last executing test programs: 2.172844017s ago: executing program 1 (id=3177): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, 0x0, 0x79) 2.148350728s ago: executing program 1 (id=3179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb4, 0x30, 0xb, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x8001, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x0, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3fc, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0xb}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0xffffffff, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x101, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x80006, 0x1, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x19a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x4581, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x80000007, 0x1, 0x8, 0x20005, 0x1b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@errors_remount}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nogrpid}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_uring_setup(0x1962, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0x214}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r5, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x101, 0x3c, 0x3}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x14}}, 0x4000054) 1.184851539s ago: executing program 0 (id=3183): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.098390033s ago: executing program 0 (id=3186): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) mq_unlink(0x0) 1.076696664s ago: executing program 1 (id=3188): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 1.040152136s ago: executing program 0 (id=3189): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r1}, 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000cc0)=ANY=[@ANYBLOB="2400000076001f0300000000000000000800a100", @ANYRES32, @ANYBLOB="0c000d80"], 0x24}], 0x1}, 0x2404c8c0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 1.039546016s ago: executing program 0 (id=3190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000740)=ANY=[], 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00'}, 0x10) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 1.020920136s ago: executing program 4 (id=3191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@errors_remount}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nogrpid}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x101, 0x3c, 0x3}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 944.52675ms ago: executing program 1 (id=3192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f00000003c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, &(0x7f0000000000)) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x64040011, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 940.34175ms ago: executing program 4 (id=3193): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) finit_module(r1, 0x0, 0x3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 925.43804ms ago: executing program 2 (id=3194): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getitimer(0x1, &(0x7f0000000080)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000640)="c0", 0x1}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xc0200, 0x100) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5", 0x96}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 889.666612ms ago: executing program 0 (id=3195): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) finit_module(r1, 0x0, 0x3) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 840.057264ms ago: executing program 2 (id=3196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) r2 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x410ba, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x30, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000bc0)={[{@overriderock}, {@uid}, {@nocompress}, {@block={'block', 0x3d, 0x200}}, {@gid}, {@check_relaxed}, {@map_normal}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@map_off}, {@map_off}, {@gid}, {@session={'session', 0x3d, 0x27}}, {@mode={'mode', 0x3d, 0x80000000}}, {@map_off}, {@nocompress}, {@sbsector={'sbsector', 0x3d, 0x9}}, {@nocompress}, {@map_acorn}]}, 0x2, 0xa28, &(0x7f0000000180)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x4e8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4bc, 0x2, [@TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2dbc04b6, 0x1, 0x50, 0xa, 0x4, 0x800, 0x3, 0x10, 0x7, 0x9, 0x0, 0xd, 0x8, 0x5, 0x7f, 0x9, 0x9, 0x4, 0x81, 0x5, 0x537d, 0x0, 0xfffffffa, 0x12000000, 0x6, 0x3, 0x4, 0x0, 0xffffffff, 0x8, 0x0, 0x1, 0x7, 0x7fff, 0x0, 0xffffffff, 0x10, 0x258, 0x5, 0x8, 0x4, 0x1d, 0x5, 0x1, 0xfffff173, 0x1, 0x3fd, 0x7, 0x8000, 0x10000, 0xe, 0x3, 0x1, 0xd, 0x8, 0x0, 0x0, 0x4, 0xa79, 0x5, 0xc, 0x2, 0x0, 0x30000, 0xd, 0x6, 0xffd, 0x40, 0xfffeffff, 0x7fff, 0x6b81102, 0x7f, 0xfffdfffe, 0x800000, 0x6, 0x8, 0x0, 0xe, 0x20000, 0xffff, 0x80000001, 0x1, 0x9a0, 0x4, 0x8, 0x6, 0x7, 0xfffffffb, 0x1ff, 0x3ff, 0x0, 0x40, 0xfc5, 0x810000, 0xb422, 0x1, 0x1, 0x8, 0x1, 0xa0bd, 0x200, 0x400, 0x1, 0xc, 0xff, 0x3, 0x2, 0xffffffc0, 0x8, 0x8001, 0x3f3, 0x8, 0x9, 0xf, 0x4, 0x3, 0x0, 0x6, 0xd, 0x8, 0x62, 0x800, 0x0, 0x9, 0x3, 0x8, 0x2, 0xf4, 0x81, 0x0, 0x6, 0x200, 0xad07, 0x8001, 0x8, 0x9, 0x101, 0x44, 0xb10, 0x8, 0x7, 0xfff, 0xa, 0x4e, 0x80, 0xfec300, 0xe815, 0x1, 0xfffffff9, 0xfffff801, 0x9, 0x1, 0xff, 0x7, 0x7, 0x7, 0x8001, 0x7, 0x1ff, 0x401, 0x5, 0x2, 0x1ff, 0x4, 0x2, 0x5f, 0x2, 0x1, 0x1, 0xb, 0x7, 0xb, 0x7, 0xc, 0x9, 0x68, 0x8, 0x6, 0x4, 0x9ca, 0x100, 0x9, 0xfff, 0xfffffbff, 0x1, 0xf, 0x2, 0xfffffff8, 0x80000001, 0x4, 0x9, 0x8, 0x8, 0x9, 0x3, 0x1, 0xb, 0x8, 0x5, 0x4, 0xc, 0x0, 0xffffff68, 0x80000000, 0x5, 0x4, 0xfffffff7, 0xd6f, 0x4, 0x38, 0x1, 0x6, 0x9bb, 0xd31d, 0xfff, 0xfff, 0x40, 0x101, 0x3, 0x4, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x1c000000, 0x1, 0x8006, 0x9, 0x6, 0x3, 0x1, 0x0, 0x10000, 0x2, 0x7, 0x7, 0x6, 0xfffff7f0, 0x2, 0x3, 0x8090, 0x7, 0x6d8, 0xfffffffb, 0x6, 0x400, 0x800, 0x8, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e8ccd9d, 0x8, 0x9, 0x9, 0x7fffffff, {0x8, 0x0, 0x92fd, 0x0, 0x1, 0x100}, {0x1, 0x2, 0xab11, 0x7, 0x8}, 0x3, 0x2, 0x6}}]}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0xde, 0x3ff}, {0x200, 0x3ff, 0x7, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0xccd4ddef28bd690b}, 0x40094) 805.729686ms ago: executing program 1 (id=3197): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) r2 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x410ba, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x30, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = socket$unix(0x1, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000bc0)={[{@overriderock}, {@uid}, {@nocompress}, {@block={'block', 0x3d, 0x200}}, {@gid}, {@check_relaxed}, {@map_normal}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@map_off}, {@map_off}, {@gid}, {@session={'session', 0x3d, 0x27}}, {@mode={'mode', 0x3d, 0x80000000}}, {@map_off}, {@nocompress}, {@sbsector={'sbsector', 0x3d, 0x9}}, {@nocompress}, {@map_acorn}]}, 0x2, 0xa28, &(0x7f0000000180)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0x4e8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4bc, 0x2, [@TCA_U32_POLICE={0x444, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x2dbc04b6, 0x1, 0x50, 0xa, 0x4, 0x800, 0x3, 0x10, 0x7, 0x9, 0x0, 0xd, 0x8, 0x5, 0x7f, 0x9, 0x9, 0x4, 0x81, 0x5, 0x537d, 0x0, 0xfffffffa, 0x12000000, 0x6, 0x3, 0x4, 0x0, 0xffffffff, 0x8, 0x0, 0x1, 0x7, 0x7fff, 0x0, 0xffffffff, 0x10, 0x258, 0x5, 0x8, 0x4, 0x1d, 0x5, 0x1, 0xfffff173, 0x1, 0x3fd, 0x7, 0x8000, 0x10000, 0xe, 0x3, 0x1, 0xd, 0x8, 0x0, 0x0, 0x4, 0xa79, 0x5, 0xc, 0x2, 0x0, 0x30000, 0xd, 0x6, 0xffd, 0x40, 0xfffeffff, 0x7fff, 0x6b81102, 0x7f, 0xfffdfffe, 0x800000, 0x6, 0x8, 0x0, 0xe, 0x20000, 0xffff, 0x80000001, 0x1, 0x9a0, 0x4, 0x8, 0x6, 0x7, 0xfffffffb, 0x1ff, 0x3ff, 0x0, 0x40, 0xfc5, 0x810000, 0xb422, 0x1, 0x1, 0x8, 0x1, 0xa0bd, 0x200, 0x400, 0x1, 0xc, 0xff, 0x3, 0x2, 0xffffffc0, 0x8, 0x8001, 0x3f3, 0x8, 0x9, 0xf, 0x4, 0x3, 0x0, 0x6, 0xd, 0x8, 0x62, 0x800, 0x0, 0x9, 0x3, 0x8, 0x2, 0xf4, 0x81, 0x0, 0x6, 0x200, 0xad07, 0x8001, 0x8, 0x9, 0x101, 0x44, 0xb10, 0x8, 0x7, 0xfff, 0xa, 0x4e, 0x80, 0xfec300, 0xe815, 0x1, 0xfffffff9, 0xfffff801, 0x9, 0x1, 0xff, 0x7, 0x7, 0x7, 0x8001, 0x7, 0x1ff, 0x401, 0x5, 0x2, 0x1ff, 0x4, 0x2, 0x5f, 0x2, 0x1, 0x1, 0xb, 0x7, 0xb, 0x7, 0xc, 0x9, 0x68, 0x8, 0x6, 0x4, 0x9ca, 0x100, 0x9, 0xfff, 0xfffffbff, 0x1, 0xf, 0x2, 0xfffffff8, 0x80000001, 0x4, 0x9, 0x8, 0x8, 0x9, 0x3, 0x1, 0xb, 0x8, 0x5, 0x4, 0xc, 0x0, 0xffffff68, 0x80000000, 0x5, 0x4, 0xfffffff7, 0xd6f, 0x4, 0x38, 0x1, 0x6, 0x9bb, 0xd31d, 0xfff, 0xfff, 0x40, 0x101, 0x3, 0x4, 0x0, 0x1ff, 0x6, 0x0, 0x9, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x1c000000, 0x1, 0x8006, 0x9, 0x6, 0x3, 0x1, 0x0, 0x10000, 0x2, 0x7, 0x7, 0x6, 0xfffff7f0, 0x2, 0x3, 0x8090, 0x7, 0x6d8, 0xfffffffb, 0x6, 0x400, 0x800, 0x8, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6e8ccd9d, 0x8, 0x9, 0x9, 0x7fffffff, {0x8, 0x0, 0x92fd, 0x0, 0x1, 0x100}, {0x1, 0x2, 0xab11, 0x7, 0x8}, 0x3, 0x2, 0x6}}]}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0xde, 0x3ff}, {0x200, 0x3ff, 0x7, 0x4}, {0x9, 0x7, 0x40, 0x80}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0xccd4ddef28bd690b}, 0x40094) (fail_nth: 1) 773.011587ms ago: executing program 4 (id=3198): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 711.87944ms ago: executing program 2 (id=3199): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x100, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) mq_unlink(0x0) 669.844791ms ago: executing program 0 (id=3200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, 0x0) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x24, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x140, 0x0, {0x3}}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r8 = syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x800700, &(0x7f0000000900)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5d}}, {@errors_continue}, {@usrjquota_path={'usrjquota', 0x3d, './file0/../file0'}}, {@noblock_validity}, {@noquota}]}, 0x3, 0x479, &(0x7f0000000480)="$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") r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f00000008c0)=0x20, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000940), &(0x7f0000000980)=0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b58000000000000000000000000000000000000c2ee6729debd3364d32fe6074fde0855d5b211551e955a0839086c3dc0746bed126fa5a5a6a41f2fee7503a42492b3c2b0b368d8be5c36cdefbb6b0b0dc320f266401c42eabfce1be26c31d9b59f7aa09b841808147279c139e47b547cc5b99ad73810c0a3d5697d8ec76bafd4736ec33136f7a7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080007000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000180000000008001000000000ffffffff9500"/168], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r14, @ANYBLOB="010028bd7000fbdbdf2505"], 0x2a8}, 0x1, 0x0, 0x0, 0x48c05}, 0x2404c140) open_tree(r8, &(0x7f0000000280)='./file0/../file0\x00', 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRES16=r14], 0xb0}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r7, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 664.496021ms ago: executing program 4 (id=3201): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getitimer(0x1, &(0x7f0000000080)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xc0200, 0x100) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x2, 0x0) 480.076029ms ago: executing program 1 (id=3203): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r8 = accept4(r0, 0x0, 0x0, 0x0) r9 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x401, 0x1000}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r12}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x40102, 0x0, 0xd}, 0x0, 0x18, 0x0, 0x23456}) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendto(r8, &(0x7f0000000000)="00c8", 0x2, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000040)=""/62, 0x52, 0x10120, 0x0, 0x0) 479.535939ms ago: executing program 2 (id=3204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@errors_remount}, {@nombcache}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nogrpid}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r2, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x1, 0x101, 0x3c, 0x3}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 475.51936ms ago: executing program 4 (id=3205): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x94) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'dummy0\x00'}) 405.357033ms ago: executing program 2 (id=3207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002400)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002500)=[@ip_retopts={{0x10}}], 0x10}, 0x4080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f00000004c0)={[{@nodiscard}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xb7, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x1, 0x2, @private2, 0x23}}, 0x80000001, 0xf, 0x6, 0x0, 0xd, 0x9, 0xf}, 0x9c) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000007c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x4, 0x0, 0x2, 0x302, 0x7fff, 0x3}, 0x9c) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000080)=0x14) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) close(r6) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 219.865371ms ago: executing program 4 (id=3209): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00'], 0x48) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file7\x00', 0x200000, &(0x7f0000000140)=ANY=[], 0xfc, 0x2b0, &(0x7f0000000280)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400000002000000f989c37dff", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c0002800800020001000000140003007866726d3000"/56], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0x5, 0x8, 0x4, 0x5, 0x4]}, &(0x7f0000000640)=0x78) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = syz_io_uring_setup(0x10b, &(0x7f00000004c0)={0x0, 0x8b7e, 0x800, 0x1, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3, {r4}}, './file1\x00'}) syz_usbip_server_init(0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x0) r9 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r9, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x80000) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xa3b, 0x80, 0x3, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) 160.023573ms ago: executing program 3 (id=3210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x3ff}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) socket(0x840000000002, 0x3, 0xff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x5) listen(r3, 0x3ff) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000480)={[{@map_off}, {@map_off, 0x0}, {@check_strict}, {@overriderock}, {@map_off}, {@session={'session', 0x3d, 0x1b}, 0x41}, {@session={'session', 0x3d, 0x42}}, {@unhide}, {@uid={'uid', 0x3d, 0xee01}}, {@check_relaxed}, {@map_off}, {@map_normal}, {@sbsector={'sbsector', 0x3d, 0x1000}}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, 'session'}}, {@seclabel}]}, 0x0, 0x6cd, &(0x7f0000000f00)="$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") r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r4, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x18}}}}, [@NL80211_ATTR_IE={0x19, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @supported_rates={0x1, 0x3, [{0x9}, {0x6, 0x1}, {0x60}]}, @measure_req={0x26, 0x3, {0x26, 0x0, 0x6}}]}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7fffffff}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x6}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)={0x470683, 0x10, 0x10}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080), &(0x7f0000000180)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 107.052166ms ago: executing program 3 (id=3211): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd6\xb8\t\xc2Lm\x91\xe9\"\v&\xfa\xeb\x97\x9e\xed\xe2\x1dzm\x83\x18\'\n|6B\x14P\xb9\x05\xc6*\x8dv\x05P\x95\xfc\xe6\xf4\xc4\x85d\x81\xeb\x97\x92\xa5\xe6\x7f{\xbdo\x9b\x10\x1e\xb3\xb6\xac\xfa\x9f\xd5\x98[\xbcGS\x94\\VC?