last executing test programs: 1.87821196s ago: executing program 4 (id=3289): lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000340)=ANY=[], 0xfe37, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1ff) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x50, 0x0, &(0x7f0000000a80)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000083007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file2\x00') 1.680304509s ago: executing program 4 (id=3303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1, 0x0, 0x5}, 0x18) pselect6(0x0, 0x0, 0x0, &(0x7f0000000380)={0x9, 0x5, 0xfffffffffffffff8, 0x80, 0x98, 0x2, 0x5}, 0x0, &(0x7f0000000780)={0x0}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 1.616300791s ago: executing program 3 (id=3305): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:ck_exec_t:s0 /usr/sbin/cupn-browsed 0'], 0x4e) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000001d000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x42) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000005c0)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a11820fffff5bab1b590fff000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300ff168ef5dd000002100001000a0c10e1000000e6ff22", 0x58}], 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r5, &(0x7f0000000000), 0x0}, 0x20) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r9, 0x10f, 0x82, &(0x7f0000000700), &(0x7f0000000740)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x28, r8, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x401, 0x2a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r11, &(0x7f0000000440)=[{&(0x7f0000000600)=""/108, 0x6c}], 0x1, 0x8, 0xfd4c) 1.591190182s ago: executing program 3 (id=3309): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setreuid(0xee01, 0x0) r5 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}}, 0x20050800) bind$can_j1939(r0, &(0x7f0000000b80)={0x1d, 0x0, 0x3, {0x1, 0xff}, 0x1}, 0x18) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x7ffd, {0x2, 0xff, 0x2}, 0xfd}, 0x18) 1.590967653s ago: executing program 0 (id=3310): ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) 1.543954234s ago: executing program 0 (id=3311): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x4, 0x5, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfff5, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) (fail_nth: 2) 1.311456004s ago: executing program 3 (id=3313): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000100010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x4}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000140)=""/13, 0xd, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r5, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.262201816s ago: executing program 0 (id=3314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PID={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r12, 0x0, 0x7ff, 0x0) splice(r11, 0x0, 0xffffffffffffffff, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x190) r13 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r7, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_PID={0x8, 0x1c, r13}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x6c, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r14) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000000000000000047409062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f740e9830000800020000000000080004000000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) rename(0x0, 0x0) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r16}, 0x18) statfs(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000780)=""/171) 1.196233729s ago: executing program 3 (id=3317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 1.17798231s ago: executing program 3 (id=3319): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7ff, 0x0) splice(r2, 0x0, r1, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) 1.139676141s ago: executing program 0 (id=3322): ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) 1.078116814s ago: executing program 0 (id=3323): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0, 0x0, 0x8000000000000}, 0x9) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r7 = socket$l2tp(0x2, 0x2, 0x73) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) recvfrom$l2tp(r7, &(0x7f00000000c0)=""/132, 0x84, 0x40002122, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$eJzs3U1rXNUbAPDn3nb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7rykbzPNVJMMZH4/uNPn3Hub55yZzHkgZ5gTwNA6UT6kEc9HxEwSMd4+n0REpRkdjbjYuu/2rRvz5ZHE9vblP5LmPWU77vk/peMRsRURz0XET5WIU+nDeWsbmytzeZ6tt9uT9dW1ydrG5unl1bmlbCm7euHs2emz589duLB3Y33j/Q+erZ57Z+z7mcXZk1O/fpfExRhrX7t3HHup9ZxUyqfwPu/uR7IBSgbdAf6V8q15pPUuj2diPI40IwDgMNseidgGAIZMov4DwJDp/B2gs7a3X+tgvfz+dkSMdst/tL1mNtpchzx2O7lvZSKJiImD7CiH0tbNiLgyceLh37/koTXbx3VmLzrIvvqxnH8udpt/0p35J7rMP6Odz078R73nv7v5j/SY/2b6zPHei42iZ/6bES8c7ZY/2cmf9Mh/pc/8P9xZ+LvXte1vI17rWn+S+3L1/nzI5OJynp1pPXbPcaJx48NHjf9Yj/xbu4x/rc/xj3328s9bj8j/+iuPfv275S9r4qd95v+k8tYXva6V+Rd6jH+31/+bPvOff+mjzT5vBQAAAAAAAAAAAAAAAAAAAAAAAAAAgEMhjYixSNLqTpym1WprD++n41iaF7X6qcWicXUhmntlT0Ql7XzV8nirnZTtqfb38Xfa0w+034yIpyLi85H/N9vV+SJfGPTgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDt+AP7//810tr/HwA45EYH3QEA4MCp/wAwfNR/ABg+6j8ADB/1HwCGj/oPAMNH/QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggM1culQe27dv3Zgv2wvXNhorxbXTC1ltpbramK/OF+tr1aWiWMqz6nyxutvPy4tibXo6Gtcn61mtPlnb2JxdLRpX67PLq3NL2WxWOZBRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjGWseSVqNiLQZp2m1GvFERExEJVlczrMzEfFkRPwyUhkp21OD7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHaxubKXJ5n6wKBQLATDHpmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIN3d9PvQfcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYp/S2JiPI4Of7q2INX/5fcGWn+GxEff335y+tz9fr6VHn+z53z9a/a56cH0X8AYDedOt2p4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTW1jc2Uuz7P1fQwGPUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbOPwEAAP//vT/OxQ==") creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0}, 