz.1.4222': attribute type 4 has an invalid length. [ 346.392176][T16824] netlink: 'syz.1.4222': attribute type 5 has an invalid length. [ 346.400250][T16824] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4222'. [ 346.430429][T11778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.443473][T12814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.547007][T16849] loop1: detected capacity change from 0 to 164 [ 346.558476][T16847] loop2: detected capacity change from 0 to 512 [ 346.587904][T16847] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.4231: iget: bad extra_isize 90 (inode size 256) [ 346.588098][T16847] EXT4-fs (loop2): Remounting filesystem read-only [ 346.608704][T16847] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 346.618046][T16847] EXT4-fs (loop2): 1 orphan inode deleted [ 346.618502][T16847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.651070][T16847] netlink: 'syz.2.4231': attribute type 21 has an invalid length. [ 346.651087][T16847] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4231'. [ 346.651110][T16847] netlink: 'syz.2.4231': attribute type 4 has an invalid length. [ 346.651125][T16847] netlink: 'syz.2.4231': attribute type 5 has an invalid length. [ 346.725115][T12814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.881905][T16859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16859 comm=syz.4.4235 [ 346.881935][T16859] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16859 comm=syz.4.4235 [ 347.379213][T16872] delete_channel: no stack [ 347.386014][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 347.386031][ T29] audit: type=1400 audit(1763603273.063:18942): avc: denied { create } for pid=16872 comm="syz.1.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 347.413885][ T29] audit: type=1400 audit(1763603273.063:18943): avc: denied { ioctl } for pid=16872 comm="syz.1.4241" path="socket:[61732]" dev="sockfs" ino=61732 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 347.488292][T16881] loop1: detected capacity change from 0 to 512 [ 347.497829][T16881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 347.522217][T16881] EXT4-fs (loop1): orphan cleanup on readonly fs [ 347.529327][T16881] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 347.538917][T16881] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 347.548565][T16881] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4245: Failed to acquire dquot type 1 [ 347.576056][T16881] EXT4-fs (loop1): 1 truncate cleaned up [ 347.582434][T16881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.801076][T16889] loop2: detected capacity change from 0 to 1024 [ 347.810881][T11778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.830710][T16889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 347.908429][T16889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.009166][T16894] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.107679][T16894] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.185979][T12814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.230759][T16894] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.313946][T16900] loop2: detected capacity change from 0 to 512 [ 348.333691][T16900] EXT4-fs (loop2): fragment/cluster size (1024) != block size (4096) [ 348.355831][ T146] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.389819][ T146] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.412683][T16894] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.442942][ T146] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.451745][ T146] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.479873][T16902] loop3: detected capacity change from 0 to 512 [ 348.514896][ T146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.559876][T16902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 348.569580][ T29] audit: type=1326 audit(1763603274.291:18944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 348.593074][ T29] audit: type=1326 audit(1763603274.291:18945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 348.616356][ T29] audit: type=1326 audit(1763603274.291:18946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 348.639461][ T29] audit: type=1326 audit(1763603274.291:18947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 348.662679][ T29] audit: type=1326 audit(1763603274.291:18948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 348.685772][ T29] audit: type=1326 audit(1763603274.291:18949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 348.715247][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.730935][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.748135][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.767502][T16902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.796766][T16902] ext4 filesystem being mounted at /213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.834586][T16917] __nla_validate_parse: 1 callbacks suppressed [ 348.834604][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4256'. [ 348.861668][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4250'. [ 348.949626][T16924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16924 comm=syz.1.4256 [ 348.959918][T16921] sch_fq: defrate 4294967295 ignored. [ 348.969073][T16920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4250'. [ 349.042686][T16926] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.056513][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4256'. [ 349.066340][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4256'. [ 349.075472][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4256'. [ 349.130286][T16926] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.183841][T16926] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.240572][T16926] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.304265][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.425761][T16943] loop2: detected capacity change from 0 to 1024 [ 349.440624][ T146] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.449982][ T146] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.486842][T16943] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.533024][ T146] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.556108][T16943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.574631][ T146] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.702371][T16947] loop3: detected capacity change from 0 to 512 [ 349.717003][T16947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 349.726518][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4265'. [ 349.744480][T16947] EXT4-fs (loop3): orphan cleanup on readonly fs [ 349.754156][T16947] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4263: Failed to acquire dquot type 1 [ 349.767353][T16947] EXT4-fs (loop3): 1 truncate cleaned up [ 349.773880][T16947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.824680][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.892749][T16961] netlink: 'syz.3.4267': attribute type 10 has an invalid length. [ 349.900791][T16961] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4267'. [ 349.935044][T16961] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 349.993080][T12814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.015903][T16971] loop1: detected capacity change from 0 to 512 [ 350.027171][T16971] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.067537][T16971] EXT4-fs (loop1): orphan cleanup on readonly fs [ 350.079146][T16978] loop3: detected capacity change from 0 to 1024 [ 350.086262][T16971] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4269: Failed to acquire dquot type 1 [ 350.100125][T16978] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 350.110840][T16971] EXT4-fs (loop1): 1 truncate cleaned up [ 350.118184][T16971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.155830][T16978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.168802][T11778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.242398][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.349836][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'. [ 350.478754][T17017] loop3: detected capacity change from 0 to 512 [ 350.487654][T17017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 350.502525][T17017] EXT4-fs (loop3): orphan cleanup on readonly fs [ 350.510407][T17012] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.523837][T17015] sch_fq: defrate 4294967295 ignored. [ 350.531542][T17017] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4285: Failed to acquire dquot type 1 [ 350.556772][T17017] EXT4-fs (loop3): 1 truncate cleaned up [ 350.708110][T17012] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.768345][T17005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17005 comm=syz.1.4281 [ 350.803315][T17012] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.826417][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'. [ 350.861948][T17012] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.909114][T17017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 350.956612][T17029] loop1: detected capacity change from 0 to 2048 [ 350.975379][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.976923][T17029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.024634][T11778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.043470][T17040] loop3: detected capacity change from 0 to 512 [ 351.061440][T17040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.132401][T17053] loop1: detected capacity change from 0 to 1024 [ 351.142295][T17040] EXT4-fs (loop3): orphan cleanup on readonly fs [ 351.149623][T17053] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 351.163490][T17040] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4287: Failed to acquire dquot type 1 [ 351.181056][T17055] xt_policy: neither incoming nor outgoing policy selected [ 351.207297][T17040] EXT4-fs (loop3): 1 truncate cleaned up [ 351.227265][T17053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.247984][T17040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.910076][T17105] loop5: detected capacity change from 0 to 512 [ 351.918258][T17105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 351.936277][T17105] EXT4-fs (loop5): orphan cleanup on readonly fs [ 352.046317][T17105] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4298: Failed to acquire dquot type 1 [ 352.068627][T17105] EXT4-fs (loop5): 1 truncate cleaned up [ 352.256951][T17113] loop5: detected capacity change from 0 to 1024 [ 352.310483][T17113] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 352.478715][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 352.478736][ T29] audit: type=1326 audit(1763603279.372:19245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 352.508819][ T29] audit: type=1326 audit(1763603279.372:19246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 352.532953][ T29] audit: type=1326 audit(1763603279.372:19247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 352.556958][ T29] audit: type=1326 audit(1763603279.372:19248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdead4af783 code=0x7ffc0000 [ 352.580727][ T29] audit: type=1326 audit(1763603279.372:19249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdead4af783 code=0x7ffc0000 [ 352.604241][ T29] audit: type=1326 audit(1763603279.372:19250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 352.628019][ T29] audit: type=1326 audit(1763603279.372:19251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 352.651988][ T29] audit: type=1326 audit(1763603279.372:19252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 352.675754][ T29] audit: type=1326 audit(1763603279.372:19253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 352.699454][ T29] audit: type=1326 audit(1763603279.372:19254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17112 comm="syz.5.4300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 352.989233][T17144] sch_fq: defrate 4294967295 ignored. [ 353.051691][T17141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17141 comm=syz.3.4308 [ 353.122713][T17153] loop3: detected capacity change from 0 to 512 [ 353.130312][T17153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 353.140701][T17153] EXT4-fs (loop3): orphan cleanup on readonly fs [ 353.147791][T17153] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4310: Failed to acquire dquot type 1 [ 353.159921][T17153] EXT4-fs (loop3): 1 truncate cleaned up [ 353.788475][T17162] netlink: 'syz.4.4313': attribute type 21 has an invalid length. [ 353.796577][T17162] __nla_validate_parse: 7 callbacks suppressed [ 353.796658][T17162] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4313'. [ 353.808875][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.826550][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.835355][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.843623][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.852108][T17162] netlink: 'syz.4.4313': attribute type 4 has an invalid length. [ 353.859901][T17162] netlink: 'syz.4.4313': attribute type 5 has an invalid length. [ 353.867700][T17162] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4313'. [ 354.097555][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4319'. [ 354.106645][T17175] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 354.113868][T17175] batman_adv: batadv0: Removing interface: veth1_vlan [ 354.158631][T17189] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 354.777405][T17206] loop3: detected capacity change from 0 to 512 [ 354.825819][T17206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.846970][T17206] EXT4-fs (loop3): orphan cleanup on readonly fs [ 354.853940][T17206] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4328: Failed to acquire dquot type 1 [ 354.865902][T17206] EXT4-fs (loop3): 1 truncate cleaned up [ 354.898450][T17209] loop5: detected capacity change from 0 to 2048 [ 354.974800][T17217] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.024970][T17222] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 355.056753][T17225] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 17225 comm: syz.3.4335) [ 355.098792][T17217] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.352717][T17217] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.424204][T17217] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.468684][T17233] tmpfs: Bad value for 'mpol' [ 355.520272][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.571887][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.640238][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.648886][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.720393][T17241] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.749198][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4342'. [ 355.759009][T17244] netlink: 'syz.2.4342': attribute type 10 has an invalid length. [ 355.766971][T17244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4342'. [ 355.777568][T17244] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 355.804279][T17241] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.896536][T17241] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.931052][T17253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4346'. [ 355.962555][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4348'. [ 356.024324][T17262] loop3: detected capacity change from 0 to 512 [ 356.042733][T17262] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.4349: iget: bad extra_isize 90 (inode size 256) [ 356.056723][T17262] EXT4-fs (loop3): Remounting filesystem read-only [ 356.063539][T17262] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -30) [ 356.073507][T17262] EXT4-fs (loop3): 1 orphan inode deleted [ 356.080995][T17262] netlink: 'syz.3.4349': attribute type 21 has an invalid length. [ 356.088951][T17262] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4349'. [ 356.096062][T17261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17261 comm=syz.2.4348 [ 356.099700][T17241] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.122218][T17268] sch_fq: defrate 4294967295 ignored. [ 356.127889][T17262] netlink: 'syz.3.4349': attribute type 4 has an invalid length. [ 356.135736][T17262] netlink: 'syz.3.4349': attribute type 5 has an invalid length. [ 356.143642][T17262] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4349'. [ 356.153461][T17261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4348'. [ 356.174705][T17266] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.194256][T17272] loop3: detected capacity change from 0 to 164 [ 356.221394][T17274] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 356.240653][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.250758][ T146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.269030][T17266] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.287003][T17276] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 356.295575][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.295705][ T169] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.440376][T17266] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.501530][T17266] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.769977][ T146] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.798501][ T146] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.814019][ T146] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.853026][ T146] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.102933][T17309] loop3: detected capacity change from 0 to 512 [ 357.113502][T17309] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 357.133136][T17308] sch_fq: defrate 4294967295 ignored. [ 357.139888][T17303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17303 comm=syz.1.4363 [ 357.154376][T17309] EXT4-fs (loop3): orphan cleanup on readonly fs [ 357.216530][T17309] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4364: Failed to acquire dquot type 1 [ 357.249389][T17309] EXT4-fs (loop3): 1 truncate cleaned up [ 357.599092][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 357.599108][ T29] audit: type=1326 audit(1763603284.800:19285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 357.599654][ T29] audit: type=1326 audit(1763603284.800:19286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 357.600149][ T29] audit: type=1326 audit(1763603284.800:19287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 357.600559][ T29] audit: type=1326 audit(1763603284.800:19288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 357.608323][ T29] audit: type=1326 audit(1763603284.810:19289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 357.608445][ T29] audit: type=1326 audit(1763603284.810:19290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 357.609346][ T29] audit: type=1326 audit(1763603284.810:19291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 357.609641][ T29] audit: type=1326 audit(1763603284.810:19292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 357.609842][ T29] audit: type=1326 audit(1763603284.810:19293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 