\xed\x9d\xb5\x17\x82\xd8y*qo\xf4Z\xc2\xed\xe7\xc8\xee\xaf\n\xe7\x82%k\xb0\xefT\x7f\xf8\xd7\xcf\x8c\xe3\x82\xe1\xf2\atU\xa8\xc3\x03\xec\xc4UV\xff\x02\x13\xcfS\x01\x862@^B\xcb)\xd4\xaf#j\x891\xec\xc1\a+<\xbe\x10\x80\xa1\xb0fK&\x1b\xf1\xab\xf4T\xc12\xe5\x89\xcf\xbdEMV\x92\x00\x03g\xa8,') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c000480480001800800"], 0x122}}, 0x4008090) 88.736277ms ago: executing program 3 (id=3212): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 73.004467ms ago: executing program 3 (id=3213): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 57.577247ms ago: executing program 3 (id=3214): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x100, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) mq_unlink(0x0) 681.29µs ago: executing program 3 (id=3215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/184, 0xb8}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) (fail_nth: 1) 0s ago: executing program 2 (id=3216): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getitimer(0x1, &(0x7f0000000080)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xc0200, 0x100) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r3, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x192}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x2, 0x0) kernel console output (not intermixed with test programs): ting filesystem 00000000-0000-0000-0000-000000000000. [ 127.293539][ T9619] SELinux: failed to load policy [ 127.302692][ T9615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9615 comm=syz.4.2347 [ 127.389050][ T9621] SELinux: failed to load policy [ 127.519349][ T9630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9630 comm=syz.4.2354 [ 127.636834][ T9635] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.646684][ T9635] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.800291][ T9635] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.810661][ T9635] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.020404][ T9635] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.030248][ T9635] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.090056][ T9635] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.099847][ T9635] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.109821][ T29] kauditd_printk_skb: 1094 callbacks suppressed [ 128.109834][ T29] audit: type=1326 audit(1763737125.348:16162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 128.153684][ T29] audit: type=1326 audit(1763737125.378:16163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 128.177299][ T29] audit: type=1326 audit(1763737125.378:16164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 128.200778][ T29] audit: type=1326 audit(1763737125.378:16165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 128.224595][ T29] audit: type=1326 audit(1763737125.378:16166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 128.248189][ T29] audit: type=1326 audit(1763737125.378:16167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 128.271667][ T29] audit: type=1326 audit(1763737125.378:16168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 128.295202][ T29] audit: type=1326 audit(1763737125.378:16169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 128.319019][ T29] audit: type=1326 audit(1763737125.378:16170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 128.342515][ T29] audit: type=1326 audit(1763737125.378:16171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9646 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 128.384582][ T5453] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.392914][ T5453] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.405030][ T5453] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.413245][ T5453] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.428572][ T5453] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.436750][ T5453] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.454606][ T5450] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.462824][ T5450] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.505941][ T9655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9655 comm=syz.4.2365 [ 128.506223][ T9657] tipc: New replicast peer: 255.255.255.255 [ 128.524803][ T9657] tipc: Enabled bearer , priority 10 [ 128.547309][ T9659] IPVS: Error connecting to the multicast addr [ 128.653676][ T9667] __nla_validate_parse: 19 callbacks suppressed [ 128.653693][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2368'. [ 128.751779][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2371'. [ 128.787520][ T9673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9673 comm=syz.3.2371 [ 128.872518][ T9681] tipc: New replicast peer: 255.255.255.255 [ 128.878718][ T9681] tipc: Enabled bearer , priority 10 [ 128.886099][ T9682] SELinux: failed to load policy [ 128.910370][ T9681] loop3: detected capacity change from 0 to 512 [ 128.917426][ T9681] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 128.926577][ T9681] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16 [ 128.937005][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2376'. [ 128.946087][ T9681] tipc: Disabling bearer [ 128.960444][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2364'. [ 128.969427][ T9657] tipc: Disabling bearer [ 129.033038][ T9686] tipc: Enabled bearer , priority 0 [ 129.040075][ T9686] syzkaller0: entered promiscuous mode [ 129.045555][ T9686] syzkaller0: entered allmulticast mode [ 129.053486][ T9686] tipc: Resetting bearer [ 129.060294][ T9684] tipc: Resetting bearer [ 129.067309][ T9684] tipc: Disabling bearer [ 129.540960][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2385'. [ 129.550095][ T9704] IPVS: Error connecting to the multicast addr [ 129.619298][ T9716] tipc: Enabled bearer , priority 0 [ 129.626228][ T9716] syzkaller0: entered promiscuous mode [ 129.631762][ T9716] syzkaller0: entered allmulticast mode [ 129.639853][ T9716] tipc: Resetting bearer [ 129.646112][ T9715] tipc: Resetting bearer [ 129.652651][ T9715] tipc: Disabling bearer [ 129.814646][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2395'. [ 129.879041][ T9728] loop3: detected capacity change from 0 to 512 [ 129.885957][ T9728] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.899021][ T9728] EXT4-fs (loop3): 1 truncate cleaned up [ 129.905324][ T9728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.934005][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.156215][ T9748] tipc: Enabled bearer , priority 0 [ 130.157640][ T9751] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 130.163311][ T9748] syzkaller0: entered promiscuous mode [ 130.171466][ T9751] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 130.185535][ T9748] syzkaller0: entered allmulticast mode [ 130.197607][ T9748] tipc: Resetting bearer [ 130.202037][ T9751] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 130.212040][ T9751] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 130.220845][ T9746] tipc: Resetting bearer [ 130.227889][ T9746] tipc: Disabling bearer [ 130.347162][ T9768] IPVS: Error connecting to the multicast addr [ 130.371252][ T9771] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9771 comm=syz.3.2414 [ 130.442273][ T9780] bridge_slave_0: left promiscuous mode [ 130.448072][ T9780] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.458307][ T9780] bridge_slave_1: left promiscuous mode [ 130.464069][ T9780] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.473491][ T9780] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 130.481097][ T9780] bond_slave_0: left promiscuous mode [ 130.487590][ T9780] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 130.496112][ T9780] bond_slave_1: left promiscuous mode [ 130.502114][ T9782] netlink: 'syz.0.2416': attribute type 10 has an invalid length. [ 130.511376][ T9780] team0: Port device team_slave_0 removed [ 130.519139][ T9780] team0: Port device team_slave_1 removed [ 130.525890][ T9780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.533718][ T9780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.541571][ T9780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.560257][ T9784] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.572108][ T9782] veth1_vlan: left promiscuous mode [ 130.577324][ T9782] veth1_vlan: left allmulticast mode [ 130.583120][ T9784] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 130.592455][ T9782] batman_adv: batadv0: Adding interface: veth1_vlan [ 130.599092][ T9782] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.633608][ T9782] batman_adv: batadv0: Interface activated: veth1_vlan [ 130.714715][ T5449] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.721042][ T9790] loop3: detected capacity change from 0 to 512 [ 130.722988][ T5449] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.730048][ T9790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.748911][ T9790] EXT4-fs (loop3): 1 truncate cleaned up [ 130.754949][ T9790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.756252][ T5449] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.775202][ T5449] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.784318][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.805152][ T5449] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.813448][ T5449] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.823079][ T5449] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.831399][ T5449] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.862929][ T9799] tipc: Enabling of bearer rejected, failed to enable media [ 130.880074][ T9801] FAULT_INJECTION: forcing a failure. [ 130.880074][ T9801] name failslab, interval 1, probability 0, space 0, times 0 [ 130.892699][ T9801] CPU: 1 UID: 0 PID: 9801 Comm: syz.0.2424 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.892723][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.892734][ T9801] Call Trace: [ 130.892739][ T9801] [ 130.892745][ T9801] __dump_stack+0x1d/0x30 [ 130.892832][ T9801] dump_stack_lvl+0xe8/0x140 [ 130.892848][ T9801] dump_stack+0x15/0x1b [ 130.892862][ T9801] should_fail_ex+0x265/0x280 [ 130.892890][ T9801] should_failslab+0x8c/0xb0 [ 130.892916][ T9801] __kvmalloc_node_noprof+0x12e/0x670 [ 130.892948][ T9801] ? traverse+0xa2/0x3a0 [ 130.892963][ T9801] traverse+0xa2/0x3a0 [ 130.893034][ T9801] ? _parse_integer_limit+0x170/0x190 [ 130.893140][ T9801] seq_read_iter+0x85f/0x950 [ 130.893155][ T9801] ? kstrtoull+0x111/0x140 [ 130.893235][ T9801] seq_read+0x270/0x2b0 [ 130.893252][ T9801] ? __pfx_seq_read+0x10/0x10 [ 130.893266][ T9801] proc_reg_read+0x128/0x1c0 [ 130.893282][ T9801] ? __pfx_proc_reg_read+0x10/0x10 [ 130.893298][ T9801] vfs_read+0x1a8/0x770 [ 130.893392][ T9801] ? __fget_files+0x184/0x1c0 [ 130.893412][ T9801] ? __rcu_read_unlock+0x4f/0x70 [ 130.893433][ T9801] ? __fget_files+0x184/0x1c0 [ 130.893456][ T9801] __x64_sys_pread64+0xfd/0x150 [ 130.893527][ T9801] x64_sys_call+0x29e6/0x3000 [ 130.893646][ T9801] do_syscall_64+0xd2/0x200 [ 130.893663][ T9801] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.893685][ T9801] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 130.893746][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.893763][ T9801] RIP: 0033:0x7faf0319f749 [ 130.893779][ T9801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.893794][ T9801] RSP: 002b:00007faf01c07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 130.893854][ T9801] RAX: ffffffffffffffda RBX: 00007faf033f5fa0 RCX: 00007faf0319f749 [ 130.893864][ T9801] RDX: 00000000fffffee8 RSI: 00002000000000c0 RDI: 0000000000000003 [ 130.893874][ T9801] RBP: 00007faf01c07090 R08: 0000000000000000 R09: 0000000000000000 [ 130.893885][ T9801] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 130.893895][ T9801] R13: 00007faf033f6038 R14: 00007faf033f5fa0 R15: 00007ffd5a1adf08 [ 130.893910][ T9801] [ 131.134115][ T9806] IPVS: Error connecting to the multicast addr [ 131.200879][ T9812] smc: net device bond0 applied user defined pnetid SYZ0 [ 131.224247][ T9812] smc: net device bond0 erased user defined pnetid SYZ0 [ 131.428349][ T9835] IPVS: Error connecting to the multicast addr [ 131.575669][ T9856] tipc: Enabling of bearer rejected, failed to enable media [ 131.590551][ T9857] loop3: detected capacity change from 0 to 512 [ 131.597509][ T9857] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.609355][ T9857] EXT4-fs (loop3): 1 truncate cleaned up [ 131.615382][ T9857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.670888][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.687597][ T9870] IPVS: Error connecting to the multicast addr [ 131.727828][ T9875] tipc: Enabling of bearer rejected, failed to enable media [ 131.771400][ T9881] loop3: detected capacity change from 0 to 512 [ 131.779440][ T9881] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 131.790677][ T9881] EXT4-fs (loop3): 1 truncate cleaned up [ 131.796754][ T9881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.825941][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.842607][ T9888] tipc: Enabling of bearer rejected, failed to enable media [ 131.963362][ T9898] IPVS: Error connecting to the multicast addr [ 132.022666][ T9904] tipc: Enabling of bearer rejected, failed to enable media [ 132.055678][ T9910] loop3: detected capacity change from 0 to 512 [ 132.062871][ T9910] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.074146][ T9910] EXT4-fs (loop3): 1 truncate cleaned up [ 132.080253][ T9910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.104278][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.128137][ T9917] tipc: New replicast peer: 255.255.255.255 [ 132.134299][ T9917] tipc: Enabled bearer , priority 10 [ 132.141191][ T9917] tipc: Disabling bearer [ 132.163079][ T9922] SELinux: failed to load policy [ 132.221551][ T9925] IPVS: Error connecting to the multicast addr [ 132.297984][ T9935] tipc: Enabling of bearer rejected, failed to enable media [ 132.298142][ T9934] Driver unsupported XDP return value 0 on prog (id 1727) dev N/A, expect packet loss! [ 132.396102][ T9950] tipc: New replicast peer: 255.255.255.255 [ 132.402158][ T9950] tipc: Enabled bearer , priority 10 [ 132.410535][ T9950] tipc: Disabling bearer [ 132.511642][ T9961] 9pnet_fd: Insufficient options for proto=fd [ 132.520036][ T9961] loop3: detected capacity change from 0 to 128 [ 132.537177][ T9961] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.555613][ T9961] ext4 filesystem being mounted