0x18) 914.771511ms ago: executing program 1 (id=3325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c180}, 0x24000080) tgkill(0x0, 0x0, 0x29) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000140), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="14"], &(0x7f0000001300), 0x600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 865.240763ms ago: executing program 1 (id=3326): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = io_uring_setup(0x330b, &(0x7f00000002c0)={0x0, 0xddb2, 0x1, 0x503fc, 0x8100014e}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (fail_nth: 1) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) 657.838622ms ago: executing program 1 (id=3327): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 641.639493ms ago: executing program 4 (id=3329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 605.290104ms ago: executing program 4 (id=3331): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 600.526875ms ago: executing program 1 (id=3333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000001000)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") creat(&(0x7f0000000080)='./file0\x00', 0x8d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105442, 0xf8) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 592.678215ms ago: executing program 4 (id=3334): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) 534.823607ms ago: executing program 1 (id=3335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = io_uring_setup(0x330b, &(0x7f00000002c0)={0x0, 0xddb2, 0x1, 0x503fc, 0x8100014e}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) 410.818473ms ago: executing program 1 (id=3336): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) r0 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd) fcntl$setlease(r4, 0x400, 0x0) close(r4) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000008c0)={0x53, 0x0, 0x6, 0x50, @buffer={0x0, 0x0, 0x0}, &(0x7f00000004c0)="a69992d0d847", 0x0, 0xfdfbfffe, 0x10033, 0x1, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r9, 0x29, 0xce, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x451e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f00000003c0), 0x1}, 0x88c7, 0x10000, 0x5, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r3, 0x2) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r10, @ANYRESDEC=r3], 0x34}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r10, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x9}}}, 0x44}}, 0x0) 291.889938ms ago: executing program 4 (id=3338): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 202.207991ms ago: executing program 3 (id=3339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x0}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 196.214052ms ago: executing program 0 (id=3340): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00'}, 0x18) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "794d63e80c0164a6", "35cf3e2c384b547c810772410a076670", "454f7b98", "fc562e29899b57cc"}, 0x28) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0'}, 0xb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) 185.960202ms ago: executing program 2 (id=3341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) execve(0x0, 0x0, 0x0) 96.276326ms ago: executing program 2 (id=3342): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e75"], 0x65) 95.808446ms ago: executing program 2 (id=3343): r0 = syz_open_dev$sg(0x0, 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 34.149569ms ago: executing program 2 (id=3344): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1000000000000}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005800800014000000000080002"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 33.983118ms ago: executing program 2 (id=3345): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000000c0)="1a000000820000", 0x7) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x1, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000980)="c8", 0x1, 0x1, &(0x7f0000000040)={0xa, 0x4e23, 0xe, @loopback, 0x8}, 0x1c) 0s ago: executing program 2 (id=3346): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1, 0x0, 0x8000000000000}, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) r8 = socket$l2tp(0x2, 0x2, 0x73) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r9, 0x1, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) recvfrom$l2tp(r8, &(0x7f00000000c0)=""/132, 0x84, 0x40002122, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$eJzs3U1rXNUbAPDn3nb+yb+NJoKKLyAVxYqlkya2lK6sC9FNMVBwm4bkJsTc9MbMTG1CF+nKrYii4Ea/gxtXims/gF9BQbTURV1F7rykbzPNVJMMZH4/uNPn3Hub55yZzHkgZ5gTwNA6UT6kEc9HxEwSMd4+n0REpRkdjbjYuu/2rRvz5ZHE9vblP5LmPWU77vk/peMRsRURz0XET5WIU+nDeWsbmytzeZ6tt9uT9dW1ydrG5unl1bmlbCm7euHs2emz589duLB3Y33j/Q+erZ57Z+z7mcXZk1O/fpfExRhrX7t3HHup9ZxUyqfwPu/uR7IBSgbdAf6V8q15pPUuj2diPI40IwDgMNseidgGAIZMov4DwJDp/B2gs7a3X+tgvfz+dkSMdst/tL1mNtpchzx2O7lvZSKJiImD7CiH0tbNiLgyceLh37/koTXbx3VmLzrIvvqxnH8udpt/0p35J7rMP6Odz078R73nv7v5j/SY/2b6zPHei42iZ/6bES8c7ZY/2cmf9Mh/pc/8P9xZ+LvXte1vI17rWn+S+3L1/nzI5OJynp1pPXbPcaJx48NHjf9Yj/xbu4x/rc/xj3328s9bj8j/+iuPfv275S9r4qd95v+k8tYXva6V+Rd6jH+31/+bPvOff+mjzT5vBQAAAAAAAAAAAAAAAAAAAAAAAAAAgEMhjYixSNLqTpym1WprD++n41iaF7X6qcWicXUhmntlT0Ql7XzV8nirnZTtqfb38Xfa0w+034yIpyLi85H/N9vV+SJfGPTgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDt+AP7//810tr/HwA45EYH3QEA4MCp/wAwfNR/ABg+6j8ADB/1HwCGj/oPAMNH/QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADggM1culQe27dv3Zgv2wvXNhorxbXTC1ltpbramK/OF+tr1aWiWMqz6nyxutvPy4tibXo6Gtcn61mtPlnb2JxdLRpX67PLq3NL2WxWOZBRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDjGWseSVqNiLQZp2m1GvFERExEJVlczrMzEfFkRPwyUhkp21OD7jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHaxubKXJ5n6wKBQLATDHpmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIN3d9PvQfcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYp/S2JiPI4Of7q2INX/5fcGWn+GxEff335y+tz9fr6VHn+z53z9a/a56cH0X8AYDedOt2p4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQTW1jc2Uuz7P1fQwGPUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbOPwEAAP//vT/OxQ==") creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0}, 