357.610549][ T29] audit: type=1326 audit(1763603284.810:19294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17327 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 358.003582][T17341] sch_fq: defrate 4294967295 ignored. [ 358.003811][T17341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17341 comm=syz.1.4376 [ 358.024451][T17339] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.122871][T17339] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.186925][T17339] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.261731][T17339] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.324391][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.344121][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.358030][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.381830][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.463800][T17364] netlink: 'syz.2.4384': attribute type 4 has an invalid length. [ 358.517909][T17373] loop3: detected capacity change from 0 to 1024 [ 358.527560][T17373] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 358.604982][T17358] FAULT_INJECTION: forcing a failure. [ 358.604982][T17358] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 358.618319][T17358] CPU: 0 UID: 0 PID: 17358 Comm: syz.5.4379 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 358.618396][T17358] Tainted: [W]=WARN [ 358.618404][T17358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.618419][T17358] Call Trace: [ 358.618427][T17358] [ 358.618436][T17358] __dump_stack+0x1d/0x30 [ 358.618466][T17358] dump_stack_lvl+0xe8/0x140 [ 358.618492][T17358] dump_stack+0x15/0x1b [ 358.618539][T17358] should_fail_ex+0x265/0x280 [ 358.618582][T17358] should_fail_alloc_page+0xf2/0x100 [ 358.618651][T17358] __alloc_frozen_pages_noprof+0xff/0x360 [ 358.618700][T17358] alloc_pages_mpol+0xb3/0x260 [ 358.618787][T17358] folio_alloc_mpol_noprof+0x39/0x80 [ 358.618816][T17358] shmem_get_folio_gfp+0x3cf/0xd60 [ 358.618975][T17358] shmem_fallocate+0x57c/0x840 [ 358.619019][T17358] vfs_fallocate+0x3b6/0x400 [ 358.619050][T17358] __x64_sys_fallocate+0x7a/0xd0 [ 358.619110][T17358] x64_sys_call+0x2518/0x3000 [ 358.619134][T17358] do_syscall_64+0xd2/0x200 [ 358.619156][T17358] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 358.619229][T17358] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 358.619271][T17358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.619299][T17358] RIP: 0033:0x7fdead4af749 [ 358.619342][T17358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.619365][T17358] RSP: 002b:00007fdeabef6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 358.619397][T17358] RAX: ffffffffffffffda RBX: 00007fdead706090 RCX: 00007fdead4af749 [ 358.619466][T17358] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000003 [ 358.619480][T17358] RBP: 00007fdeabef6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.619495][T17358] R10: 0000000000801afd R11: 0000000000000246 R12: 0000000000000001 [ 358.619543][T17358] R13: 00007fdead706128 R14: 00007fdead706090 R15: 00007ffd5ddfa8d8 [ 358.619566][T17358] [ 358.886583][T17385] loop3: detected capacity change from 0 to 512 [ 358.900449][T17385] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 358.930654][T17385] EXT4-fs (loop3): orphan cleanup on readonly fs [ 358.955581][T17385] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4390: Failed to acquire dquot type 1 [ 358.983821][T17385] EXT4-fs (loop3): 1 truncate cleaned up [ 359.032847][T17394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17394 comm=syz.5.4394 [ 359.045492][T17394] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17394 comm=syz.5.4394 [ 359.090396][T17394] loop5: detected capacity change from 0 to 128 [ 359.113304][T17406] __nla_validate_parse: 12 callbacks suppressed [ 359.113319][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4400'. [ 359.128744][T17406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4400'. [ 359.138750][T17407] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 359.159801][T17394] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.171176][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4401'. [ 359.333570][T17419] sch_fq: defrate 4294967295 ignored. [ 359.383770][T17409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17409 comm=syz.3.4401 [ 359.384471][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4401'. [ 359.406964][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4401'. [ 359.407323][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4401'. [ 359.422779][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4405'. [ 359.525685][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 359.526069][T17441] netlink: 'syz.1.4409': attribute type 10 has an invalid length. [ 359.526089][T17441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4409'. [ 359.527323][T17441] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 359.716163][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4418'. [ 359.781394][T17462] sch_fq: defrate 4294967295 ignored. [ 359.830235][T17465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17465 comm=syz.3.4418 [ 360.297578][T17482] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 360.510035][T17490] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.626590][T17490] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.689460][T17490] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.700934][T17497] netlink: 'syz.4.4430': attribute type 21 has an invalid length. [ 360.723839][T17497] netlink: 'syz.4.4430': attribute type 4 has an invalid length. [ 360.731718][T17497] netlink: 'syz.4.4430': attribute type 5 has an invalid length. [ 360.785528][T17490] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.374130][ T169] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.425010][ T169] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.479085][ T169] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.498046][ T169] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.919115][T17542] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.967909][T17542] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.005746][T17542] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.044042][T17542] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.109132][ T4895] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.121988][ T4895] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.131607][ T169] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.131644][ T169] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.418687][T17554] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.452613][T17554] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.483694][T17557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.501339][T17554] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.557617][T17554] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.631914][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.643160][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.655470][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.668463][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.768696][T17569] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 362.816866][T17575] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.882091][T17575] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.919970][ T29] kauditd_printk_skb: 547 callbacks suppressed [ 362.919988][ T29] audit: type=1326 audit(1763603291.388:19840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 362.920072][ T29] audit: type=1326 audit(1763603291.388:19841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 362.926322][ T29] audit: type=1326 audit(1763603291.388:19842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 362.926364][ T29] audit: type=1326 audit(1763603291.388:19843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 362.926394][ T29] audit: type=1326 audit(1763603291.388:19844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 362.926506][ T29] audit: type=1326 audit(1763603291.388:19845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 362.997261][ T29] audit: type=1326 audit(1763603291.419:19846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 363.042305][T17584] loop3: detected capacity change from 0 to 512 [ 363.052794][ T29] audit: type=1326 audit(1763603291.419:19847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 363.128813][ T29] audit: type=1326 audit(1763603291.419:19848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 363.128888][ T29] audit: type=1326 audit(1763603291.419:19849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 363.130016][T17575] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.180161][T17584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.193171][T17575] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.195005][T17584] EXT4-fs (loop3): orphan cleanup on readonly fs [ 363.195809][T17584] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4463: Failed to acquire dquot type 1 [ 363.200483][T17584] EXT4-fs (loop3): 1 truncate cleaned up [ 363.200956][T17584] EXT4-fs mount: 22 callbacks suppressed [ 363.200972][T17584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 363.256808][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.298322][T17594] loop3: detected capacity change from 0 to 512 [ 363.310098][T17594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 363.337169][T17594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.337245][T17594] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.775477][T17626] sch_fq: defrate 4294967295 ignored. [ 363.785603][T17626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17626 comm=syz.1.4477 [ 363.985338][T17648] netlink: 'syz.5.4486': attribute type 10 has an invalid length. [ 363.997357][T17648] team0: Port device dummy0 added [ 364.037241][T17651] loop5: detected capacity change from 0 to 512 [ 364.051473][T17651] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.4487: iget: bad extra_isize 90 (inode size 256) [ 364.068403][T17651] EXT4-fs (loop5): Remounting filesystem read-only [ 364.075204][T17651] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 364.084629][T17651] EXT4-fs (loop5): 1 orphan inode deleted [ 364.100004][T17651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.117133][T17651] netlink: 'syz.5.4487': attribute type 21 has an invalid length. [ 364.119427][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.125073][T17651] __nla_validate_parse: 16 callbacks suppressed [ 364.125091][T17651] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4487'. [ 364.150351][T17651] netlink: 'syz.5.4487': attribute type 4 has an invalid length. [ 364.158310][T17651] netlink: 'syz.5.4487': attribute type 5 has an invalid length. [ 364.166134][T17651] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4487'. [ 364.204571][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.205192][T17658] loop3: detected capacity change from 0 to 164 [ 364.256629][T17665] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.301786][T17665] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.340175][T17665] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.362451][T17670] loop5: detected capacity change from 0 to 512 [ 364.366010][T17670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.382889][T17670] EXT4-fs (loop5): orphan cleanup on readonly fs [ 364.390031][T17670] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4495: Failed to acquire dquot type 1 [ 364.390648][T17670] EXT4-fs (loop5): 1 truncate cleaned up [ 364.391824][T17670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.405058][T17665] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.433147][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.519317][T17677] netlink: 'syz.5.4498': attribute type 1 has an invalid length. [ 364.550017][T17679] loop5: detected capacity change from 0 to 512 [ 364.550964][T17679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.566968][T17679] EXT4-fs (loop5): orphan cleanup on readonly fs [ 364.567383][T17679] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4499: Failed to acquire dquot type 1 [ 364.586089][T17679] EXT4-fs (loop5): 1 truncate cleaned up [ 364.586710][T17679] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.627215][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.650515][T17682] loop5: detected capacity change from 0 to 512 [ 364.651496][T17682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.669301][T17682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.669376][T17682] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.755172][T17686] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4500'. [ 364.762927][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4500'. [ 365.066000][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4506'. [ 365.211478][T17711] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4512'. [ 365.255978][T17715] loop3: detected capacity change from 0 to 512 [ 365.265878][T17715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.276996][T17715] EXT4-fs (loop3): orphan cleanup on readonly fs [ 365.284216][T17717] syz!: rxe_newlink: already configured on team_slave_0 [ 365.284272][T17715] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4513: Failed to acquire dquot type 1 [ 365.303959][T17715] EXT4-fs (loop3): 1 truncate cleaned up [ 365.310230][T17715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 365.344898][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.379982][T17726] loop3: detected capacity change from 0 to 512 [ 365.382162][T17723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4516'. [ 365.388921][T17726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.407727][T17726] EXT4-fs (loop3): orphan cleanup on readonly fs [ 365.415090][T17726] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4517: Failed to acquire dquot type 1 [ 365.427323][T17726] EXT4-fs (loop3): 1 truncate cleaned up [ 365.433715][T17726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 365.472471][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.482709][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.531901][T17737] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4520'. [ 365.542430][T17737] netlink: 'syz.5.4520': attribute type 10 has an invalid length. [ 365.550385][T17737] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4520'. [ 365.560257][T17737] batman_adv: batadv0: Adding interface: veth1_vlan [ 365.566936][T17737] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.575900][T17738] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4519'. [ 365.593207][T17737] batman_adv: batadv0: Interface activated: veth1_vlan [ 365.641075][T17741] loop3: detected capacity change from 0 to 2048 [ 365.651399][ T3335] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.666816][T17741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.680862][ T3335] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.689451][T17743] loop5: detected capacity change from 0 to 128 [ 365.694086][ T3335] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.707354][ T3335] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.712111][T17743] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.742756][T17743] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 365.753700][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.800521][T17751] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 365.990533][T17769] netlink: 'syz.4.4533': attribute type 10 has an invalid length. [ 365.991142][T17769] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 366.066979][ T146] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.081987][ T146] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.082083][ T146] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.082216][ T146] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.097145][T17777] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 366.250516][T17795] loop3: detected capacity change from 0 to 512 [ 366.270294][T17795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.280676][T17795] EXT4-fs (loop3): orphan cleanup on readonly fs [ 366.281624][T17795] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4545: Failed to acquire dquot type 1 [ 366.329823][T17795] EXT4-fs (loop3): 1 truncate cleaned up [ 366.330322][T17795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.396283][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.424403][T17802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.471645][T17805] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.484557][T17807] syz!: rxe_newlink: already configured on team_slave_0 [ 366.518372][T16341] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.548720][T17805] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.588254][T17805] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.653810][T17805] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.684033][T17830] loop5: detected capacity change from 0 to 2048 [ 366.716953][ T146] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.734530][ T146] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.746849][T17830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.749313][ T146] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.776541][ T146] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.801024][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.830107][T17841] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 366.856185][T17844] loop3: detected capacity change from 0 to 512 [ 366.871571][T17844] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 366.903462][T17846] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.913626][T17844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.952579][T17844] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.982981][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.450950][T17874] FAULT_INJECTION: forcing a failure. [ 367.450950][T17874] name failslab, interval 1, probability 0, space 0, times 0 [ 367.451055][T17874] CPU: 1 UID: 0 PID: 17874 Comm: syz.3.4572 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 367.451170][T17874] Tainted: [W]=WARN [ 367.451179][T17874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.451193][T17874] Call Trace: [ 367.451199][T17874] [ 367.451205][T17874] __dump_stack+0x1d/0x30 [ 367.451227][T17874] dump_stack_lvl+0xe8/0x140 [ 367.451251][T17874] dump_stack+0x15/0x1b [ 367.451296][T17874] should_fail_ex+0x265/0x280 [ 367.451350][T17874] should_failslab+0x8c/0xb0 [ 367.451381][T17874] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 367.451411][T17874] ? __alloc_skb+0x101/0x320 [ 367.451441][T17874] __alloc_skb+0x101/0x320 [ 367.451468][T17874] ? audit_log_start+0x342/0x720 [ 367.451532][T17874] audit_log_start+0x3a0/0x720 [ 367.451559][T17874] ? kstrtouint+0x76/0xc0 [ 367.451605][T17874] audit_seccomp+0x48/0x100 [ 367.451640][T17874] ? __seccomp_filter+0x82d/0x1250 [ 367.451722][T17874] __seccomp_filter+0x83e/0x1250 [ 367.451816][T17874] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 