at /485/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.587875][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.598742][ T9970] tipc: Enabling of bearer rejected, failed to enable media [ 132.774347][ T9982] tipc: New replicast peer: 255.255.255.255 [ 132.780514][ T9982] tipc: Enabled bearer , priority 10 [ 132.851399][ T9982] tipc: Disabling bearer [ 133.109350][T10006] loop4: detected capacity change from 0 to 128 [ 133.123194][T10006] bio_check_eod: 67 callbacks suppressed [ 133.123209][T10006] syz.4.2504: attempt to access beyond end of device [ 133.123209][T10006] loop4: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 133.144060][T10006] syz.4.2504: attempt to access beyond end of device [ 133.144060][T10006] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 133.157761][T10006] syz.4.2504: attempt to access beyond end of device [ 133.157761][T10006] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 133.176133][T10012] loop3: detected capacity change from 0 to 512 [ 133.185591][T10012] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.197948][T10010] tipc: New replicast peer: 255.255.255.255 [ 133.203958][T10010] tipc: Enabled bearer , priority 10 [ 133.230101][T10012] EXT4-fs (loop3): 1 truncate cleaned up [ 133.242380][T10012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.249963][T10006] syz.4.2504: attempt to access beyond end of device [ 133.249963][T10006] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 133.269809][T10016] smc: net device bond0 applied user defined pnetid SYZ0 [ 133.277154][T10016] smc: net device bond0 erased user defined pnetid SYZ0 [ 133.348822][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.378797][T10022] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10022 comm=syz.1.2509 [ 133.385908][T10006] syz.4.2504: attempt to access beyond end of device [ 133.385908][T10006] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 133.392475][T10020] syz.4.2504: attempt to access beyond end of device [ 133.392475][T10020] loop4: rw=2049, sector=289, nr_sectors = 80 limit=128 [ 133.412498][T10006] syz.4.2504: attempt to access beyond end of device [ 133.412498][T10006] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 133.432341][T10006] syz.4.2504: attempt to access beyond end of device [ 133.432341][T10006] loop4: rw=2049, sector=273, nr_sectors = 9 limit=128 [ 133.458888][T10020] syz.4.2504: attempt to access beyond end of device [ 133.458888][T10020] loop4: rw=2049, sector=377, nr_sectors = 8 limit=128 [ 133.472402][T10020] syz.4.2504: attempt to access beyond end of device [ 133.472402][T10020] loop4: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 133.516537][ T29] kauditd_printk_skb: 970 callbacks suppressed [ 133.516565][ T29] audit: type=1326 audit(1763737130.748:17142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 133.546469][ T29] audit: type=1326 audit(1763737130.748:17143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 133.570087][ T29] audit: type=1326 audit(1763737130.748:17144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 133.593636][ T29] audit: type=1326 audit(1763737130.748:17145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 133.617218][ T29] audit: type=1326 audit(1763737130.748:17146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 133.640821][ T29] audit: type=1326 audit(1763737130.748:17147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 133.664382][ T29] audit: type=1326 audit(1763737130.748:17148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 133.688199][ T29] audit: type=1326 audit(1763737130.748:17149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 133.711930][ T29] audit: type=1326 audit(1763737130.748:17150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 133.735679][ T29] audit: type=1326 audit(1763737130.748:17151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10031 comm="syz.1.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcc6e9f749 code=0x7ffc0000 [ 133.735894][ T5449] Buffer I/O error on dev loop4, logical block 289, lost async page write [ 133.783930][T10038] loop4: detected capacity change from 0 to 512 [ 133.791109][T10038] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.809684][T10017] __nla_validate_parse: 46 callbacks suppressed [ 133.809698][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2505'. [ 133.825185][T10017] tipc: Disabling bearer [ 133.835640][T10038] EXT4-fs (loop4): 1 truncate cleaned up [ 133.841890][T10038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.926735][T10046] tipc: New replicast peer: 255.255.255.255 [ 133.932802][T10046] tipc: Enabled bearer , priority 10 [ 133.946318][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2518'. [ 133.955451][T10046] tipc: Disabling bearer [ 134.021747][T10056] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2522'. [ 134.050127][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.060227][T10056] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10056 comm=syz.2.2522 [ 134.373618][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2528'. [ 134.382604][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2528'. [ 134.495056][T10080] tipc: New replicast peer: 255.255.255.255 [ 134.501146][T10080] tipc: Enabled bearer , priority 10 [ 134.534250][T10080] loop4: detected capacity change from 0 to 512 [ 134.549211][T10080] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 134.562411][T10080] EXT4-fs (loop4): failed to open journal device unknown-block(8,0) -16 [ 134.572957][T10084] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 134.581667][T10084] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 134.627623][T10084] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 134.636363][T10084] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 134.656938][T10088] tipc: New replicast peer: 255.255.255.255 [ 134.663003][T10088] tipc: Enabled bearer , priority 10 [ 134.670344][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2529'. [ 134.700365][T10088] tipc: Disabling bearer [ 134.874382][T10094] netem: unknown loss type 13 [ 134.879242][T10094] netem: change failed [ 134.893605][T10098] IPVS: Error connecting to the multicast addr [ 134.992652][T10104] SELinux: failed to load policy [ 135.118980][T10091] tipc: Disabling bearer [ 136.036883][T10124] tipc: New replicast peer: 255.255.255.255 [ 136.043012][T10124] tipc: Enabled bearer , priority 10 [ 136.117390][T10129] tipc: Disabling bearer [ 136.196332][T10138] tipc: New replicast peer: 255.255.255.255 [ 136.202456][T10138] tipc: Enabled bearer , priority 10 [ 136.234549][T10138] tipc: Disabling bearer [ 136.409514][T10162] tipc: New replicast peer: 255.255.255.255 [ 136.415540][T10162] tipc: Enabled bearer , priority 10 [ 136.444846][T10162] tipc: Disabling bearer [ 136.505266][T10172] tipc: New replicast peer: 255.255.255.255 [ 136.511513][T10172] tipc: Enabled bearer , priority 10 [ 136.518306][T10172] tipc: Disabling bearer [ 136.648884][T10189] SELinux: failed to load policy [ 136.733553][T10202] tipc: New replicast peer: 255.255.255.255 [ 136.739651][T10202] tipc: Enabled bearer , priority 10 [ 136.748828][T10202] tipc: Disabling bearer [ 136.770517][T10205] tipc: Enabling of bearer rejected, failed to enable media [ 136.834001][T10218] loop4: detected capacity change from 0 to 512 [ 136.843393][T10218] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.856671][T10218] EXT4-fs (loop4): 1 truncate cleaned up [ 136.862776][T10218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.939143][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.977497][T10232] loop4: detected capacity change from 0 to 128 [ 137.015181][T10238] tipc: New replicast peer: 255.255.255.255 [ 137.021404][T10238] tipc: Enabled bearer , priority 10 [ 137.021626][T10232] FAULT_INJECTION: forcing a failure. [ 137.021626][T10232] name failslab, interval 1, probability 0, space 0, times 0 [ 137.028255][T10238] tipc: Disabling bearer [ 137.040207][T10232] CPU: 0 UID: 0 PID: 10232 Comm: syz.4.2590 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.040233][T10232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.040245][T10232] Call Trace: [ 137.040252][T10232] [ 137.040259][T10232] __dump_stack+0x1d/0x30 [ 137.040282][T10232] dump_stack_lvl+0xe8/0x140 [ 137.040351][T10232] dump_stack+0x15/0x1b [ 137.040367][T10232] should_fail_ex+0x265/0x280 [ 137.040399][T10232] should_failslab+0x8c/0xb0 [ 137.040465][T10232] kmem_cache_alloc_noprof+0x50/0x480 [ 137.040492][T10232] ? getname_flags+0x80/0x3b0 [ 137.040591][T10232] getname_flags+0x80/0x3b0 [ 137.040618][T10232] user_path_at+0x28/0x130 [ 137.040675][T10232] __se_sys_quotactl+0xb6/0x670 [ 137.040717][T10232] __x64_sys_quotactl+0x55/0x70 [ 137.040739][T10232] x64_sys_call+0x15d6/0x3000 [ 137.040822][T10232] do_syscall_64+0xd2/0x200 [ 137.040842][T10232] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.040944][T10232] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.041009][T10232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.041030][T10232] RIP: 0033:0x7f5104b5f749 [ 137.041044][T10232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.041100][T10232] RSP: 002b:00007f51035bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 137.041118][T10232] RAX: ffffffffffffffda RBX: 00007f5104db5fa0 RCX: 00007f5104b5f749 [ 137.041130][T10232] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffff80000201 [ 137.041142][T10232] RBP: 00007f51035bf090 R08: 0000000000000000 R09: 0000000000000000 [ 137.041154][T10232] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.041166][T10232] R13: 00007f5104db6038 R14: 00007f5104db5fa0 R15: 00007ffdfe0ea388 [ 137.041219][T10232] [ 137.255856][T10246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10246 comm=syz.4.2592 [ 137.279243][T10250] tipc: Enabled bearer , priority 0 [ 137.308749][T10250] syzkaller0: entered promiscuous mode [ 137.314231][T10250] syzkaller0: entered allmulticast mode [ 137.330298][T10249] tipc: Resetting bearer [ 137.337735][T10249] tipc: Disabling bearer [ 137.429570][T10262] loop4: detected capacity change from 0 to 128 [ 137.496088][T10269] SELinux: failed to load policy [ 137.527433][T10270] loop3: detected capacity change from 0 to 512 [ 137.548127][T10270] EXT4-fs (loop3): 1 orphan inode deleted [ 137.550367][T10233] chnl_net:caif_netlink_parms(): no params data found [ 137.554682][T10270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.574942][ T5449] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 1 [ 137.578189][T10277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.595818][T10270] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.596636][T10277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.633597][T10280] tipc: New replicast peer: 255.255.255.255 [ 137.639658][T10280] tipc: Enabled bearer , priority 10 [ 137.664734][T10233] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.671866][T10233] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.679108][T10233] bridge_slave_0: entered allmulticast mode [ 137.685524][T10233] bridge_slave_0: entered promiscuous mode [ 137.687144][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.692438][T10233] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.707358][T10233] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.707549][T10233] bridge_slave_1: entered allmulticast mode [ 137.721195][T10233] bridge_slave_1: entered promiscuous mode [ 137.740696][T10233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.760266][T10233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.795864][T10233] team0: Port device team_slave_0 added [ 137.811408][T10233] team0: Port device team_slave_1 added [ 137.856222][T10233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.863218][T10233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.889194][T10233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.917303][T10233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.924446][T10233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.950409][T10233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.975986][T10289] tipc: Disabling bearer [ 138.006920][T10233] hsr_slave_0: entered promiscuous mode [ 138.013201][T10233] hsr_slave_1: entered promiscuous mode [ 138.019540][T10233] debugfs: 'hsr0' already exists in 'hsr' [ 138.025277][T10233] Cannot create hsr debugfs directory [ 138.067576][ T2061] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.077431][ T2061] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.094700][T10300] IPVS: Error connecting to the multicast addr [ 138.110196][ T2061] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.120027][ T2061] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.132809][T10306] SELinux: failed to load policy [ 138.140085][T10304] tipc: Enabled bearer , priority 0 [ 138.151835][T10304] syzkaller0: entered promiscuous mode [ 138.157314][T10304] syzkaller0: entered allmulticast mode [ 138.173104][T10303] tipc: Resetting bearer [ 138.180855][T10303] tipc: Disabling bearer [ 138.187993][ T2061] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.197799][ T2061] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.279612][T10316] tipc: New replicast peer: 255.255.255.255 [ 138.285632][T10316] tipc: Enabled bearer , priority 10 [ 138.293860][ T2061] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.303646][ T2061] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.317488][T10316] tipc: Disabling bearer [ 138.379201][ T2061] bridge_slave_1: left allmulticast mode [ 138.384846][ T2061] bridge_slave_1: left promiscuous mode [ 138.390571][ T2061] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.399422][ T2061] bridge_slave_0: left allmulticast mode [ 138.405246][ T2061] bridge_slave_0: left promiscuous mode [ 138.411108][ T2061] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.538762][ T29] kauditd_printk_skb: 1035 callbacks suppressed [ 138.538777][ T29] audit: type=1400 audit(1763737135.778:18186): avc: denied { bind } for pid=10327 comm="syz.4.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 138.566242][T10333] loop3: detected capacity change from 0 to 512 [ 138.573166][T10333] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.583457][ T29] audit: type=1400 audit(1763737135.808:18187): avc: denied { bind } for pid=10327 comm="syz.4.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.602973][ T29] audit: type=1400 audit(1763737135.808:18188): avc: denied { name_bind } for pid=10327 comm="syz.4.2623" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 138.604639][T10333] EXT4-fs (loop3): 1 truncate cleaned up [ 138.624066][ T29] audit: type=1400 audit(1763737135.808:18189): avc: denied { node_bind } for pid=10327 comm="syz.4.2623" saddr=100.1.1.