0x18) kernel console output (not intermixed with test programs): 6 audit(1764885220.736:37789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 170.614019][ T29] audit: type=1326 audit(1764885220.783:37790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 170.637778][ T29] audit: type=1326 audit(1764885220.783:37791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 170.693754][T10578] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 170.731913][T10578] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2511: bg 0: block 248: padding at end of block bitmap is not set [ 170.748564][T10578] Quota error (device loop0): write_blk: dquota write failed [ 170.756074][T10578] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 170.766252][T10578] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2511: Failed to acquire dquot type 1 [ 170.786621][T10578] EXT4-fs (loop0): 1 truncate cleaned up [ 170.795790][T10578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 170.822333][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 170.965672][T10621] EXT4-fs: Ignoring removed bh option [ 170.999555][T10627] SELinux: security_context_str_to_sid (ٺ Ն [ 176.444263][T11052] __dump_stack+0x1d/0x30 [ 176.444293][T11052] dump_stack_lvl+0xe8/0x140 [ 176.444367][T11052] dump_stack+0x15/0x1b [ 176.444383][T11052] should_fail_ex+0x265/0x280 [ 176.444461][T11052] should_fail+0xb/0x20 [ 176.444507][T11052] should_fail_usercopy+0x1a/0x20 [ 176.444524][T11052] _copy_to_user+0x20/0xa0 [ 176.444545][T11052] simple_read_from_buffer+0xb5/0x130 [ 176.444574][T11052] proc_fail_nth_read+0x10e/0x150 [ 176.444616][T11052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 176.444718][T11052] vfs_read+0x1a8/0x770 [ 176.444744][T11052] ? lockref_put_return+0xf7/0x130 [ 176.444763][T11052] ? __rcu_read_unlock+0x4f/0x70 [ 176.444844][T11052] ? __fget_files+0x184/0x1c0 [ 176.444860][T11052] ? mutex_lock+0x58/0x90 [ 176.444883][T11052] ksys_read+0xda/0x1a0 [ 176.444911][T11052] __x64_sys_read+0x40/0x50 [ 176.444951][T11052] x64_sys_call+0x2889/0x3000 [ 176.444982][T11052] do_syscall_64+0xd8/0x2a0 [ 176.445010][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.445030][T11052] RIP: 0033:0x7fc55894e15c [ 176.445044][T11052] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 176.445060][T11052] RSP: 002b:00007fc5573b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.445151][T11052] RAX: ffffffffffffffda RBX: 00007fc558ba5fa0 RCX: 00007fc55894e15c [ 176.445162][T11052] RDX: 000000000000000f RSI: 00007fc5573b70a0 RDI: 0000000000000003 [ 176.445173][T11052] RBP: 00007fc5573b7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.445185][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.445255][T11052] R13: 00007fc558ba6038 R14: 00007fc558ba5fa0 R15: 00007ffe81db9958 [ 176.445281][T11052] [ 176.684410][T11056] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 176.693911][T11056] SELinux: failed to load policy [ 176.705547][T11058] EXT4-fs: Ignoring removed bh option [ 176.720400][T11058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.746767][ T3334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.022538][T11094] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 177.033094][T11094] SELinux: failed to load policy [ 177.040578][T11095] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 177.104794][T11099] EXT4-fs: Ignoring removed bh option [ 177.112241][T11090] unsupported nla_type 52263 [ 177.146750][T11099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.214960][T11108] EXT4-fs: Ignoring removed orlov option [ 177.238777][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.283800][T11108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.296436][T11119] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.317286][T11119] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 177.333137][T11119] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2717: bg 0: block 248: padding at end of block bitmap is not set [ 177.347716][T11119] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2717: Failed to acquire dquot type 1 [ 177.357999][T11128] EXT4-fs: Ignoring removed orlov option [ 177.359909][T11119] EXT4-fs (loop2): 1 truncate cleaned up [ 177.371475][T11119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 177.393056][T11130] SELinux: policydb table sizes (0,7) do not match mine (8,7) [ 177.401723][T11130] SELinux: failed to load policy [ 177.402155][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 177.441329][T11134] netlink: 'syz.0.2722': attribute type 5 has an invalid length. [ 177.456355][T11128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.541304][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.627924][T11154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.681000][T11156] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.720342][T11161] SELinux: failed to load policy [ 177.734480][T11156] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 177.781189][T11156] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2731: bg 0: block 248: padding at end of block bitmap is not set [ 177.796823][T11156] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2731: Failed to acquire dquot type 1 [ 177.808826][T11156] EXT4-fs (loop0): 1 truncate cleaned up [ 177.815182][T11156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 177.837688][T11161] EXT4-fs (loop3): 1 orphan inode