367.451981][T17874] ? vfs_write+0x7e8/0x960 [ 367.452021][T17874] __secure_computing+0x82/0x150 [ 367.452056][T17874] syscall_trace_enter+0xcf/0x1e0 [ 367.452086][T17874] do_syscall_64+0xac/0x200 [ 367.452178][T17874] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 367.452230][T17874] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 367.452345][T17874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.452366][T17874] RIP: 0033:0x7f492649f749 [ 367.452380][T17874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.452403][T17874] RSP: 002b:00007f4924f07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 367.452503][T17874] RAX: ffffffffffffffda RBX: 00007f49266f5fa0 RCX: 00007f492649f749 [ 367.452518][T17874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 367.452535][T17874] RBP: 00007f4924f07090 R08: 0000000000000000 R09: 0000000000000000 [ 367.452551][T17874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.452587][T17874] R13: 00007f49266f6038 R14: 00007f49266f5fa0 R15: 00007ffce622ebb8 [ 367.452609][T17874] [ 367.630442][T17876] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.660963][T17882] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 367.666552][T17876] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.702445][T17889] loop5: detected capacity change from 0 to 512 [ 367.896246][T17889] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 367.961223][T17889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.974328][T17876] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.986695][T17889] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.999597][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 367.999613][ T29] audit: type=1326 audit(1763603298.713:20338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 368.039206][ T29] audit: type=1326 audit(1763603298.744:20339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 368.063321][ T29] audit: type=1326 audit(1763603298.744:20340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.1.4580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 368.102123][T17900] sch_fq: defrate 4294967295 ignored. [ 368.107857][T17900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17900 comm=syz.2.4579 [ 368.148859][T17876] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.290911][T17920] syz!: rxe_newlink: already configured on team_slave_0 [ 368.303902][ T29] audit: type=1326 audit(1763603299.038:20341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.2.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 368.327910][ T29] audit: type=1326 audit(1763603299.038:20342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.2.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 368.352473][ T29] audit: type=1326 audit(1763603299.038:20343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.2.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 368.376498][ T29] audit: type=1326 audit(1763603299.038:20344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.2.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 368.400278][ T29] audit: type=1326 audit(1763603299.038:20345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.2.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 368.423883][ T29] audit: type=1326 audit(1763603299.038:20346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.2.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 368.447537][ T29] audit: type=1326 audit(1763603299.038:20347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17921 comm="syz.2.4590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 368.530077][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.723340][T17951] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 369.797304][T17965] __nla_validate_parse: 13 callbacks suppressed [ 369.797320][T17965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4607'. [ 369.878966][T17966] sch_fq: defrate 4294967295 ignored. [ 369.884810][T17966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17966 comm=syz.1.4607 [ 369.897963][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4607'. [ 369.907595][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4607'. [ 369.917270][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4607'. [ 370.425566][T17994] loop5: detected capacity change from 0 to 512 [ 370.435045][T17997] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4617'. [ 370.445501][T17994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 370.458206][T17994] EXT4-fs (loop5): orphan cleanup on readonly fs [ 370.470733][T17994] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4615: Failed to acquire dquot type 1 [ 370.492383][T17994] EXT4-fs (loop5): 1 truncate cleaned up [ 370.506786][T17994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 370.544828][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.564559][T18006] FAULT_INJECTION: forcing a failure. [ 370.564559][T18006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.578113][T18006] CPU: 0 UID: 0 PID: 18006 Comm: syz.1.4619 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 370.578146][T18006] Tainted: [W]=WARN [ 370.578153][T18006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 370.578247][T18006] Call Trace: [ 370.578255][T18006] [ 370.578265][T18006] __dump_stack+0x1d/0x30 [ 370.578293][T18006] dump_stack_lvl+0xe8/0x140 [ 370.578346][T18006] dump_stack+0x15/0x1b [ 370.578368][T18006] should_fail_ex+0x265/0x280 [ 370.578411][T18006] should_fail+0xb/0x20 [ 370.578431][T18006] should_fail_usercopy+0x1a/0x20 [ 370.578482][T18006] _copy_from_user+0x1c/0xb0 [ 370.578514][T18006] ___sys_sendmsg+0xc1/0x1d0 [ 370.578594][T18006] __sys_sendmmsg+0x178/0x300 [ 370.578669][T18006] __x64_sys_sendmmsg+0x57/0x70 [ 370.578762][T18006] x64_sys_call+0x1c4a/0x3000 [ 370.578792][T18006] do_syscall_64+0xd2/0x200 [ 370.578841][T18006] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 370.578878][T18006] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 370.578963][T18006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.578985][T18006] RIP: 0033:0x7f0b84bcf749 [ 370.579002][T18006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.579030][T18006] RSP: 002b:00007f0b8362f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 370.579160][T18006] RAX: ffffffffffffffda RBX: 00007f0b84e25fa0 RCX: 00007f0b84bcf749 [ 370.579174][T18006] RDX: 0000000000000001 RSI: 0000200000004a80 RDI: 0000000000000003 [ 370.579186][T18006] RBP: 00007f0b8362f090 R08: 0000000000000000 R09: 0000000000000000 [ 370.579199][T18006] R10: 00000000200880c0 R11: 0000000000000246 R12: 0000000000000001 [ 370.579211][T18006] R13: 00007f0b84e26038 R14: 00007f0b84e25fa0 R15: 00007ffcc497a828 [ 370.579231][T18006] [ 370.774207][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4620'. [ 370.922700][T18009] sch_fq: defrate 4294967295 ignored. [ 370.928642][T18009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18009 comm=syz.5.4620 [ 370.947516][ T169] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.970106][ T169] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.988677][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4620'. [ 371.007374][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4624'. [ 371.016003][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4620'. [ 371.034066][ T169] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.042590][T18015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4620'. [ 371.051656][ T169] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.122050][T18032] netlink: 'syz.4.4628': attribute type 10 has an invalid length. [ 371.147089][T18039] loop5: detected capacity change from 0 to 1024 [ 371.154753][T18032] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 371.173139][T18039] /dev/loop5: Can't open blockdev [ 371.240564][T18046] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.293482][T18046] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.331021][T18046] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.378767][T18046] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.403752][T18076] block device autoloading is deprecated and will be removed. [ 371.535707][T18086] loop5: detected capacity change from 0 to 1024 [ 371.556868][T18086] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 371.827098][T18086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.046340][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.082056][T18121] loop5: detected capacity change from 0 to 512 [ 372.091570][T18121] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 372.108336][T18121] EXT4-fs (loop5): 1 truncate cleaned up [ 372.123977][T18121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.155186][ T4897] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.168646][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.179762][ T4897] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.206478][ T4897] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.237920][T18135] loop5: detected capacity change from 0 to 2048 [ 372.248902][ T4897] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.295278][T18135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.339571][T18143] loop3: detected capacity change from 0 to 512 [ 372.348456][T18143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.349102][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.377239][T18143] EXT4-fs (loop3): orphan cleanup on readonly fs [ 372.384781][T18143] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4668: Failed to acquire dquot type 1 [ 372.397352][T18143] EXT4-fs (loop3): 1 truncate cleaned up [ 372.409118][T18143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.413288][T18150] loop5: detected capacity change from 0 to 7 [ 372.438264][T12093] buffer_io_error: 4 callbacks suppressed [ 372.438283][T12093] Buffer I/O error on dev loop5, logical block 0, async page read [ 372.453510][T12093] Buffer I/O error on dev loop5, logical block 0, async page read [ 372.461364][T12093] loop5: unable to read partition table [ 372.468012][T18150] Buffer I/O error on dev loop5, logical block 0, async page read [ 372.476103][T18150] Buffer I/O error on dev loop5, logical block 0, async page read [ 372.484259][T18150] loop5: unable to read partition table [ 372.507000][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.516159][T18150] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 372.516159][T18150] ) failed (rc=-5) [ 372.526262][T12093] Buffer I/O error on dev loop5, logical block 0, async page read [ 372.542440][T12093] Buffer I/O error on dev loop5, logical block 0, async page read [ 372.550738][T12093] Buffer I/O error on dev loop5, logical block 0, async page read [ 372.561783][T12093] Buffer I/O error on dev loop5, logical block 0, async page read [ 372.587102][T12093] Buffer I/O error on dev loop5, logical block 0, async page read [ 372.693455][T18171] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.712120][T18174] loop5: detected capacity change from 0 to 512 [ 372.723886][T18174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 372.738901][T18174] EXT4-fs (loop5): orphan cleanup on readonly fs [ 372.749133][T18174] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4680: Failed to acquire dquot type 1 [ 372.766721][T18171] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.790687][T18174] EXT4-fs (loop5): 1 truncate cleaned up [ 372.800863][T18174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.845908][T18171] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.893062][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.904424][T18171] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.956661][ T4895] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.977149][ T4895] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.999625][ T4895] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.020025][ T4895] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.064753][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 373.064773][ T29] audit: type=1326 audit(1763603304.014:20578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 373.094695][ T29] audit: type=1326 audit(1763603304.014:20579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 373.118430][ T29] audit: type=1326 audit(1763603304.014:20580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 373.142573][ T29] audit: type=1326 audit(1763603304.014:20581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 373.166852][ T29] audit: type=1326 audit(1763603304.014:20582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 373.190748][ T29] audit: type=1326 audit(1763603304.014:20583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 373.214781][ T29] audit: type=1326 audit(1763603304.014:20584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 373.238928][ T29] audit: type=1326 audit(1763603304.014:20585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 373.262656][ T29] audit: type=1326 audit(1763603304.014:20586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 373.286461][ T29] audit: type=1326 audit(1763603304.014:20587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18182 comm="syz.4.4683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f180611f749 code=0x7ffc0000 [ 373.316415][T18191] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.388247][T18191] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.483418][T18191] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.540835][T18191] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.554034][T18200] loop5: detected capacity change from 0 to 1024 [ 373.577198][T18200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 373.588586][T18200] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.973297][T18219] loop3: detected capacity change from 0 to 512 [ 374.011415][T18219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 374.044332][T18219] EXT4-fs (loop3): orphan cleanup on readonly fs [ 374.063396][T18219] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4694: Failed to acquire dquot type 1 [ 374.086904][T18219] EXT4-fs (loop3): 1 truncate cleaned up [ 374.099586][T18219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 374.116870][T18222] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.159879][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.171487][T18222] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.206038][T18226] loop3: detected capacity change from 0 to 164 [ 374.236603][T18222] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.274915][T18222] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.772822][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.155308][T18246] __nla_validate_parse: 9 callbacks suppressed [ 375.155329][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4704'. [ 375.304486][T18251] loop3: detected capacity change from 0 to 512 [ 375.321151][T18251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.333695][T18251] EXT4-fs (loop3): orphan cleanup on readonly fs [ 375.352701][T18251] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4706: Failed to acquire dquot type 1 [ 375.368975][T18251] EXT4-fs (loop3): 1 truncate cleaned up [ 375.382490][T18251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 375.513834][T13270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.699085][T18257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4708'. [ 375.901171][ T4895] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.923228][ T4895] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.934513][ T4895] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.947039][ T4895] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.010397][T18281] loop5: detected capacity change from 0 to 512 [ 376.018737][T18278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4717'. [ 376.028676][T18281] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 376.039673][T18281] EXT4-fs (loop5): orphan cleanup on readonly fs [ 376.057535][T18281] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4716: Failed to acquire dquot type 1 [ 376.076972][T18278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 376.090557][T18281] EXT4-fs (loop5): 1 truncate cleaned up [ 376.097320][T18281] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 376.168659][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.241243][T18293] loop5: detected capacity change from 0 to 1024 [ 376.255663][T18293] EXT4-fs: Ignoring removed nomblk_io_submit option [ 376.287590][T18293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.548646][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4725'. [ 376.679898][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4729'. [ 376.708898][T18317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 376.847967][ T4897] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.859481][T18321] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4730'. [ 376.883545][ T4897] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.892242][ T4897] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.900455][ T4897] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.253926][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4738'. [ 377.358318][T18350] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4741'. [ 377.533905][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.149530][T18391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4756'. [ 378.159194][T18391] netlink: 'syz.3.4756': attribute type 10 has an invalid length. [ 378.167156][T18391] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4756'. [ 378.177944][T18391] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 378.225530][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 378.225568][ T29] audit: type=1326 audit(1763603309.442:20705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 378.255138][ T29] audit: type=1326 audit(1763603309.442:20706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 378.278362][ T29] audit: type=1326 audit(1763603309.452:20707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 378.339316][ T29] audit: type=1326 audit(1763603309.452:20708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 378.362593][ T29] audit: type=1326 audit(1763603309.452:20709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 378.385840][ T29] audit: type=1326 audit(1763603309.452:20710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 378.409570][ T29] audit: type=1326 audit(1763603309.452:20711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 378.432782][ T29] audit: type=1326 audit(1763603309.505:20712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 378.456293][ T29] audit: type=1326 audit(1763603309.505:20713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 378.479456][ T29] audit: type=1326 audit(1763603309.515:20714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 378.524667][T18411] xt_hashlimit: max too large, truncated to 1048576 [ 378.541451][T18411] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 378.847509][T18430] sch_fq: defrate 4294967295 ignored. [ 378.907063][T18432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 