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 138.630319][ T2061] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.652737][T10333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.673905][ T2061] bond_slave_0: left promiscuous mode [ 138.681949][ T2061] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.690781][ T2061] bond_slave_1: left promiscuous mode [ 138.697456][ T2061] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 138.705985][ T2061] dummy0: left promiscuous mode [ 138.711744][ T2061] $Hÿ (unregistering): Released all slaves [ 138.723126][T10326] tipc: New replicast peer: 255.255.255.255 [ 138.729183][T10326] tipc: Enabled bearer , priority 10 [ 138.766201][T10339] tipc: Enabling of bearer rejected, already enabled [ 138.777267][ T2061] tipc: Left network mode [ 138.782221][T10326] tipc: Disabling bearer [ 138.798463][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.836727][ T2061] hsr_slave_0: left promiscuous mode [ 138.843760][ T2061] hsr_slave_1: left promiscuous mode [ 138.843809][T10344] __nla_validate_parse: 37 callbacks suppressed [ 138.843820][T10344] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2626'. [ 138.849998][ T2061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.871700][ T2061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.880361][ T2061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.880848][T10348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.887753][ T2061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.903414][T10348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.911324][ T2061] veth0_macvtap: left promiscuous mode [ 138.916904][ T2061] veth1_vlan: left promiscuous mode [ 138.922228][ T2061] veth0_vlan: left promiscuous mode [ 138.931151][ T29] audit: type=1400 audit(1763737136.168:18190): avc: denied { getopt } for pid=10345 comm="syz.1.2628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 138.977419][T10352] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10352 comm=syz.3.2626 [ 139.050692][ T2061] team0 (unregistering): Port device team_slave_1 removed [ 139.060216][ T2061] team0 (unregistering): Port device team_slave_0 removed [ 139.095818][T10347] lo speed is unknown, defaulting to 1000 [ 139.096054][T10355] tipc: New replicast peer: 255.255.255.255 [ 139.107587][T10355] tipc: Enabled bearer , priority 10 [ 139.113858][T10347] lo speed is unknown, defaulting to 1000 [ 139.117573][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2629'. [ 139.128555][T10355] tipc: Disabling bearer [ 139.133772][T10347] lo speed is unknown, defaulting to 1000 [ 139.144353][T10347] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 139.154660][T10357] tipc: New replicast peer: 255.255.255.255 [ 139.160911][T10357] tipc: Enabled bearer , priority 10 [ 139.167950][T10347] lo speed is unknown, defaulting to 1000 [ 139.173711][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2630'. [ 139.182710][T10357] tipc: Disabling bearer [ 139.188345][T10347] lo speed is unknown, defaulting to 1000 [ 139.194543][T10347] lo speed is unknown, defaulting to 1000 [ 139.202751][T10347] lo speed is unknown, defaulting to 1000 [ 139.210741][T10347] lo speed is unknown, defaulting to 1000 [ 139.221759][T10233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 139.231891][T10233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.247490][T10361] loop3: detected capacity change from 0 to 512 [ 139.254005][T10233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.263887][T10233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.274093][T10361] EXT4-fs (loop3): 1 orphan inode deleted [ 139.286504][T10361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.299426][ T5449] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 139.309214][ T5449] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:11: Failed to release dquot type 1 [ 139.313665][T10233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.333404][T10233] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.349089][ T5450] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.356107][T10361] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.356256][ T5450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.369093][ T29] audit: type=1400 audit(1763737136.608:18191): avc: denied { bind } for pid=10360 comm="syz.3.2632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 139.377424][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.400549][ T5450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.416343][T10233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.426806][T10233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.438162][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.442560][T10373] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2634'. [ 139.448924][ T5453] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 139.465853][ T5453] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:15: Failed to release dquot type 1 [ 139.523519][T10383] tipc: New replicast peer: 255.255.255.255 [ 139.529762][T10383] tipc: Enabled bearer , priority 10 [ 139.534194][ T29] audit: type=1326 audit(1763737136.768:18192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.0.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0319f749 code=0x7ffc0000 [ 139.540246][T10233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.559496][ T29] audit: type=1326 audit(1763737136.768:18193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10384 comm="syz.0.2638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0319f749 code=0x7ffc0000 [ 139.614105][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2640'. [ 139.662850][T10392] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10392 comm=syz.4.2640 [ 139.705713][T10233] veth0_vlan: entered promiscuous mode [ 139.723694][T10233] veth1_vlan: entered promiscuous mode [ 139.735279][T10406] tipc: New replicast peer: 255.255.255.255 [ 139.741431][T10406] tipc: Enabled bearer , priority 10 [ 139.759667][T10233] veth0_macvtap: entered promiscuous mode [ 139.780845][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2644'. [ 139.789921][T10406] tipc: Disabling bearer [ 139.807129][T10408] netlink: 'syz.0.2645': attribute type 4 has an invalid length. [ 139.813531][T10233] veth1_macvtap: entered promiscuous mode [ 139.814939][T10408] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2645'. [ 139.830935][T10408] .`: renamed from $Hÿ [ 139.842192][T10233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.853183][T10233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.862657][ T5453] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.894142][ T5453] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.919879][ T5453] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.933835][ T5453] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.985072][T10420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2649'. [ 139.997930][T10423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2647'. [ 140.014420][T10420] IPVS: Error connecting to the multicast addr [ 140.059386][T10426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.068194][T10426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.092046][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2637'. [ 140.101075][T10383] tipc: Disabling bearer [ 140.169347][T10430] usb usb8: usbfs: process 10430 (syz.4.2652) did not claim interface 0 before use [ 140.233157][T10438] tipc: New replicast peer: 255.255.255.255 [ 140.239222][T10438] tipc: Enabled bearer , priority 10 [ 140.245674][T10438] tipc: Disabling bearer [ 140.354735][T10457] SELinux: failed to load policy [ 140.428914][T10466] tipc: New replicast peer: 255.255.255.255 [ 140.435023][T10466] tipc: Enabled bearer , priority 10 [ 140.454278][T10466] tipc: Disabling bearer [ 140.571587][T10482] macvtap0: entered promiscuous mode [ 140.576918][T10482] team0: entered promiscuous mode [ 140.582217][T10482] macvtap0: entered allmulticast mode [ 140.587847][T10482] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 140.597662][T10482] team0: left promiscuous mode [ 140.642452][T10491] loop3: detected capacity change from 0 to 512 [ 140.649501][T10491] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.660635][T10491] EXT4-fs (loop3): 1 truncate cleaned up [ 140.666729][T10491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.701677][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.713868][T10483] lo speed is unknown, defaulting to 1000 [ 140.740419][T10499] SELinux: failed to load policy [ 140.782551][T10483] chnl_net:caif_netlink_parms(): no params data found [ 140.855003][T10483] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.862277][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.869604][T10483] bridge_slave_0: entered allmulticast mode [ 140.875915][T10483] bridge_slave_0: entered promiscuous mode [ 140.883784][T10483] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.890954][T10483] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.898190][T10483] bridge_slave_1: entered allmulticast mode [ 140.905034][T10483] bridge_slave_1: entered promiscuous mode [ 140.917799][T10512] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10512 comm=syz.3.2682 [ 140.936577][T10483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.947061][T10483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.978848][T10483] team0: Port device team_slave_0 added [ 140.986016][T10518] loop2: detected capacity change from 0 to 128 [ 140.988104][T10483] team0: Port device team_slave_1 added [ 140.992756][T10518] vfat: Unknown parameter '·' [ 141.006072][T10520] loop3: detected capacity change from 0 to 512 [ 141.013042][T10520] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.025745][T10520] EXT4-fs (loop3): 1 truncate cleaned up [ 141.031761][T10520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.052947][T10483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.059944][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.085896][T10483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.097346][T10483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.104366][T10483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.130262][T10483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.165244][T10483] hsr_slave_0: entered promiscuous mode [ 141.176128][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.185753][T10483] hsr_slave_1: entered promiscuous mode [ 141.191777][T10483] debugfs: 'hsr0' already exists in 'hsr' [ 141.197510][T10483] Cannot create hsr debugfs directory [ 141.212293][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.226278][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.283013][T10483] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.292872][T10483] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.339560][T10531] loop3: detected capacity change from 0 to 512 [ 141.346462][T10531] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.359866][T10483] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.369781][T10483] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.381962][T10531] EXT4-fs (loop3): 1 truncate cleaned up [ 141.388045][T10531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.388971][T10534] SELinux: failed to load policy [ 141.429450][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.459968][T10483] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.469771][T10483] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.543483][T10483] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 141.553327][T10483] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.617923][T10551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10551 comm=syz.0.2697 [ 141.662578][T10483] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.678574][T10557] tipc: New replicast peer: 255.255.255.255 [ 141.684563][T10557] tipc: Enabled bearer , priority 10 [ 141.698421][T10483] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.710442][T10483] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.722738][T10557] tipc: Disabling bearer [ 141.729011][T10483] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.755827][T10560] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 141.770097][T10556] lo speed is unknown, defaulting to 1000 [ 141.788817][T10483] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.795924][T10483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.803303][T10483] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.810356][T10483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.833814][ T2061] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.841636][T10573] SELinux: failed to load policy [ 141.848521][ T2061] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.906984][T10483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.921528][T10483] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.039975][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.047080][ T5449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.063343][ T5449] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.070440][ T5449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.478080][T10483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.489751][T10583] tipc: New replicast peer: 255.255.255.255 [ 142.495748][T10583] tipc: Enabled bearer , priority 10 [ 142.509445][T10585] tipc: Disabling bearer [ 142.640844][T10593] IPVS: Error connecting to the multicast addr [ 142.662414][T10483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.767722][T10608] FAULT_INJECTION: forcing a failure. [ 142.767722][T10608] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.781004][T10608] CPU: 0 UID: 0 PID: 10608 Comm: syz.0.2713 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.781035][T10608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.781115][T10608] Call Trace: [ 142.781121][T10608] [ 142.781127][T10608] __dump_stack+0x1d/0x30 [ 142.781146][T10608] dump_stack_lvl+0xe8/0x140 [ 142.781190][T10608] dump_stack+0x15/0x1b [ 142.781207][T10608] should_fail_ex+0x265/0x280 [ 142.781238][T10608] should_fail_alloc_page+0xf2/0x100 [ 142.781266][T10608] __alloc_frozen_pages_noprof+0xff/0x360 [ 142.781449][T10608] alloc_pages_mpol+0xb3/0x260 [ 142.781469][T10608] vma_alloc_folio_noprof+0x1aa/0x300 [ 142.781493][T10608] handle_mm_fault+0xec2/0x2be0 [ 142.781517][T10608] ? vma_start_read+0x141/0x1f0 [ 142.781575][T10608] do_user_addr_fault+0x630/0x1080 [ 142.781599][T10608] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 142.781630][T10608] exc_page_fault+0x62/0xa0 [ 142.781662][T10608] asm_exc_page_fault+0x26/0x30 [ 142.781718][T10608] RIP: 0033:0x7faf03060943 [ 142.781730][T10608] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 142.781791][T10608] RSP: 002b:00007faf01c064a0 EFLAGS: 00010202 [ 142.781804][T10608] RAX: 0000000000002000 RBX: 00007faf01c06540 RCX: 00007faef97e7000 [ 142.781814][T10608] RDX: 00007faf01c066e0 RSI: 0000000000000017 RDI: 00007faf01c065e0 [ 142.781824][T10608] RBP: 000000000000006a R08: 0000000000000008 R09: 00000000000000b5 [ 142.781834][T10608] R10: 00000000000000c0 R11: 00007faf01c06540 R12: 0000000000000001 [ 142.781845][T10608] R13: 00007faf0323fc40 R14: 0000000000000080 R15: 00007faf01c065e0 [ 142.781860][T10608] [ 142.781869][T10608] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 142.789056][T10483] veth0_vlan: entered promiscuous mode [ 143.025954][T10483] veth1_vlan: entered promiscuous mode [ 143.044291][T10613] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10613 comm=syz.3.2716 [ 143.052985][T10483] veth0_macvtap: entered promiscuous mode [ 143.065224][T10483] veth1_macvtap: entered promiscuous mode [ 143.073149][T10616] loop4: detected capacity change from 0 to 512 [ 