deleted [ 177.843976][ T31] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 177.858173][T11161] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.968601][T11172] atomic_op ffff88812843ad28 conn xmit_atomic 0000000000000000 [ 178.012391][T11176] FAULT_INJECTION: forcing a failure. [ 178.012391][T11176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.025606][T11176] CPU: 1 UID: 0 PID: 11176 Comm: syz.3.2737 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.025649][T11176] Tainted: [W]=WARN [ 178.025658][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.025695][T11176] Call Trace: [ 178.025701][T11176] [ 178.025709][T11176] __dump_stack+0x1d/0x30 [ 178.025773][T11176] dump_stack_lvl+0xe8/0x140 [ 178.025830][T11176] dump_stack+0x15/0x1b [ 178.025857][T11176] should_fail_ex+0x265/0x280 [ 178.025903][T11176] should_fail+0xb/0x20 [ 178.025937][T11176] should_fail_usercopy+0x1a/0x20 [ 178.026025][T11176] _copy_from_user+0x1c/0xb0 [ 178.026050][T11176] __copy_msghdr+0x244/0x300 [ 178.026079][T11176] ___sys_sendmsg+0x109/0x1d0 [ 178.026132][T11176] __x64_sys_sendmsg+0xd4/0x160 [ 178.026320][T11176] x64_sys_call+0x17ba/0x3000 [ 178.026352][T11176] do_syscall_64+0xd8/0x2a0 [ 178.026392][T11176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.026421][T11176] RIP: 0033:0x7f7aa006f749 [ 178.026440][T11176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.026538][T11176] RSP: 002b:00007f7a9ead7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.026563][T11176] RAX: ffffffffffffffda RBX: 00007f7aa02c5fa0 RCX: 00007f7aa006f749 [ 178.026580][T11176] RDX: 0000000000000000 RSI: 0000200000001d00 RDI: 0000000000000004 [ 178.026650][T11176] RBP: 00007f7a9ead7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.026666][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.026683][T11176] R13: 00007f7aa02c6038 R14: 00007f7aa02c5fa0 R15: 00007ffd68f2a058 [ 178.026708][T11176] [ 178.226583][T11179] SELinux: failed to load policy [ 178.235646][T11179] set_capacity_and_notify: 7 callbacks suppressed [ 178.235663][T11179] loop3: detected capacity change from 0 to 512 [ 178.260244][T11179] EXT4-fs (loop3): 1 orphan inode deleted [ 178.260795][T11181] loop4: detected capacity change from 0 to 1024 [ 178.272827][T11179] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.283656][ T37] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 178.287363][T11181] EXT4-fs: Ignoring removed orlov option [ 178.448842][T11191] lo speed is unknown, defaulting to 1000 [ 178.460429][T11193] atomic_op ffff88811a527d28 conn xmit_atomic 0000000000000000 [ 178.491772][T11194] netlink: 'syz.3.2743': attribute type 3 has an invalid length. [ 178.499751][T11194] netlink: 'syz.3.2743': attribute type 1 has an invalid length. [ 178.570935][T11205] netlink: 'syz.2.2747': attribute type 5 has an invalid length. [ 178.715091][T11221] loop3: detected capacity change from 0 to 1024 [ 178.728787][T11223] SELinux: security_context_str_to_sid (IaLZ~Sz~H~AZT!wl)[vA[8`(r&nsdωHQkIV ֿ@Շǔ5E5FIT=., v# ¥-) failed with errno=-22 [ 178.805311][T11221] EXT4-fs: Ignoring removed orlov option [ 178.962937][T11246] lo speed is unknown, defaulting to 1000 [ 179.017776][T11251] netlink: 'syz.1.2767': attribute type 3 has an invalid length. [ 179.025578][T11251] netlink: 'syz.1.2767': attribute type 1 has an invalid length. [ 179.035418][T11254] netlink: 'syz.0.2770': attribute type 5 has an invalid length. [ 179.265032][T11265] SELinux: failed to load policy [ 179.284332][T11265] loop4: detected capacity change from 0 to 512 [ 179.320203][T11265] EXT4-fs (loop4): 1 orphan inode deleted [ 179.343269][ T37] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 179.364581][T11265] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.649875][T11294] lo speed is unknown, defaulting to 1000 [ 179.685334][T11297] __nla_validate_parse: 53 callbacks suppressed [ 179.685361][T11297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2788'. [ 179.702490][T11299] netlink: 'syz.3.2787': attribute type 3 has an invalid length. [ 179.710280][T11299] netlink: 'syz.3.2787': attribute type 1 has an invalid length. [ 179.710508][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 179.718173][T11299] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2787'. [ 179.784752][T11304] SELinux: failed to load policy [ 179.793804][T11304] loop2: detected capacity change from 0 to 512 [ 179.838550][T11304] EXT4-fs (loop2): 1 orphan inode deleted [ 179.848538][T11304] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.859294][ T37] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 179.898786][T11313] loop4: detected capacity change from 0 to 512 [ 179.914968][T11313] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.950154][T11316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2794'. [ 179.961777][T11313] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 179.977304][T11311] bridge0: entered promiscuous mode [ 179.996585][T11311] bridge0: port 3(macsec1) entered blocking state [ 180.004741][T11311] bridge0: port 3(macsec1) entered disabled state [ 180.009968][T11313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2793: bg 0: block 248: padding at end of block bitmap is not set [ 180.019584][T11311] macsec1: entered allmulticast mode [ 180.033138][T11311] bridge0: entered allmulticast mode [ 180.043968][T11313] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2793: Failed to acquire dquot type 1 [ 180.057182][T11320] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2795'. [ 180.062535][T11311] macsec1: left allmulticast mode [ 180.066317][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 180.082296][T11311] bridge0: left allmulticast mode [ 180.091987][T11313] EXT4-fs (loop4): 1 truncate cleaned up [ 180.099465][T11311] bridge0: left promiscuous mode [ 180.155808][T11320] 8021q: VLANs