378.913929][T18422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18422 comm=syz.1.4767 [ 378.968178][T18438] netlink: 'syz.2.4772': attribute type 10 has an invalid length. [ 378.996074][T18438] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 379.996008][T18479] tipc: Enabling of bearer rejected, failed to enable media [ 380.156309][T18478] __nla_validate_parse: 11 callbacks suppressed [ 380.156330][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4787'. [ 380.246329][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4788'. [ 380.867237][T18523] netlink: 'syz.3.4803': attribute type 10 has an invalid length. [ 381.018403][T18474] loop5: detected capacity change from 0 to 8192 [ 381.068321][T18529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4806'. [ 381.086823][T18529] netlink: 'syz.3.4806': attribute type 10 has an invalid length. [ 381.094847][T18529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4806'. [ 381.112666][T18529] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 381.142328][T18474] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 381.287384][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4808'. [ 381.465427][T18552] netlink: 'syz.4.4815': attribute type 10 has an invalid length. [ 381.500641][T18552] team0: Port device dummy0 added [ 381.556394][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4817'. [ 381.631232][T18567] loop5: detected capacity change from 0 to 2048 [ 381.670607][T18567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.735574][T16341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.825793][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4827'. [ 381.953227][T18602] FAULT_INJECTION: forcing a failure. [ 381.953227][T18602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.966576][T18602] CPU: 0 UID: 0 PID: 18602 Comm: syz.1.4836 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 381.966617][T18602] Tainted: [W]=WARN [ 381.966626][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.966643][T18602] Call Trace: [ 381.966651][T18602] [ 381.966660][T18602] __dump_stack+0x1d/0x30 [ 381.966743][T18602] dump_stack_lvl+0xe8/0x140 [ 381.966766][T18602] dump_stack+0x15/0x1b [ 381.966788][T18602] should_fail_ex+0x265/0x280 [ 381.966823][T18602] should_fail+0xb/0x20 [ 381.966884][T18602] should_fail_usercopy+0x1a/0x20 [ 381.966910][T18602] _copy_from_iter+0xd2/0xe80 [ 381.966938][T18602] ? sock_alloc_send_pskb+0x44c/0x4e0 [ 381.966972][T18602] hci_sock_sendmsg+0x36d/0x910 [ 381.967044][T18602] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 381.967091][T18602] __sock_sendmsg+0x145/0x180 [ 381.967115][T18602] sock_write_iter+0x1a7/0x1f0 [ 381.967150][T18602] aio_write+0x2e5/0x410 [ 381.967206][T18602] io_submit_one+0xacd/0x11d0 [ 381.967260][T18602] __se_sys_io_submit+0xfb/0x280 [ 381.967301][T18602] __x64_sys_io_submit+0x43/0x50 [ 381.967328][T18602] x64_sys_call+0x2d6c/0x3000 [ 381.967389][T18602] do_syscall_64+0xd2/0x200 [ 381.967525][T18602] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 381.967560][T18602] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 381.967604][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.967639][T18602] RIP: 0033:0x7f0b84bcf749 [ 381.967656][T18602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.967677][T18602] RSP: 002b:00007f0b8362f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 381.967701][T18602] RAX: ffffffffffffffda RBX: 00007f0b84e25fa0 RCX: 00007f0b84bcf749 [ 381.967717][T18602] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f0b835eb000 [ 381.967733][T18602] RBP: 00007f0b8362f090 R08: 0000000000000000 R09: 0000000000000000 [ 381.967773][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.967785][T18602] R13: 00007f0b84e26038 R14: 00007f0b84e25fa0 R15: 00007ffcc497a828 [ 381.967804][T18602] [ 382.201255][T18600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4835'. [ 382.293355][T18614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18614 comm=syz.1.4840 [ 382.306126][T18614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18614 comm=syz.1.4840 [ 382.458226][T18622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4843'. [ 382.762014][T18648] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 382.811530][T18653] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 383.099608][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 383.099628][ T29] audit: type=1326 audit(1763603314.565:21077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18581 comm="syz.2.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 383.161459][T18680] syz!: rxe_newlink: already configured on team_slave_0 [ 383.168538][ T29] audit: type=1326 audit(1763603314.575:21078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18581 comm="syz.2.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 383.192265][ T29] audit: type=1326 audit(1763603314.586:21079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18581 comm="syz.2.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 383.216043][ T29] audit: type=1326 audit(1763603314.586:21080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18581 comm="syz.2.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 383.239771][ T29] audit: type=1326 audit(1763603314.596:21081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18581 comm="syz.2.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 383.263417][ T29] audit: type=1326 audit(1763603314.638:21082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18581 comm="syz.2.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 383.286951][ T29] audit: type=1326 audit(1763603314.638:21083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18581 comm="syz.2.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63c781f749 code=0x7ffc0000 [ 383.382259][ T29] audit: type=1326 audit(1763603314.869:21084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18687 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 383.406231][ T29] audit: type=1326 audit(1763603314.869:21085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18687 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 383.430554][ T29] audit: type=1326 audit(1763603314.869:21086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18687 comm="syz.1.4871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 383.477985][T18704] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18704 comm=syz.1.4879 [ 383.490882][T18704] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18704 comm=syz.1.4879 [ 383.514070][T18703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4878'. [ 383.652833][T18710] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 384.532078][T18744] sch_fq: defrate 4294967295 ignored. [ 384.538498][T18744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18744 comm=syz.5.4893 [ 384.617751][T18758] sch_fq: defrate 4294967295 ignored. [ 384.623366][T18758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18758 comm=syz.4.4897 [ 384.668775][T18765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18765 comm=syz.5.4899 [ 384.681375][T18765] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18765 comm=syz.5.4899 [ 384.696992][T18767] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.791013][T18767] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.877767][T18767] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.962575][T18767] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.994420][T18782] __nla_validate_parse: 15 callbacks suppressed [ 384.994516][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4907'. [ 385.012273][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4907'. [ 385.067289][T18783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18783 comm=syz.1.4906 [ 385.073047][ T169] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.133769][ T3335] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.134305][ T169] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.134361][ T169] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.271448][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4910'. [ 385.640535][T18800] netlink: 'syz.3.4913': attribute type 10 has an invalid length. [ 385.683129][T18790] sch_fq: defrate 4294967295 ignored. [ 385.683485][T18790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18790 comm=syz.4.4910 [ 385.689263][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4910'. [ 385.689744][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4910'. [ 385.690195][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4910'. [ 385.933874][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4916'. [ 385.988051][T18807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4916'. [ 386.495689][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4927'. [ 386.736023][T18872] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4939'. [ 386.828512][T18884] netlink: 'syz.2.4941': attribute type 10 has an invalid length. [ 386.840193][T18884] team0: Port device dummy0 added [ 386.852856][T18888] FAULT_INJECTION: forcing a failure. [ 386.852856][T18888] name failslab, interval 1, probability 0, space 0, times 0 [ 386.865585][T18888] CPU: 1 UID: 0 PID: 18888 Comm: syz.1.4946 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 386.865622][T18888] Tainted: [W]=WARN [ 386.865630][T18888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 386.865654][T18888] Call Trace: [ 386.865660][T18888] [ 386.865667][T18888] __dump_stack+0x1d/0x30 [ 386.865718][T18888] dump_stack_lvl+0xe8/0x140 [ 386.865741][T18888] dump_stack+0x15/0x1b [ 386.865763][T18888] should_fail_ex+0x265/0x280 [ 386.865800][T18888] should_failslab+0x8c/0xb0 [ 386.865885][T18888] kmem_cache_alloc_noprof+0x50/0x480 [ 386.865919][T18888] ? io_submit_one+0xb8/0x11d0 [ 386.865997][T18888] io_submit_one+0xb8/0x11d0 [ 386.866041][T18888] __se_sys_io_submit+0xfb/0x280 [ 386.866078][T18888] __x64_sys_io_submit+0x43/0x50 [ 386.866147][T18888] x64_sys_call+0x2d6c/0x3000 [ 386.866173][T18888] do_syscall_64+0xd2/0x200 [ 386.866197][T18888] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 386.866236][T18888] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 386.866312][T18888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.866339][T18888] RIP: 0033:0x7f0b84bcf749 [ 386.866357][T18888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.866459][T18888] RSP: 002b:00007f0b8362f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 386.866482][T18888] RAX: ffffffffffffffda RBX: 00007f0b84e25fa0 RCX: 00007f0b84bcf749 [ 386.866497][T18888] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f0b835eb000 [ 386.866511][T18888] RBP: 00007f0b8362f090 R08: 0000000000000000 R09: 0000000000000000 [ 386.866526][T18888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.866540][T18888] R13: 00007f0b84e26038 R14: 00007f0b84e25fa0 R15: 00007ffcc497a828 [ 386.866624][T18888] [ 387.302653][T18922] netlink: 'syz.2.4958': attribute type 21 has an invalid length. [ 387.311507][T18922] netlink: 'syz.2.4958': attribute type 4 has an invalid length. [ 387.319347][T18922] netlink: 'syz.2.4958': attribute type 5 has an invalid length. [ 387.388280][T18930] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 387.581469][T18964] netlink: 'syz.1.4973': attribute type 21 has an invalid length. [ 387.604027][T18964] netlink: 'syz.1.4973': attribute type 4 has an invalid length. [ 387.611928][T18964] netlink: 'syz.1.4973': attribute type 5 has an invalid length. [ 387.699440][T18979] FAULT_INJECTION: forcing a failure. [ 387.699440][T18979] name failslab, interval 1, probability 0, space 0, times 0 [ 387.712238][T18979] CPU: 0 UID: 0 PID: 18979 Comm: syz.1.4978 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 387.712356][T18979] Tainted: [W]=WARN [ 387.712365][T18979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 387.712380][T18979] Call Trace: [ 387.712388][T18979] [ 387.712398][T18979] __dump_stack+0x1d/0x30 [ 387.712428][T18979] dump_stack_lvl+0xe8/0x140 [ 387.712454][T18979] dump_stack+0x15/0x1b [ 387.712495][T18979] should_fail_ex+0x265/0x280 [ 387.712553][T18979] should_failslab+0x8c/0xb0 [ 387.712598][T18979] kmem_cache_alloc_noprof+0x50/0x480 [ 387.712657][T18979] ? getname_flags+0x80/0x3b0 [ 387.712689][T18979] getname_flags+0x80/0x3b0 [ 387.712726][T18979] __x64_sys_linkat+0x66/0xa0 [ 387.712759][T18979] x64_sys_call+0x28ff/0x3000 [ 387.712856][T18979] do_syscall_64+0xd2/0x200 [ 387.712897][T18979] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 387.712934][T18979] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 387.712983][T18979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.713102][T18979] RIP: 0033:0x7f0b84bcf749 [ 387.713118][T18979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.713136][T18979] RSP: 002b:00007f0b8362f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 387.713154][T18979] RAX: ffffffffffffffda RBX: 00007f0b84e25fa0 RCX: 00007f0b84bcf749 [ 387.713167][T18979] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffff9c [ 387.713283][T18979] RBP: 00007f0b8362f090 R08: 0000000000000400 R09: 0000000000000000 [ 387.713296][T18979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.713308][T18979] R13: 00007f0b84e26038 R14: 00007f0b84e25fa0 R15: 00007ffcc497a828 [ 387.713328][T18979] [ 387.894841][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 387.894856][ T29] audit: type=1326 audit(1763603319.604:21381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18975 comm="syz.1.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0b84bce15c code=0x7ffc0000 [ 387.961007][ T29] audit: type=1326 audit(1763603319.656:21382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18975 comm="syz.1.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0b84bce1ff code=0x7ffc0000 [ 387.984739][ T29] audit: type=1326 audit(1763603319.656:21383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18975 comm="syz.1.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0b84bce3aa code=0x7ffc0000 [ 388.008965][ T29] audit: type=1326 audit(1763603319.656:21384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18975 comm="syz.1.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 388.032951][ T29] audit: type=1326 audit(1763603319.656:21385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18975 comm="syz.1.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b84bcf749 code=0x7ffc0000 [ 388.084568][ T29] audit: type=1326 audit(1763603319.793:21386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18809 comm="syz.5.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 388.110724][ T29] audit: type=1326 audit(1763603319.824:21387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18809 comm="syz.5.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 388.172269][ T29] audit: type=1326 audit(1763603319.856:21388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18809 comm="syz.5.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 388.195984][ T29] audit: type=1326 audit(1763603319.856:21389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18809 comm="syz.5.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 388.219838][ T29] audit: type=1326 audit(1763603319.856:21390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18809 comm="syz.5.4917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdead4af749 code=0x7ffc0000 [ 388.466091][T19028] netlink: 'syz.5.4998': attribute type 21 has an invalid length. [ 388.474079][T19028] netlink: 'syz.5.4998': attribute type 4 has an invalid length. [ 388.554540][T19036] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.638141][T19036] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.696315][T19036] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.745442][T19054] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 388.762699][T19036] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.826778][ T3335] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.838574][ T3335] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.863601][ T3335] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.893681][ T3335] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.202972][T19087] block device autoloading is deprecated and will be removed. [ 389.599399][T19050] ================================================================== [ 389.607561][T19050] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 389.617507][T19050] [ 389.619847][T19050] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 389.628020][T19050] tick_do_update_jiffies64+0x113/0x1c0 [ 389.633804][T19050] tick_nohz_handler+0x7f/0x2d0 [ 389.638697][T19050] __hrtimer_run_queues+0x20f/0x5a0 [ 389.643926][T19050] hrtimer_interrupt+0x21a/0x460 [ 389.648971][T19050] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 389.655081][T19050] sysvec_apic_timer_interrupt+0x32/0x80 [ 389.660751][T19050] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 389.666746][T19050] [ 389.669179][T19050] read to 0xffffffff868099c0 of 8 bytes by task 19050 on cpu 1: [ 389.676826][T19050] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 389.683097][T19050] count_shadow_nodes+0x6a/0x230 [ 389.688055][T19050] do_shrink_slab+0x63/0x680 [ 389.692669][T19050] shrink_slab+0x448/0x760 [ 389.697278][T19050] shrink_node+0x6c3/0x2120 [ 389.701798][T19050] do_try_to_free_pages+0x3f6/0xcd0 [ 389.707013][T19050] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 389.712923][T19050] try_charge_memcg+0x383/0xa10 [ 389.717799][T19050] obj_cgroup_charge_pages+0xa6/0x150 [ 389.723192][T19050] __memcg_kmem_charge_page+0x9f/0x170 [ 389.728675][T19050] __alloc_frozen_pages_noprof+0x188/0x360 [ 389.734511][T19050] alloc_pages_mpol+0xb3/0x260 [ 389.739285][T19050] alloc_pages_noprof+0x90/0x130 [ 389.744230][T19050] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 389.750097][T19050] __kvmalloc_node_noprof+0x483/0x670 [ 389.755506][T19050] ip_set_alloc+0x24/0x30 [ 389.759857][T19050] hash_netiface_create+0x282/0x740 [ 389.765078][T19050] ip_set_create+0x3cc/0x970 [ 389.769680][T19050] nfnetlink_rcv_msg+0x4c6/0x590 [ 389.774640][T19050] netlink_rcv_skb+0x123/0x220 [ 389.779494][T19050] nfnetlink_rcv+0x167/0x16c0 [ 389.784189][T19050] netlink_unicast+0x5c0/0x690 [ 389.789064][T19050] netlink_sendmsg+0x58b/0x6b0 [ 389.793934][T19050] __sock_sendmsg+0x145/0x180 [ 389.798645][T19050] ____sys_sendmsg+0x31e/0x4e0 [ 389.803436][T19050] ___sys_sendmsg+0x17b/0x1d0 [ 389.808145][T19050] __x64_sys_sendmsg+0xd4/0x160 [ 389.813099][T19050] x64_sys_call+0x191e/0x3000 [ 389.817814][T19050] do_syscall_64+0xd2/0x200 [ 389.822352][T19050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.828270][T19050] [ 389.830603][T19050] value changed: 0x00000001000026f3 -> 0x00000001000026f4 [ 389.837729][T19050] [ 389.840069][T19050] Reported by Kernel Concurrency Sanitizer on: [ 389.846254][T19050] CPU: 1 UID: 0 PID: 19050 Comm: syz.1.5006 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 389.857639][T19050] Tainted: [W]=WARN [ 389.861475][T19050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 389.871542][T19050] ==================================================================