143.076156][T10483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.091333][T10616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.112869][T10483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.121093][T10616] EXT4-fs (loop4): 1 truncate cleaned up [ 143.127525][ T5453] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.142487][T10616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.156461][T10624] IPVS: Error connecting to the multicast addr [ 143.165255][ T5453] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.174848][ T5453] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.185078][ T5449] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.249777][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.411106][T10651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.419646][T10651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.594131][T10650] loop1: detected capacity change from 0 to 512 [ 143.600145][T10650] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2730: bad orphan inode 15 [ 143.600290][T10650] ext4_test_bit(bit=14, block=18) = 1 [ 143.600368][T10650] is_bad_inode(inode)=0 [ 143.600374][T10650] NEXT_ORPHAN(inode)=1023 [ 143.600395][T10650] max_ino=32 [ 143.600400][T10650] i_nlink=0 [ 143.600633][T10650] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2967: inode #15: comm syz.1.2730: corrupted xattr block 19: invalid header [ 143.600937][T10650] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 143.601824][T10650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 143.602092][T10650] ext4 filesystem being mounted at /2/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 143.674963][T10658] IPVS: Error connecting to the multicast addr [ 143.690988][T10483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 143.777787][T10662] loop2: detected capacity change from 0 to 1024 [ 143.778187][T10662] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 143.839457][T10664] SELinux: failed to load policy [ 143.887383][T10670] tipc: Started in network mode [ 143.903786][T10670] tipc: Node identity ac14140f, cluster identity 4711 [ 143.904789][T10670] tipc: New replicast peer: 255.255.255.255 [ 143.916620][T10670] tipc: Enabled bearer , priority 10 [ 143.928623][T10670] __nla_validate_parse: 19 callbacks suppressed [ 143.928632][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2737'. [ 143.943861][T10670] tipc: Disabling bearer [ 143.976385][ T29] kauditd_printk_skb: 736 callbacks suppressed [ 143.976420][ T29] audit: type=1326 audit(1763737141.208:18930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6ac2f749 code=0x7ffc0000 [ 144.009588][ T29] audit: type=1326 audit(1763737141.238:18931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac6ac2df90 code=0x7ffc0000 [ 144.033235][ T29] audit: type=1326 audit(1763737141.238:18932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6ac2f749 code=0x7ffc0000 [ 144.057167][ T29] audit: type=1326 audit(1763737141.238:18933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac6ac2f749 code=0x7ffc0000 [ 144.080862][ T29] audit: type=1326 audit(1763737141.238:18934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6ac2f749 code=0x7ffc0000 [ 144.104454][ T29] audit: type=1326 audit(1763737141.238:18935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6ac2f749 code=0x7ffc0000 [ 144.128305][ T29] audit: type=1326 audit(1763737141.238:18936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6ac2f749 code=0x7ffc0000 [ 144.151975][ T29] audit: type=1326 audit(1763737141.238:18937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6ac2f749 code=0x7ffc0000 [ 144.175700][ T29] audit: type=1326 audit(1763737141.238:18938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6ac2f749 code=0x7ffc0000 [ 144.199461][ T29] audit: type=1326 audit(1763737141.238:18939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10674 comm="syz.3.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac6ac2f749 code=0x7ffc0000 [ 144.266180][T10684] loop3: detected capacity change from 0 to 512 [ 144.275477][T10684] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.304262][T10684] EXT4-fs (loop3): 1 truncate cleaned up [ 144.310413][T10684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.342953][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.357124][T10695] FAULT_INJECTION: forcing a failure. [ 144.357124][T10695] name failslab, interval 1, probability 0, space 0, times 0 [ 144.370159][T10695] CPU: 1 UID: 0 PID: 10695 Comm: syz.1.2746 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.370184][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 144.370197][T10695] Call Trace: [ 144.370203][T10695] [ 144.370282][T10695] __dump_stack+0x1d/0x30 [ 144.370304][T10695] dump_stack_lvl+0xe8/0x140 [ 144.370324][T10695] dump_stack+0x15/0x1b [ 144.370342][T10695] should_fail_ex+0x265/0x280 [ 144.370449][T10695] should_failslab+0x8c/0xb0 [ 144.370473][T10695] kmem_cache_alloc_noprof+0x50/0x480 [ 144.370499][T10695] ? skb_clone+0x151/0x1f0 [ 144.370515][T10695] skb_clone+0x151/0x1f0 [ 144.370551][T10695] nfnetlink_rcv+0x2fc/0x16c0 [ 144.370611][T10695] ? kmem_cache_free+0xe4/0x3d0 [ 144.370641][T10695] ? __kfree_skb+0x109/0x150 [ 144.370664][T10695] ? nlmon_xmit+0x4f/0x60 [ 144.370765][T10695] ? nlmon_xmit+0x4f/0x60 [ 144.370783][T10695] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 144.370815][T10695] ? __dev_queue_xmit+0x1200/0x2000 [ 144.370845][T10695] ? __dev_queue_xmit+0x182/0x2000 [ 144.370869][T10695] ? ref_tracker_free+0x37d/0x3e0 [ 144.370902][T10695] netlink_unicast+0x5c0/0x690 [ 144.370929][T10695] netlink_sendmsg+0x58b/0x6b0 [ 144.370946][T10695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.371020][T10695] __sock_sendmsg+0x145/0x180 [ 144.371040][T10695] ____sys_sendmsg+0x31e/0x4e0 [ 144.371057][T10695] ___sys_sendmsg+0x17b/0x1d0 [ 144.371082][T10695] __x64_sys_sendmsg+0xd4/0x160 [ 144.371103][T10695] x64_sys_call+0x191e/0x3000 [ 144.371146][T10695] do_syscall_64+0xd2/0x200 [ 144.371235][T10695] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.371313][T10695] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.371344][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.371445][T10695] RIP: 0033:0x7f819157f749 [ 144.371457][T10695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.371472][T10695] RSP: 002b:00007f818ffdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.371488][T10695] RAX: ffffffffffffffda RBX: 00007f81917d5fa0 RCX: 00007f819157f749 [ 144.371579][T10695] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 144.371589][T10695] RBP: 00007f818ffdf090 R08: 0000000000000000 R09: 0000000000000000 [ 144.371599][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.371609][T10695] R13: 00007f81917d6038 R14: 00007f81917d5fa0 R15: 00007ffd3eedc588 [ 144.371629][T10695] [ 144.636578][T10703] tipc: Started in network mode [ 144.641534][T10703] tipc: Node identity ac14140f, cluster identity 4711 [ 144.655397][T10703] tipc: New replicast peer: 255.255.255.255 [ 144.661427][T10703] tipc: Enabled bearer , priority 10 [ 144.685776][T10709] SELinux: failed to load policy [ 144.693903][T10703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2749'. [ 144.702906][T10703] tipc: Disabling bearer [ 144.807845][T10720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.816416][T10720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.825436][T10720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.834019][T10720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.891437][T10726] loop1: detected capacity change from 0 to 512 [ 144.898179][T10726] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.910799][T10726] EXT4-fs (loop1): 1 truncate cleaned up [ 144.917502][T10726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.031760][T10483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.280823][T10740] tipc: New replicast peer: 255.255.255.255 [ 145.286868][T10740] tipc: Enabled bearer , priority 10 [ 145.294758][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 145.303775][T10740] tipc: Disabling bearer [ 145.327629][T10744] SELinux: failed to load policy [ 145.360822][T10735] SELinux: failed to load policy [ 145.438099][T10756] loop2: detected capacity change from 0 to 512 [ 145.448677][T10756] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.471420][T10751] netlink: 'syz.4.2771': attribute type 1 has an invalid length. [ 145.487249][T10751] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.499854][T10756] EXT4-fs (loop2): 1 truncate cleaned up [ 145.506675][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 145.514437][T10756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.549983][T10751] bond2 (unregistering): Released all slaves [ 145.605377][T10771] tipc: New replicast peer: 255.255.255.255 [ 145.611487][T10771] tipc: Enabled bearer , priority 10 [ 145.631537][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2777'. [ 145.640571][T10771] tipc: Disabling bearer [ 145.649680][T10233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.685779][T10777] SELinux: failed to load policy [ 145.839010][T10798] FAULT_INJECTION: forcing a failure. [ 145.839010][T10798] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 145.852312][T10798] CPU: 1 UID: 0 PID: 10798 Comm: syz.2.2786 Not tainted syzkaller #0 PREEMPT(voluntary) [ 145.852335][T10798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.852345][T10798] Call Trace: [ 145.852351][T10798] [ 145.852358][T10798] __dump_stack+0x1d/0x30 [ 145.852381][T10798] dump_stack_lvl+0xe8/0x140 [ 145.852456][T10798] dump_stack+0x15/0x1b [ 145.852474][T10798] should_fail_ex+0x265/0x280 [ 145.852513][T10798] should_fail_alloc_page+0xf2/0x100 [ 145.852538][T10798] __alloc_frozen_pages_noprof+0xff/0x360 [ 145.852632][T10798] alloc_pages_mpol+0xb3/0x260 [ 145.852722][T10798] ? __rcu_read_lock+0x37/0x50 [ 145.852747][T10798] vma_alloc_folio_noprof+0x1aa/0x300 [ 145.852767][T10798] handle_mm_fault+0xec2/0x2be0 [ 145.852851][T10798] ? vma_start_read+0x141/0x1f0 [ 145.852882][T10798] do_user_addr_fault+0x630/0x1080 [ 145.852906][T10798] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 145.853003][T10798] exc_page_fault+0x62/0xa0 [ 145.853028][T10798] asm_exc_page_fault+0x26/0x30 [ 145.853045][T10798] RIP: 0033:0x7faa067e09f0 [ 145.853062][T10798] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 145.853080][T10798] RSP: 002b:00007faa053654a0 EFLAGS: 00010286 [ 145.853097][T10798] RAX: 0000000000001000 RBX: 00007faa05365540 RCX: 0000000000000001 [ 145.853150][T10798] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007faa053655e0 [ 145.853161][T10798] RBP: 00000000000000f7 R08: 00007fa9fcf46000 R09: 00000000000000ff [ 145.853171][T10798] R10: 0000000000000000 R11: 00007faa05365550 R12: 0000000000000001 [ 145.853181][T10798] R13: 00007faa069bfc40 R14: 0000000000000000 R15: 00007faa053655e0 [ 145.853197][T10798] [ 145.853205][T10798] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 145.942771][T10801] loop1: detected capacity change from 0 to 512 [ 145.983348][T10798] loop2: detected capacity change from 0 to 1024 [ 145.992045][T10801] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.000049][T10798] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 146.026004][T10801] EXT4-fs (loop1): 1 truncate cleaned up [ 146.026544][T10798] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 146.034849][T10801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.042763][T10798] JBD2: no valid journal superblock found [ 146.099961][T10798] EXT4-fs (loop2): Could not load journal inode [ 146.290501][T10483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.633397][T10823] SELinux: failed to load policy [ 146.665496][T10827] loop3: detected capacity change from 0 to 512 [ 146.686068][T10827] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.721187][T10837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2803'. [ 146.725467][T10827] EXT4-fs (loop3): 1 truncate cleaned up [ 146.765666][T10827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.811607][T10837] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10837 comm=syz.2.2803 [ 146.822100][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.982900][T10857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2802'. [ 147.087731][T10861] .`: left promiscuous mode [ 147.092305][T10861] .`: entered allmulticast mode [ 147.097516][T10861] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 147.649192][T10861] veth1_vlan: entered allmulticast mode [ 147.655145][T10861] veth8: entered allmulticast mode [ 147.660329][T10861] veth9: entered allmulticast mode [ 147.665534][T10861] veth10: entered allmulticast mode [ 147.670781][T10861] veth11: entered allmulticast mode [ 147.676079][T10861] veth12: entered allmulticast mode [ 147.681351][T10861] veth13: entered allmulticast mode [ 147.686568][T10861] bridge1: entered allmulticast mode [ 147.692059][T10861] bond0: entered allmulticast mode [ 147.697235][T10861] netdevsim netdevsim0 eth0: entered allmulticast mode [ 147.704152][T10861] netdevsim netdevsim0 eth1: entered allmulticast mode [ 147.711209][T10861] netdevsim netdevsim0 eth2: entered allmulticast mode [ 147.718333][T10861] netdevsim netdevsim0 eth3: entered allmulticast mode [ 147.725518][T10861] veth14: entered allmulticast mode [ 147.730780][T10861] veth15: entered allmulticast mode [ 147.736044][T10861] veth16: entered allmulticast mode [ 147.741463][T10861] veth17: entered allmulticast mode [ 147.746686][T10861] veth18: entered allmulticast mode [ 147.751929][T10861] veth19: entered allmulticast mode [ 147.757210][T10861] veth20: entered allmulticast mode [ 147.762460][T10861] veth21: entered allmulticast mode [ 147.767730][T10861] veth22: entered allmulticast mode [ 147.773039][T10861] veth23: entered allmulticast mode [ 147.778252][T10861] veth24: entered allmulticast mode [ 147.783562][T10861] veth25: entered allmulticast mode [ 147.788822][T10861] macvtap0: left promiscuous mode [ 147.793925][T10861] veth26: entered allmulticast mode [ 147.799549][T10861] veth27: entered allmulticast mode [ 147.953532][T10870] SELinux: failed to load policy [ 147.993320][T10874] loop2: detected capacity change from 0 to 512 [ 148.011127][T10874] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.480997][T10874] EXT4-fs (loop2): 1 truncate cleaned up [ 148.492433][T10874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.568120][T10233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.673323][T10897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.681860][T10897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.877162][T10907] loop2: detected capacity change from 0 to 1024 [ 148.900050][T10907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.933563][T10907] EXT4-fs error (device loop2): ext4_empty_dir:3109: inode #11: block 623: comm syz.2.2821: Attempting to read directory block (623) that is past i_size (638464) [ 148.972107][T10233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.108837][T10916] SELinux: failed to load policy [ 149.185262][T10920] loop2: detected capacity change from 0 to 512 [ 149.192186][T10920] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.206977][T10920] EXT4-fs (loop2): 1 truncate cleaned up [ 149.213083][T10920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.233955][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2834'. [ 149.257748][T10929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2837'. [ 149.258895][T10233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.271687][T10929] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10929 comm=syz.4.2837 [ 149.279047][ T29] kauditd_printk_skb: 1019 callbacks suppressed [ 149.279060][ T29] audit: type=1326 audit(1763737146.508:19959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.0.