not supported on ip_vti0 [ 180.279897][T11339] loop2: detected capacity change from 0 to 512 [ 180.313127][T11339] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 180.321164][T11339] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 180.333292][T11339] EXT4-fs (loop2): orphan cleanup on readonly fs [ 180.339790][T11339] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.2803: iget: bad i_size value: 12154761577498 [ 180.362068][T11339] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2803: couldn't read orphan inode 13 (err -117) [ 180.433975][T11357] loop2: detected capacity change from 0 to 512 [ 180.444870][T11357] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.504343][T11363] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2809'. [ 180.523041][T11357] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 180.538403][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2809'. [ 180.539399][T11366] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2802'. [ 180.556732][T11357] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2806: bg 0: block 248: padding at end of block bitmap is not set [ 180.557161][T11357] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2806: Failed to acquire dquot type 1 [ 180.586446][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2802'. [ 180.609417][T11363] 8021q: VLANs not supported on ip_vti0 [ 180.780780][T11357] EXT4-fs (loop2): 1 truncate cleaned up [ 180.955737][T11391] 8021q: VLANs not supported on ip_vti0 [ 181.281417][T11408] loop0: detected capacity change from 0 to 128 [ 181.495054][T11421] loop3: detected capacity change from 0 to 1024 [ 181.502614][T11421] EXT4-fs: Ignoring removed orlov option [ 181.533609][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 181.533663][ T29] audit: type=1326 audit(1764885231.064:40883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 181.563894][ T29] audit: type=1326 audit(1764885231.064:40884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 181.587581][ T29] audit: type=1326 audit(1764885231.064:40885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 181.611325][ T29] audit: type=1326 audit(1764885231.064:40886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 181.634944][ T29] audit: type=1326 audit(1764885231.064:40887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 181.658667][ T29] audit: type=1326 audit(1764885231.064:40888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 181.682324][ T29] audit: type=1326 audit(1764885231.064:40889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 181.706000][ T29] audit: type=1326 audit(1764885231.064:40890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7aa006df90 code=0x7ffc0000 [ 181.729979][ T29] audit: type=1326 audit(1764885231.064:40891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f7aa0070f77 code=0x7ffc0000 [ 181.753939][ T29] audit: type=1326 audit(1764885231.064:40892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 181.793787][T11429] netlink: 'syz.4.2835': attribute type 7 has an invalid length. [ 181.882801][T11439] EXT4-fs: Ignoring removed i_version option [ 181.904692][T11439] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.945287][T11450] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 181.964492][T11450] EXT4-fs: Ignoring removed bh option [ 181.982085][T11450] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #12: comm syz.2.2844: corrupted in-inode xattr: e_name out of bounds [ 182.006197][T11450] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 182.021479][T11450] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 201 with error 28 [ 182.034140][T11450] EXT4-fs (loop2): This should not happen!! Data will be lost [ 182.034140][T11450] [ 182.043835][T11450] EXT4-fs (loop2): Total free blocks count 0 [ 182.049841][T11450] EXT4-fs (loop2): Free/Dirty block details [ 182.055846][T11450] EXT4-fs (loop2): free_blocks=2415919104 [ 182.061628][T11450] EXT4-fs (loop2): dirty_blocks=208 [ 182.066906][T11450] EXT4-fs (loop2): Block reservation details [ 182.073165][T11450] EXT4-fs (loop2): i_reserved_data_blocks=13 [ 182.249115][T11486] 8021q: VLANs not supported on ip_vti0 [ 182.279420][T11488] EXT4-fs: Ignoring removed orlov option [ 182.296922][T11491] SELinux: security_context_str_to_sid (-q]cژA5vvh\$s$?|ݬKA,H^:uM+) failed with errno=-22 [ 182.963233][T11509] lo speed is unknown, defaulting to 1000 [ 183.073815][T11523] bridge0: entered promiscuous mode [ 183.132223][T11523] bridge0: port 3(macsec1) entered blocking state [ 183.139904][T11523] bridge0: port 3(macsec1) entered disabled state [ 183.177708][T11523] macsec1: entered allmulticast mode [ 183.183566][T11523] bridge0: entered allmulticast mode [ 183.200913][T11523] macsec1: left allmulticast mode [ 183.217045][T11523] bridge0: left allmulticast mode [ 183.229702][T11523] bridge0: left promiscuous mode [ 183.391748][T11509] chnl_net:caif_netlink_parms(): no params data found [ 183.456341][T11509] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.463567][T11509] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.471093][T11509] bridge_slave_0: entered allmulticast mode [ 183.478262][T11509] bridge_slave_0: entered promiscuous mode [ 183.486552][T11509] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.493783][T11509] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.502378][T11509] bridge_slave_1: entered allmulticast mode [ 183.509371][T11509] bridge_slave_1: entered promiscuous mode [ 183.539598][T11509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.552856][T11509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.588734][T11509] team0: Port device team_slave_0 added [ 183.599743][T11509] team0: Port device team_slave_1 added [ 183.628120][T11509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.635260][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.646473][T11563] set_capacity_and_notify: 