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0319f749 code=0x7ffc0000 [ 149.323035][ T29] audit: type=1326 audit(1763737146.558:19960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.0.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0319f749 code=0x7ffc0000 [ 149.346772][ T29] audit: type=1326 audit(1763737146.558:19961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.0.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf0319df90 code=0x7ffc0000 [ 149.370372][ T29] audit: type=1326 audit(1763737146.558:19962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.0.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0319f749 code=0x7ffc0000 [ 149.393986][ T29] audit: type=1326 audit(1763737146.558:19963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.0.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0319f749 code=0x7ffc0000 [ 149.394012][ T29] audit: type=1326 audit(1763737146.558:19964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.0.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf0319f749 code=0x7ffc0000 [ 149.394033][ T29] audit: type=1326 audit(1763737146.558:19965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.0.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0319f749 code=0x7ffc0000 [ 149.394056][ T29] audit: type=1326 audit(1763737146.558:19966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.0.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0319f749 code=0x7ffc0000 [ 149.394117][ T29] audit: type=1326 audit(1763737146.558:19967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.0.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf0319f749 code=0x7ffc0000 [ 149.394138][ T29] audit: type=1326 audit(1763737146.558:19968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10930 comm="syz.0.2838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf0319f749 code=0x7ffc0000 [ 149.395024][T10936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.395218][T10936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.446210][T10939] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2840'. [ 149.617642][T10950] SELinux: failed to load policy [ 149.657311][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2842'. [ 149.704910][T10959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2848'. [ 149.716867][T10961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2849'. [ 149.729393][T10961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10961 comm=syz.0.2849 [ 149.780779][T10963] loop3: detected capacity change from 0 to 8192 [ 149.784660][T10971] tipc: New replicast peer: 255.255.255.255 [ 149.793310][T10971] tipc: Enabled bearer , priority 10 [ 149.818847][T10963] loop3: p1[EZD] p2 p3 p4 [ 149.824915][T10963] loop3: p1 size 32768 extends beyond EOD, truncated [ 149.832846][T10963] loop3: p2 start 930308 is beyond EOD, truncated [ 149.839347][T10963] loop3: p3 start 117772289 is beyond EOD, truncated [ 149.846064][T10963] loop3: p4 size 262144 extends beyond EOD, truncated [ 149.856113][T10976] loop2: detected capacity change from 0 to 2048 [ 149.870662][T10976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.896750][T10976] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.947546][T10984] SELinux: failed to load policy [ 150.007664][T10233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.048891][T10990] loop3: detected capacity change from 0 to 8192 [ 150.069567][T10993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2861'. [ 150.086389][T10995] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10995 comm=syz.4.2863 [ 150.114139][T10990] netlink: 'syz.3.2862': attribute type 4 has an invalid length. [ 150.116704][T10999] tipc: New replicast peer: 255.255.255.255 [ 150.128005][T10999] tipc: Enabled bearer , priority 10 [ 150.137730][T10990] netlink: 'syz.3.2862': attribute type 4 has an invalid length. [ 150.187688][T11005] loop4: detected capacity change from 0 to 1024 [ 150.194608][T11005] ext4: Unknown parameter 'subj_user' [ 150.208209][T11010] SELinux: failed to load policy [ 150.259690][T11005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.269411][T11005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.322381][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2875'. [ 150.354387][T11025] tipc: New replicast peer: 255.255.255.255 [ 150.360469][T11025] tipc: Enabled bearer , priority 10 [ 150.365354][T11026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.375424][T11026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.412896][T11030] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11030 comm=syz.1.2879 [ 150.505771][T11039] loop2: detected capacity change from 0 to 1024 [ 150.512406][T11039] EXT4-fs: inline encryption not supported [ 150.518320][T11039] EXT4-fs: Ignoring removed nobh option [ 150.523889][T11039] EXT4-fs: Ignoring removed bh option [ 150.539887][T11039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.552918][T11039] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.564760][T11039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2883'. [ 150.593708][T11039] SELinux: failed to load policy [ 150.610154][T11046] loop1: detected capacity change from 0 to 512 [ 150.617061][T11046] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 150.628395][T11046] EXT4-fs (loop1): 1 truncate cleaned up [ 150.634985][T11046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.759574][T10483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.775674][T11055] loop0: detected capacity change from 0 to 2048 [ 150.788548][ T23] tipc: Node number set to 2965773595 [ 150.874584][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2889'. [ 150.882838][T11066] tipc: Enabling of bearer rejected, already enabled [ 150.917415][T11068] SELinux: failed to load policy [ 151.021677][T11079] tipc: Disabling bearer [ 151.133313][T11085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11085 comm=syz.0.2901 [ 151.209654][T11095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.259381][T11095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.462210][T11103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.470753][T11103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.478554][ T9] tipc: Node number set to 2886997007 [ 151.996293][T11112] loop1: detected capacity change from 0 to 512 [ 152.003549][T11112] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.014869][T11112] EXT4-fs (loop1): 1 truncate cleaned up [ 152.021061][T11112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.074829][T11115] loop0: detected capacity change from 0 to 512 [ 152.082419][T11115] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.094058][T11115] EXT4-fs (loop0): 1 truncate cleaned up [ 152.100488][T11115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.123230][T10483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.149111][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.189614][T11123] tipc: New replicast peer: 255.255.255.255 [ 152.195796][T11123] tipc: Enabled bearer , priority 10 [ 152.244325][T11128] SELinux: failed to load policy [ 152.424844][T11151] tipc: New replicast peer: 255.255.255.255 [ 152.430994][T11151] tipc: Enabled bearer , priority 10 [ 152.437724][T11152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.455455][T11152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.468233][T11159] SELinux: failed to load policy [ 152.843185][T11187] tipc: Enabling of bearer rejected, already enabled [ 152.870700][T11189] loop1: detected capacity change from 0 to 512 [ 152.878790][T11189] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 152.887819][T11189] EXT4-fs (loop1): failed to open journal device unknown-block(8,0) -16 [ 153.416524][T11204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11204 comm=syz.0.2951 [ 153.508706][T11214] tipc: Enabling of bearer rejected, already enabled [ 153.549615][T11217] tipc: Disabling bearer [ 153.568676][T11220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.585465][T11220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.622233][T11228] loop1: detected capacity change from 0 to 512 [ 153.635181][T11228] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 153.646555][T11228] EXT4-fs (loop1): 1 truncate cleaned up [ 153.652877][T11228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.676666][T10483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.709619][T11234] loop1: detected capacity change from 0 to 512 [ 153.721409][T11234] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 153.736977][T11234] EXT4-fs (loop1): failed to open journal device unknown-block(8,0) -16 [ 153.748564][T11236] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11236 comm=syz.0.2965 [ 153.888314][T11247] loop0: detected capacity change from 0 to 512 [ 153.909213][T11247] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.950061][T11247] EXT4-fs (loop0): 1 truncate cleaned up [ 153.956221][T11247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.101815][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.272593][T11260] loop2: detected capacity change from 0 to 512 [ 154.280613][T11263] SELinux: failed to load policy [ 154.291293][T11260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.303781][T11260] EXT4-fs (loop2): 1 truncate cleaned up [ 154.313340][T11260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.351100][ T29] kauditd_printk_skb: 1225 callbacks suppressed [ 154.351113][ T29] audit: type=1326 audit(1763737151.588:21192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819157f749 code=0x7ffc0000 [ 154.380922][ T29] audit: type=1326 audit(1763737151.588:21193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819157f749 code=0x7ffc0000 [ 154.404556][ T29] audit: type=1326 audit(1763737151.588:21194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819157f749 code=0x7ffc0000 [ 154.428161][ T29] audit: type=1326 audit(1763737151.588:21195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819157f749 code=0x7ffc0000 [ 154.451934][ T29] audit: type=1326 audit(1763737151.588:21196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819157f749 code=0x7ffc0000 [ 154.475502][ T29] audit: type=1326 audit(1763737151.588:21197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f819157f749 code=0x7ffc0000 [ 154.499041][ T29] audit: type=1326 audit(1763737151.588:21198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819157f749 code=0x7ffc0000 [ 154.523017][ T29] audit: type=1326 audit(1763737151.588:21199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819157f749 code=0x7ffc0000 [ 154.546720][ T29] audit: type=1326 audit(1763737151.588:21200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f819157f749 code=0x7ffc0000 [ 154.570295][ T29] audit: type=1326 audit(1763737151.588:21201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11267 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f819157f749 code=0x7ffc0000 [ 154.638997][T11274] __nla_validate_parse: 8 callbacks suppressed [ 154.639034][T11274] netlink: 116 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 154.657614][T10233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.690997][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2981'. [ 154.842503][T11298] loop0: detected capacity change from 0 to 512 [ 154.859610][T11298] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.907951][T11298] EXT4-fs (loop0): 1 truncate cleaned up [ 154.956413][T11298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.028642][T11307] tipc: Enabling of bearer rejected, already enabled [ 155.058163][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.069454][T11310] netlink: 116 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 155.094922][T11313] SELinux: failed to load policy [ 155.114080][T11315] tipc: Enabling of bearer rejected, already enabled [ 155.122303][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2997'. [ 155.125664][T11315] loop3: detected capacity change from 0 to 512 [ 155.170959][T11315] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 155.188730][T11315] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16 [ 155.237788][T11326] loop2: detected capacity change from 0 to 512 [ 155.249942][T11326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.260022][T11328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3005'. [ 155.267733][T11330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3006'. [ 155.285974][T11326] EXT4-fs (loop2): 1 truncate cleaned up [ 155.293117][T11326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.337696][T11334] tipc: Enabling of bearer rejected, already enabled [ 155.345708][T11328] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11328 comm=syz.0.3005 [ 155.370451][T11330] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11330 comm=syz.4.3006 [ 155.409651][T10233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.466712][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2999'. [ 155.475992][T11335] tipc: Disabling bearer [ 155.518755][T11351] SELinux: failed to load policy [ 155.598302][T11361] loop2: detected capacity change from 0 to 512 [ 155.612223][T11361] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 155.653914][T11361] EXT4-fs (loop2): 1 truncate cleaned up [ 155.660058][T11361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.736564][T10233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.760344][T11368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3023'. [ 155.791015][T11374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3022'. [ 155.802065][T11368] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11368 comm=syz.3.3023 [ 155.818532][T11374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11374 comm=syz.2.3022 [ 155.896317][T11387] loop0: detected capacity change from 0 to 512 [ 155.914747][T11387] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 155.945296][T11387] EXT4-fs (loop0): 1 truncate cleaned up [ 155.951808][T11393] loop3: detected capacity change from 0 to 512 [ 155.958884][T11387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.971907][T11393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 155.985010][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3037'. [ 155.995079][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.008543][T11393] EXT4-fs (loop3): 1 truncate cleaned up [ 156.016014][T11400] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11400 comm=syz.1.3037 [ 156.029228][T11393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.054697][T11405] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11405 comm=syz.2.3039 [ 156.186769][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.223820][T11418] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11418 comm=syz.1.3046 [ 156.259491][T11425] loop0: detected capacity change from 0 to 512 [ 156.267096][T11425] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 156.291446][T11425] EXT4-fs (loop0): 1 truncate cleaned up [ 156.338295][T11442] loop3: detected capacity change from 0 to 512 [ 156.339300][T11444] SELinux: failed to load policy [ 156.345337][T11442] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.361167][T11442] EXT4-fs (loop3): 1 truncate cleaned up [ 156.404536][T11449] 9pnet_fd: Insufficient options for proto=fd [ 156.413407][T11449] loop2: detected capacity change from 0 to 128 [ 156.427740][T11449] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.487131][T11460] loop0: detected capacity change from 0 to 512 [ 156.494912][T11460] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 156.523425][T11460] EXT4-fs (loop0): 1 truncate cleaned up [ 156.593663][T11479] loop3: detected capacity change from 0 to 512 [ 156.600822][T11479] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.610906][T11481] SELinux: failed to load policy [ 156.628690][T11479] EXT4-fs (loop3): 1 truncate cleaned up [ 156.742767][T11493] IPVS: Unknown mcast interface: vet [ 156.820384][T11500] IPVS: Error connecting to the multicast addr [ 156.937494][T11511] netem: unknown loss type 13 [ 156.942225][T11511] netem: change failed [ 156.954248][T11515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.963202][T11515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.979416][T11513] usb usb8: usbfs: process 11513 (syz.2.3086) did not claim interface 0 before use [ 157.115053][T11531] IPVS: Unknown mcast interface: vet [ 157.125432][T11519] lo speed is unknown, defaulting to 1000 [ 157.145473][T11533] loop1: detected capacity change from 0 to 512 [ 157.152465][T11533] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.164487][T11533] EXT4-fs (loop1): 1 truncate cleaned up [ 157.181037][ T5450] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.190880][ T5450] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.204499][T11519] chnl_net:caif_netlink_parms(): no params data found [ 157.240441][T11519] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.247601][T11519] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.254770][T11519] bridge_slave_0: entered allmulticast mode [ 157.261308][T11519] bridge_slave_0: entered promiscuous mode [ 157.267963][T11519] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.275098][T11519] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.282253][T11519] bridge_slave_1: entered allmulticast mode [ 157.288666][T11519] bridge_slave_1: entered promiscuous mode [ 157.300948][ T5450] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.310983][ T5450] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.328802][T11519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.339374][T11519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.358177][T11519] team0: Port device team_slave_0 added [ 157.364568][T11519] team0: Port device team_slave_1 added [ 157.380323][ T5450] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.390177][ T5450] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.399460][T11542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.408309][T11542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.416492][T11519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.423483][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.449409][T11519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.460614][T11519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.467554][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.493521][T11519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.521017][T11519] hsr_slave_0: entered promiscuous mode [ 157.526924][T11519] hsr_slave_1: entered promiscuous mode [ 157.532824][T11519] debugfs: 'hsr0' already exists in 'hsr' [ 157.538558][T11519] Cannot create hsr debugfs directory [ 157.544593][ T5450] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.554366][ T5450] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.615302][T11548] loop0: detected capacity change from 0 to 512 [ 157.622252][T11548] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.633350][T11548] EXT4-fs (loop0): 1 truncate cleaned up [ 157.861211][ T5450] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.870315][ T5450] bond_slave_0: left promiscuous mode [ 157.877984][ T5450] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.887040][ T5450] bond_slave_1: left promiscuous mode [ 157.893124][ T5450] $Hÿ (unregistering): Released all slaves [ 157.902996][ T5450] bond0 (unregistering): Released all slaves [ 157.910969][ T5450] bond1 (unregistering): Released all slaves [ 157.919117][ T5450] bond2 (unregistering): Released all slaves [ 157.926616][T11557] tipc: Enabling of bearer rejected, already enabled [ 157.932226][T11564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.942724][T11564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.954911][ T10] syû: Port: 1 Link DOWN [ 157.959037][T11558] tipc: Disabling bearer [ 157.983104][ T5450] tipc: Left network mode [ 157.988982][T11566] IPVS: Unknown mcast interface: vet [ 158.050054][ T5450] hsr_slave_0: left promiscuous mode [ 158.055277][T11577] loop4: detected capacity change from 0 to 512 [ 158.062429][ T5450] hsr_slave_1: left promiscuous mode [ 158.070008][ T5450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.077405][ T5450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.085318][T11577] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.095691][ T5450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.103093][ T5450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.104651][T11577] EXT4-fs (loop4): 1 truncate cleaned up [ 158.118778][ T5450] veth1_vlan: left promiscuous mode [ 158.243586][ T5450] team0 (unregistering): Port device team_slave_1 removed [ 158.257561][ T5450] team0 (unregistering): Port device team_slave_0 removed [ 158.284556][ T5453] smc: removing ib device syû [ 158.433698][T11519] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.453512][T11519] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.471579][T11519] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.485601][T11519] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.547467][T11519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.633735][T11519] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.646355][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.653453][ T5453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.664868][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.671973][ T5453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.724964][T11622] netem: unknown loss type 13 [ 158.729758][T11622] netem: change failed [ 158.782219][T11519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.809346][T11634] tipc: Enabling of bearer rejected, already enabled [ 158.888218][T11643] netem: unknown loss type 13 [ 158.892993][T11643] netem: change failed [ 158.914611][T11519] veth0_vlan: entered promiscuous mode [ 158.929181][T11519] veth1_vlan: entered promiscuous mode [ 158.943614][T11519] veth0_macvtap: entered promiscuous mode [ 158.951227][T11519] veth1_macvtap: entered promiscuous mode [ 158.961654][T11519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.973877][T11519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.990293][ T5454] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.049200][ T5454] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.082808][ T5454] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.091830][ T5454] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.150895][T11656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11656 comm=syz.2.3129 [ 159.353299][T11662] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.394996][T11664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11664 comm=syz.2.3133 [ 159.522855][T11671] tipc: Enabling of bearer rejected, failed to enable media [ 159.562331][T11674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.570992][T11674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.649224][T11678] __nla_validate_parse: 22 callbacks suppressed [ 159.649276][T11678] netlink: 76 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 159.681481][ T29] kauditd_printk_skb: 1945 callbacks suppressed [ 159.681495][ T29] audit: type=1326 audit(1763737156.918:23147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 159.710998][ T29] audit: type=1326 audit(1763737156.948:23148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 159.735421][ T29] audit: type=1326 audit(1763737156.948:23149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 159.758561][ T29] audit: type=1326 audit(1763737156.948:23150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 159.781611][ T29] audit: type=1326 audit(1763737156.948:23151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 159.804670][ T29] audit: type=1326 audit(1763737156.948:23152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 159.827629][ T29] audit: type=1326 audit(1763737156.948:23153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 159.850754][ T29] audit: type=1326 audit(1763737156.948:23154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 159.917897][ T29] audit: type=1326 audit(1763737157.048:23155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 159.941079][ T29] audit: type=1326 audit(1763737157.048:23156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11679 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 159.968051][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3140'. [ 159.977966][T11685] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11685 comm=syz.1.3140 [ 160.055644][T11688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.065113][T11688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.214655][T11697] lo speed is unknown, defaulting to 1000 [ 160.231615][T11707] lo: entered allmulticast mode [ 160.237993][T11707] tunl0: entered allmulticast mode [ 160.256578][T11707] gre0: entered allmulticast mode [ 160.267816][T11707] gretap0: entered allmulticast mode [ 160.275524][T11707] erspan0: entered allmulticast mode [ 160.282772][T11707] ip_vti0: entered allmulticast mode [ 160.289445][T11707] ip6_vti0: entered allmulticast mode [ 160.296239][T11707] sit0: entered allmulticast mode [ 160.303420][T11707] ip6tnl0: entered allmulticast mode [ 160.313985][T11707] ip6gre0: entered allmulticast mode [ 160.320934][T11707] syz_tun: entered allmulticast mode [ 160.327756][T11707] ip6gretap0: entered allmulticast mode [ 160.334979][T11707] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.342183][T11707] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.349739][T11707] bridge0: entered allmulticast mode [ 160.356374][T11707] vcan0: entered allmulticast mode [ 160.365655][T11707] bond0: entered allmulticast mode [ 160.370811][T11707] bond_slave_0: entered allmulticast mode [ 160.376586][T11707] bond_slave_1: entered allmulticast mode [ 160.383965][T11707] team0: entered allmulticast mode [ 160.389221][T11707] team_slave_0: entered allmulticast mode [ 160.395007][T11707] team_slave_1: entered allmulticast mode [ 160.402127][T11707] dummy0: entered allmulticast mode [ 160.409259][T11707] nlmon0: entered allmulticast mode [ 160.420984][T11709] loop4: detected capacity change from 0 to 512 [ 160.428187][T11709] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.438687][T11707] caif0: entered allmulticast mode [ 160.444126][T11707] batadv0: entered allmulticast mode [ 160.451184][T11707] vxcan0: entered allmulticast mode [ 160.457195][T11707] vxcan1: entered allmulticast mode [ 160.463443][T11707] veth0: entered allmulticast mode [ 160.469876][T11709] EXT4-fs (loop4): 1 truncate cleaned up [ 160.482858][T11707] veth1: entered allmulticast mode [ 160.490011][T11707] wg0: entered allmulticast mode [ 160.495943][T11707] wg1: entered allmulticast mode [ 160.502220][T11707] wg2: entered allmulticast mode [ 160.508097][T11707] veth0_to_bridge: entered allmulticast mode [ 160.517153][T11707] veth1_to_bridge: entered allmulticast mode [ 160.526216][T11707] veth0_to_bond: entered allmulticast mode [ 160.534826][T11707] veth1_to_bond: entered allmulticast mode [ 160.542432][T11707] veth0_to_team: entered allmulticast mode [ 160.551235][T11707] veth1_to_team: entered allmulticast mode [ 160.559380][T11707] veth0_to_batadv: entered allmulticast mode [ 160.566795][T11707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.574519][T11707] batadv_slave_0: entered allmulticast mode [ 160.581428][T11707] veth1_to_batadv: entered allmulticast mode [ 160.588357][T11707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.596033][T11707] batadv_slave_1: entered allmulticast mode [ 160.604066][T11707] xfrm0: entered allmulticast mode [ 160.610654][T11707] veth0_to_hsr: entered allmulticast mode [ 160.617590][T11707] hsr_slave_0: entered allmulticast mode [ 160.623890][T11707] veth1_to_hsr: entered allmulticast mode [ 160.630970][T11707] hsr_slave_1: entered allmulticast mode [ 160.637623][T11707] hsr0: entered allmulticast mode [ 160.644624][T11707] veth1_virt_wifi: entered allmulticast mode [ 160.651683][T11707] veth0_virt_wifi: entered allmulticast mode [ 160.674370][T11707] veth1_vlan: entered allmulticast mode [ 160.681200][T11707] veth0_vlan: entered allmulticast mode [ 160.690538][T11707] vlan0: entered allmulticast mode [ 160.695676][T11707] vlan1: entered allmulticast mode [ 160.701195][T11707] macvlan0: entered allmulticast mode [ 160.707433][T11707] macvlan1: entered allmulticast mode [ 160.713548][T11707] ipvlan0: entered allmulticast mode [ 160.719057][T11707] ipvlan1: entered allmulticast mode [ 160.724774][T11707] geneve0: entered allmulticast mode [ 160.731001][T11707] geneve1: entered allmulticast mode [ 160.737085][T11707] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 160.745166][T11707] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 160.753562][T11707] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 160.761851][T11707] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 160.769633][T11707] veth2: entered allmulticast mode [ 160.774848][T11707] veth3: entered allmulticast mode [ 160.780073][T11707] veth4: entered allmulticast mode [ 160.785321][T11707] veth5: entered allmulticast mode [ 160.790477][T11707] veth6: entered allmulticast mode [ 160.795588][T11707] veth7: entered allmulticast mode [ 160.800764][T11707] veth8: entered allmulticast mode [ 160.805882][T11707] veth9: entered allmulticast mode [ 160.827433][ T5447] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.839318][ T5447] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.849285][ T5447] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.858155][ T5447] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.906611][T11697] chnl_net:caif_netlink_parms(): no params data found [ 160.926996][T11720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3150'. [ 160.948709][T11720] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11720 comm=syz.1.3150 [ 160.985849][T11728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3152'. [ 160.996745][T11697] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.003882][T11697] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.011386][T11697] bridge_slave_0: entered allmulticast mode [ 161.017800][T11697] bridge_slave_0: entered promiscuous mode [ 161.022478][T11731] loop2: detected capacity change from 0 to 512 [ 161.030813][T11728] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11728 comm=syz.1.3152 [ 161.031198][T11697] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.050824][T11697] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.058436][T11731] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 161.068844][T11697] bridge_slave_1: entered allmulticast mode [ 161.077423][T11697] bridge_slave_1: entered promiscuous mode [ 161.084499][T11731] EXT4-fs (loop2): 1 truncate cleaned up [ 161.114274][T11697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.124947][T11697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.149679][T11697] team0: Port device team_slave_0 added [ 161.156302][T11697] team0: Port device team_slave_1 added [ 161.177428][T11697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.184410][T11697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.211996][T11697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.225381][T11662] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.237197][T11697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.244322][T11697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.270499][T11697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.304531][T11697] hsr_slave_0: entered promiscuous mode [ 161.310967][T11697] hsr_slave_1: entered promiscuous mode [ 161.329386][T11750] loop1: detected capacity change from 0 to 512 [ 161.336533][T11750] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 161.371326][T11750] EXT4-fs (loop1): 1 truncate cleaned up [ 161.510264][ T5447] .