4 callbacks suppressed [ 183.646498][T11563] loop3: detected capacity change from 0 to 128 [ 183.661231][T11509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.669634][T11509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.692306][T11509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.702660][T11566] netlink: 'syz.2.2890': attribute type 7 has an invalid length. [ 183.718461][T11509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.749168][T11509] hsr_slave_0: entered promiscuous mode [ 183.755464][T11509] hsr_slave_1: entered promiscuous mode [ 183.761888][T11509] debugfs: 'hsr0' already exists in 'hsr' [ 183.767733][T11509] Cannot create hsr debugfs directory [ 183.814587][ T53] bridge_slave_1: left allmulticast mode [ 183.820424][ T53] bridge_slave_1: left promiscuous mode [ 183.826182][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.826302][T11571] loop2: detected capacity change from 0 to 2048 [ 183.840028][T11570] Invalid logical block size (32768) [ 183.840679][T11571] EXT4-fs: Ignoring removed i_version option [ 183.845773][ T53] bridge_slave_0: left allmulticast mode [ 183.857623][ T53] bridge_slave_0: left promiscuous mode [ 183.863603][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.890739][T11571] ext4 filesystem being mounted at /597/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.959122][ T53] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.968063][ T53] bond_slave_0: left promiscuous mode [ 183.974790][ T53] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.984068][ T53] bond_slave_1: left promiscuous mode [ 183.989938][ T53] $H (unregistering): Released all slaves [ 184.063302][ T53] hsr_slave_0: left promiscuous mode [ 184.069303][ T53] hsr_slave_1: left promiscuous mode [ 184.075166][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.085053][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.149435][ T53] team0 (unregistering): Port device team_slave_1 removed [ 184.160392][ T53] team0 (unregistering): Port device team_slave_0 removed [ 184.307987][T11593] SELinux: security_context_str_to_sid (7h*௝Ixmm;`@, 1YGjKwe`\c=XǏ|Mp%C,-(88LҐQ [ 186.855187][ T837] tipc: Left network mode [ 186.856470][T11681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.861309][T11768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 186.866700][T11681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.903488][T11681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.929888][T11759] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2950'. [ 186.932298][T11681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.946332][T11681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 186.970813][ T29] kauditd_printk_skb: 623 callbacks suppressed [ 186.970835][ T29] audit: type=1326 audit(1764885236.125:41514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11775 comm="syz.4.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11968f749 code=0x7ffc0000 [ 186.973192][T11681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.016570][ T29] audit: type=1326 audit(1764885236.163:41515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11775 comm="syz.4.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc11968f749 code=0x7ffc0000 [ 187.022852][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2950'. [ 187.040391][ T29] audit: type=1326 audit(1764885236.163:41516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11775 comm="syz.4.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11968f749 code=0x7ffc0000 [ 187.073251][ T29] audit: type=1326 audit(1764885236.163:41517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11775 comm="syz.4.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc11968f749 code=0x7ffc0000 [ 187.096887][ T29] audit: type=1326 audit(1764885236.163:41518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11775 comm="syz.4.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11968f749 code=0x7ffc0000 [ 187.123438][ T837] hsr_slave_0: left promiscuous mode [ 187.135474][T11779] netlink: 'syz.4.2958': attribute type 7 has an invalid length. [ 187.143408][ T837] hsr_slave_1: left promiscuous mode [ 187.158961][ T837] veth1_macvtap: left promiscuous mode [ 187.164910][ T837] veth0_macvtap: left promiscuous mode [ 187.171121][ T837] veth1_vlan: left promiscuous mode [ 187.176825][ T837] veth0_vlan: left promiscuous mode [ 187.192904][ T29] audit: type=1326 audit(1764885236.359:41519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.1.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777de1f749 code=0x7ffc0000 [ 187.218102][ T29] audit: type=1326 audit(1764885236.359:41520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.1.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777de1f749 code=0x7ffc0000 [ 187.241853][ T29] audit: type=1326 audit(1764885236.359:41521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.1.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777de1f749 code=0x7ffc0000 [ 187.265642][ T29] audit: type=1326 audit(1764885236.359:41522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.1.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f777de1f749 code=0x7ffc0000 [ 187.289499][ T29] audit: type=1326 audit(1764885236.359:41523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11785 comm="syz.1.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777de1f749 code=0x7ffc0000 [ 187.344087][T11789] loop0: detected capacity change from 0 to 2048 [ 187.362123][T11789] EXT4-fs: Ignoring removed bh option [ 187.386885][T11791] loop4: detected capacity change from 0 to 2048 [ 187.393639][T11791] EXT4-fs: Ignoring removed i_version option [ 187.400562][T11789] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #12: comm syz.0.2962: corrupted in-inode xattr: e_name out of bounds [ 187.415767][ T837] team0 (unregistering): Port device team_slave_1 removed [ 187.431713][T11789] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.450892][T11789] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 201 with error 28 [ 187.451441][ T837] team0 (unregistering): Port device team_slave_0 removed [ 187.463355][T11789] EXT4-fs (loop0): This should not happen!! Data will be lost [ 187.463355][T11789] [ 187.480493][T11789] EXT4-fs (loop0): Total free blocks count 0 [ 187.486661][T11789] EXT4-fs (loop0): Free/Dirty block details [ 187.492708][T11789] EXT4-fs (loop0): free_blocks=2415919104 [ 187.498716][T11789] EXT4-fs (loop0): dirty_blocks=208 [ 187.504183][T11789] EXT4-fs (loop0): Block reservation details [ 187.510274][T11789] EXT4-fs (loop0): i_reserved_data_blocks=13 [ 187.547065][T11791] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.548695][T11681] hsr_slave_0: entered promiscuous mode [ 187.570383][T11681] hsr_slave_1: entered promiscuous mode [ 187.581023][T11681] debugfs: 'hsr0' already exists in 'hsr' [ 187.587533][T11681] Cannot create hsr debugfs directory [ 187.795143][T11827] 8021q: VLANs not supported on ip_vti0 [ 187.801335][T11825] EXT4-fs: Ignoring removed orlov option [ 187.935520][T11681] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 187.960989][T11681] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 187.993563][T11681] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.014756][T11681] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.101000][T11681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.115420][T11681] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.125738][ T837] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.133094][ T837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.176525][ T837] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.183708][ T837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.228623][T11681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 188.239075][T11681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.344488][T11681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.370542][T11872] netlink: 'syz.0.2992': attribute type 7 has an invalid length. [ 188.376187][T11870] EXT4-fs: Ignoring removed orlov option [ 188.641042][T11880] EXT4-fs: Ignoring removed i_version option [ 188.683841][T11880] ext4 filesystem being mounted at /601/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.705646][T11681] veth0_vlan: entered promiscuous mode [ 188.732504][T11681] veth1_vlan: entered promiscuous mode [ 188.773908][T11681] veth0_macvtap: entered promiscuous mode [ 188.792650][T11681] veth1_macvtap: entered promiscuous mode [ 188.830499][T11681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.856025][T11681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.877704][ T1703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.903537][ T1703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.919442][ T1703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.941712][ T1703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.121177][T11908] set_capacity_and_notify: 4 callbacks suppressed [ 189.121245][T11908] loop3: detected capacity change from 0 to 1024 [ 189.123401][T11912] $H: renamed from bond0 (while UP) [ 189.142223][T11912] $H: entered promiscuous mode [ 189.147318][T11912] bond_slave_0: entered promiscuous mode [ 189.149795][T11908] EXT4-fs: Ignoring removed orlov option [ 189.153237][T11912] bond_slave_1: entered promiscuous mode [ 189.181370][T11910] tipc: Started in network mode [ 189.186296][T11910] tipc: Node identity 2a2a93b28ac5, cluster identity 4711 [ 189.193657][T11910] tipc: Enabled bearer , priority 0 [ 189.215256][ T1703] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.228257][T11910] syzkaller0: entered promiscuous mode [ 189.233864][T11910] syzkaller0: entered allmulticast mode [ 189.267120][ T1703] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.286537][T11921] loop4: detected capacity change from 0 to 1024 [ 189.302661][T11910] tipc: Resetting bearer [ 189.310188][T11907] tipc: Resetting bearer [ 189.325373][T11907] tipc: Disabling bearer [ 189.331812][T11921] EXT4-fs: Ignoring removed orlov option [ 189.351218][T11903] lo speed is unknown, defaulting to 1000 [ 189.359803][ T1703] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.460112][ T1703] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.553855][T11903] chnl_net:caif_netlink_parms(): no params data found [ 190.072553][ T1703] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.081725][ T1703] bond_slave_0: left promiscuous mode [ 190.089062][ T1703] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.099896][ T1703] bond_slave_1: left promiscuous mode [ 190.113905][ T1703] $H (unregistering): Released all slaves [ 190.148046][T11943] 8021q: VLANs not supported on ip_vti0 [ 190.166082][ T1703] tipc: Left network mode [ 190.298187][T11953] bridge0: entered promiscuous mode [ 190.314585][T11953] bridge0: port 3(macsec1) entered blocking state [ 190.321649][T11953] bridge0: port 3(macsec1) entered disabled state [ 190.334162][T11953] macsec1: entered allmulticast mode [ 190.340456][T11953] bridge0: entered allmulticast mode [ 190.354533][T11953] macsec1: left allmulticast mode [ 190.362570][T11953] bridge0: left allmulticast mode [ 190.385400][T11953] bridge0: left promiscuous mode [ 190.423019][T11964] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 190.439474][T11966] loop2: detected capacity change from 0 to 128 [ 190.518700][T11903] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.525829][T11903] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.533881][T11903] bridge_slave_0: entered allmulticast mode [ 190.541231][T11903] bridge_slave_0: entered promiscuous mode [ 190.566448][T11969] SELinux: security_context_str_to_sid (JI+AX\l5܂O2+yEJ43>@I!'