` (unregistering): Released all slaves [ 161.520825][ T5447] bond0 (unregistering): Released all slaves [ 161.609639][ T5447] tipc: Left network mode [ 161.618559][ T5447] hsr_slave_0: left promiscuous mode [ 161.624370][ T5447] hsr_slave_1: left promiscuous mode [ 161.631365][ T5447] batman_adv: batadv0: Removing interface: veth1_vlan [ 161.797012][T11756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3161'. [ 161.806063][T11756] IPVS: Unknown mcast interface: ip [ 161.963807][T11762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3164'. [ 161.973714][T11762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11762 comm=syz.2.3164 [ 162.087255][T11697] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.098111][T11697] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.107010][T11697] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.117440][T11776] loop1: detected capacity change from 0 to 512 [ 162.124304][T11697] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.124995][T11776] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.194377][T11776] EXT4-fs (loop1): 1 truncate cleaned up [ 162.228032][T11697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.240602][T11697] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.250333][ T5447] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.257387][ T5447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.291156][ T5450] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.298217][ T5450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.314663][T11697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.325069][T11697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.414275][T11697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.495233][T11810] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 162.503959][T11810] netlink: 60 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 162.519330][T11697] veth0_vlan: entered promiscuous mode [ 162.528443][T11697] veth1_vlan: entered promiscuous mode [ 162.542524][T11697] veth0_macvtap: entered promiscuous mode [ 162.549881][T11697] veth1_macvtap: entered promiscuous mode [ 162.559594][T11697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.568013][T11697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.591002][T11814] loop1: detected capacity change from 0 to 512 [ 162.606367][ T5450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.625464][T11814] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.640010][ T5453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.651319][ T5453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.662979][T11814] EXT4-fs (loop1): 1 truncate cleaned up [ 162.744038][ T5453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.499769][T11831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3183'. [ 163.525614][T11831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11831 comm=syz.0.3183 [ 163.544044][T11833] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11833 comm=syz.2.3184 [ 163.585938][T10483] EXT4-fs unmount: 25 callbacks suppressed [ 163.585951][T10483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.653733][T11848] loop4: detected capacity change from 0 to 512 [ 163.660996][T11848] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.672171][T11848] EXT4-fs (loop4): 1 truncate cleaned up [ 163.678254][T11848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.702487][T11662] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.723744][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.803011][T11662] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.839875][T11863] loop2: detected capacity change from 0 to 1764 [ 163.870550][T11866] loop1: detected capacity change from 0 to 1764 [ 163.893198][ T5447] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.903693][T11868] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11868 comm=syz.4.3198 [ 163.916828][T11866] FAULT_INJECTION: forcing a failure. [ 163.916828][T11866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.929900][T11866] CPU: 0 UID: 0 PID: 11866 Comm: syz.1.3197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.929944][T11866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.929954][T11866] Call Trace: [ 163.929960][T11866] [ 163.929966][T11866] __dump_stack+0x1d/0x30 [ 163.929987][T11866] dump_stack_lvl+0xe8/0x140 [ 163.930074][T11866] dump_stack+0x15/0x1b [ 163.930089][T11866] should_fail_ex+0x265/0x280 [ 163.930116][T11866] should_fail+0xb/0x20 [ 163.930130][T11866] should_fail_usercopy+0x1a/0x20 [ 163.930151][T11866] _copy_from_user+0x1c/0xb0 [ 163.930249][T11866] ___sys_sendmsg+0xc1/0x1d0 [ 163.930276][T11866] __x64_sys_sendmsg+0xd4/0x160 [ 163.930297][T11866] x64_sys_call+0x191e/0x3000 [ 163.930320][T11866] do_syscall_64+0xd2/0x200 [ 163.930341][T11866] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.930442][T11866] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.930475][T11866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.930496][T11866] RIP: 0033:0x7f819157f749 [ 163.930509][T11866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.930536][T11866] RSP: 002b:00007f818ffdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.930556][T11866] RAX: ffffffffffffffda RBX: 00007f81917d5fa0 RCX: 00007f819157f749 [ 163.930576][T11866] RDX: 0000000000040094 RSI: 0000200000006040 RDI: 0000000000000005 [ 163.930588][T11866] RBP: 00007f818ffdf090 R08: 0000000000000000 R09: 0000000000000000 [ 163.930598][T11866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.930608][T11866] R13: 00007f81917d6038 R14: 00007f81917d5fa0 R15: 00007ffd3eedc588 [ 163.930622][T11866] [ 163.954471][ T5447] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.109909][ T5447] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.118136][ T5447] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.131949][T11870] loop0: detected capacity change from 0 to 512 [ 164.149309][T11870] EXT4-fs: Invalid want_extra_isize 93 [ 164.157774][T11870] netlink: 660 bytes leftover after parsing attributes in process `syz.0.3200'. [ 164.178029][T11881] netem: change failed [ 164.190216][T11883] loop2: detected capacity change from 0 to 512 [ 164.200208][T11870] hsr_slave_1 (unregistering): left promiscuous mode [ 164.217162][T11883] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.228437][T11883] EXT4-fs (loop2): 1 truncate cleaned up [ 164.234500][T11883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.258380][T10233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.268099][T11888] loop3: detected capacity change from 0 to 512 [ 164.275234][T11888] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.292558][T11888] EXT4-fs (loop3): 1 truncate cleaned up [ 164.301212][T11891] tipc: New replicast peer: 255.255.255.255 [ 164.307265][T11891] tipc: Enabled bearer , priority 10 [ 164.314298][T11888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.330314][T11891] loop2: detected capacity change from 0 to 512 [ 164.337431][T11891] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 164.346276][T11891] EXT4-fs (loop2): failed to open journal device unknown-block(8,0) -16 [ 164.410321][T11519] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.450263][T11896] loop4: detected capacity change from 0 to 128 [ 164.464999][T11896] pim6reg: entered allmulticast mode [ 164.471290][T11896] pim6reg: left allmulticast mode [ 164.517640][T11900] loop3: detected capacity change from 0 to 164 [ 164.525843][T11900] Unable to read rock-ridge attributes [ 164.541673][T11897] tipc: Disabling bearer [ 164.623563][T11896] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 164.630185][T11896] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 164.637823][T11896] vhci_hcd vhci_hcd.0: Device attached [ 164.666084][T11916] syzkaller0: entered promiscuous mode [ 164.671596][T11916] syzkaller0: entered allmulticast mode [ 164.683514][T11916] FAULT_INJECTION: forcing a failure. [ 164.683514][T11916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.696592][T11916] CPU: 1 UID: 0 PID: 11916 Comm: syz.3.3215 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.696616][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.696627][T11916] Call Trace: [ 164.696632][T11916] [ 164.696638][T11916] __dump_stack+0x1d/0x30 [ 164.696772][T11916] dump_stack_lvl+0xe8/0x140 [ 164.696791][T11916] dump_stack+0x15/0x1b [ 164.696808][T11916] should_fail_ex+0x265/0x280 [ 164.696837][T11916] should_fail+0xb/0x20 [ 164.696850][T11916] should_fail_usercopy+0x1a/0x20 [ 164.696876][T11916] _copy_from_user+0x1c/0xb0 [ 164.696899][T11916] ___sys_recvmsg+0xaa/0x370 [ 164.696990][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 164.697002][ T29] audit: type=1326 audit(1763737161.928:23622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 164.696998][T11916] ? _parse_integer+0x27/0x40 [ 164.697053][T11916] do_recvmmsg+0x1ef/0x540 [ 164.697078][T11916] ? fput+0x8f/0xc0 [ 164.697085][ T29] ================================================================== [ 164.697097][T11916] __x64_sys_recvmmsg+0xe5/0x170 [ 164.697116][T11916] x64_sys_call+0x27aa/0x3000 [ 164.697136][T11916] do_syscall_64+0xd2/0x200 [ 164.697203][T11916] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.697229][T11916] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.697313][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.697333][T11916] RIP: 0033:0x7f34f090f749 [ 164.697347][T11916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.697364][T11916] RSP: 002b:00007f34ef36f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 164.697382][T11916] RAX: ffffffffffffffda RBX: 00007f34f0b65fa0 RCX: 00007f34f090f749 [ 164.697394][T11916] RDX: 0000000000000001 RSI: 0000200000001480 RDI: 0000000000000006 [ 164.697405][T11916] RBP: 00007f34ef36f090 R08: 0000000000000000 R09: 0000000000000000 [ 164.697460][T11916] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 164.697471][T11916] R13: 00007f34f0b66038 R14: 00007f34f0b65fa0 R15: 00007ffe49a069c8 [ 164.697490][T11916] [ 164.765018][ T29] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 164.765041][ T29] [ 164.765047][ T29] write to 0xffffffff88e514f0 of 8 bytes by task 11916 on cpu 1: [ 164.765061][ T29] data_alloc+0x1d5/0x2e0 [ 164.765075][ T29] prb_reserve+0x807/0xaf0 [ 164.765090][ T29] vprintk_store+0x56d/0x860 [ 164.765107][ T29] vprintk_emit+0x10d/0x580 [ 164.765125][ T29] vprintk_default+0x26/0x30 [ 164.765142][ T29] vprintk+0x1d/0x30 [ 164.765164][ T29] _printk+0x79/0xa0 [ 164.765187][ T29] show_trace_log_lvl+0x4e3/0x560 [ 164.765206][ T29] __dump_stack+0x1d/0x30 [ 164.765222][ T29] dump_stack_lvl+0xe8/0x140 [ 164.765237][ T29] dump_stack+0x15/0x1b [ 164.765251][ T29] should_fail_ex+0x265/0x280 [ 164.765276][ T29] should_fail+0xb/0x20 [ 164.765290][ T29] should_fail_usercopy+0x1a/0x20 [ 164.765306][ T29] _copy_from_user+0x1c/0xb0 [ 164.765326][ T29] ___sys_recvmsg+0xaa/0x370 [ 164.765342][ T29] do_recvmmsg+0x1ef/0x540 [ 164.765357][ T29] __x64_sys_recvmmsg+0xe5/0x170 [ 164.765373][ T29] x64_sys_call+0x27aa/0x3000 [ 164.765390][ T29] do_syscall_64+0xd2/0x200 [ 164.765408][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.765425][ T29] [ 164.765431][ T29] read to 0xffffffff88e514f0 of 8 bytes by task 29 on cpu 0: [ 164.765444][ T29] data_push_tail+0xfd/0x420 [ 164.765460][ T29] data_alloc+0xfb/0x2e0 [ 164.765474][ T29] prb_reserve+0x807/0xaf0 [ 164.765488][ T29] vprintk_store+0x56d/0x860 [ 164.765505][ T29] vprintk_emit+0x10d/0x580 [ 164.765522][ T29] vprintk_default+0x26/0x30 [ 164.765540][ T29] vprintk+0x1d/0x30 [ 164.765562][ T29] _printk+0x79/0xa0 [ 164.765583][ T29] kauditd_hold_skb+0x1b1/0x1c0 [ 164.765609][ T29] kauditd_send_queue+0x273/0x2c0 [ 164.765629][ T29] kauditd_thread+0x421/0x630 [ 164.765646][ T29] kthread+0x489/0x510 [ 164.765665][ T29] ret_from_fork+0x122/0x1b0 [ 164.765682][ T29] ret_from_fork_asm+0x1a/0x30 [ 164.765700][ T29] [ 164.765704][ T29] value changed: 0x00000000ffffeeb8 -> 0x00000000fffffb65 [ 164.765714][ T29] [ 164.765718][ T29] Reported by Kernel Concurrency Sanitizer on: [ 164.765729][ T29] CPU: 0 UID: 0 PID: 29 Comm: kauditd Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.765750][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.765761][ T29] ================================================================== [ 165.148001][ T29] audit: type=1326 audit(1763737161.928:23623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 165.171706][ T29] audit: type=1326 audit(1763737161.928:23624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 165.195332][ T29] audit: type=1326 audit(1763737161.928:23625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 165.218900][ T29] audit: type=1326 audit(1763737161.928:23626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 165.242519][ T29] audit: type=1326 audit(1763737161.928:23627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 165.266048][ T29] audit: type=1326 audit(1763737161.928:23628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 165.289582][ T29] audit: type=1326 audit(1763737161.928:23629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 165.313119][ T29] audit: type=1326 audit(1763737161.928:23630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 165.336726][ T29] audit: type=1326 audit(1763737161.928:23631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11917 comm="syz.2.3216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa0691f749 code=0x7ffc0000 [ 165.368625][T11913] vhci_hcd: connection closed [ 165.368866][ T5447] vhci_hcd: stop threads [ 165.377867][ T5447] vhci_hcd: release socket [ 165.382399][ T5447] vhci_hcd: disconnect device