+Gh 86 Tf{ⰱP, priority 0 [ 192.043921][T12014] syzkaller0: entered promiscuous mode [ 192.049479][T12014] syzkaller0: entered allmulticast mode [ 192.100090][T12014] tipc: Resetting bearer [ 192.110661][T12013] tipc: Resetting bearer [ 192.132780][T12013] tipc: Disabling bearer [ 192.164121][T11903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.212534][T11903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.223199][T11903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.250903][T11903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.271196][T12019] tipc: Started in network mode [ 192.276254][T12019] tipc: Node identity 9e8951847855, cluster identity 4711 [ 192.283594][T12019] tipc: Enabled bearer , priority 0 [ 192.316624][T12025] loop3: detected capacity change from 0 to 2048 [ 192.325439][T12019] syzkaller0: entered promiscuous mode [ 192.330977][T12019] syzkaller0: entered allmulticast mode [ 192.337180][T12025] EXT4-fs: Ignoring removed bh option [ 192.359944][T12019] tipc: Resetting bearer [ 192.369997][T12025] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #12: comm syz.3.3040: corrupted in-inode xattr: e_name out of bounds [ 192.385070][T12016] tipc: Resetting bearer [ 192.403337][T12016] tipc: Disabling bearer [ 192.415487][T12025] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 192.432629][T12025] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 201 with error 28 [ 192.445151][T12025] EXT4-fs (loop3): This should not happen!! Data will be lost [ 192.445151][T12025] [ 192.454893][T12025] EXT4-fs (loop3): Total free blocks count 0 [ 192.461384][T12025] EXT4-fs (loop3): Free/Dirty block details [ 192.467416][T12025] EXT4-fs (loop3): free_blocks=2415919104 [ 192.473170][T12025] EXT4-fs (loop3): dirty_blocks=208 [ 192.478437][T12025] EXT4-fs (loop3): Block reservation details [ 192.484500][T12025] EXT4-fs (loop3): i_reserved_data_blocks=13 [ 192.543785][T11903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.570453][T11903] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.582425][T12041] lo speed is unknown, defaulting to 1000 [ 192.593052][ T837] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.600361][ T837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.631481][ T837] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.638661][ T837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.700737][T11903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.713923][T12042] netlink: 'syz.0.3043': attribute type 3 has an invalid length. [ 192.721934][T12042] netlink: 'syz.0.3043': attribute type 1 has an invalid length. [ 192.730431][T12042] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3043'. [ 192.912612][T11903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.938493][ T29] kauditd_printk_skb: 1146 callbacks suppressed [ 192.938509][ T29] audit: type=1326 audit(1764885241.738:42669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16403f749 code=0x7ffc0000 [ 192.997148][T12055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.028601][ T29] audit: type=1326 audit(1764885241.766:42670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16403f749 code=0x7ffc0000 [ 193.052544][ T29] audit: type=1326 audit(1764885241.766:42671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb16403f749 code=0x7ffc0000 [ 193.076731][ T29] audit: type=1326 audit(1764885241.766:42672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16403f749 code=0x7ffc0000 [ 193.098906][T11903] veth0_vlan: entered promiscuous mode [ 193.100881][ T29] audit: type=1326 audit(1764885241.766:42673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16403f749 code=0x7ffc0000 [ 193.129931][ T29] audit: type=1326 audit(1764885241.766:42674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb16403f749 code=0x7ffc0000 [ 193.137616][T11903] veth1_vlan: entered promiscuous mode [ 193.153632][ T29] audit: type=1326 audit(1764885241.766:42675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16403f749 code=0x7ffc0000 [ 193.182787][ T29] audit: type=1326 audit(1764885241.776:42676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12048 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16403f749 code=0x7ffc0000 [ 193.225638][T12066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.247545][T11903] veth0_macvtap: entered promiscuous mode [ 193.255834][T11903] veth1_macvtap: entered promiscuous mode [ 193.276252][T11903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.290654][T11903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.311635][ T837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.327296][ T837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.344100][T12072] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 193.352693][T12070] bridge0: entered promiscuous mode [ 193.359992][T12070] bridge0: port 3(macsec1) entered blocking state [ 193.366662][T12070] bridge0: port 3(macsec1) entered disabled state [ 193.373694][T12072] SELinux: failed to load policy [ 193.382229][T12072] loop0: detected capacity change from 0 to 512 [ 193.389055][T12070] macsec1: entered allmulticast mode [ 193.394642][T12070] bridge0: entered allmulticast mode [ 193.401711][T12070] macsec1: left allmulticast mode [ 193.407040][T12070] bridge0: left allmulticast mode [ 193.413408][T12070] bridge0: left promiscuous mode [ 193.415280][T12072] EXT4-fs (loop0): 1 orphan inode deleted [ 193.425237][ T850] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 193.435102][ T850] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 193.447944][ T837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.474339][ T837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.493991][T12072] ext4 filesystem being mounted at /616/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.539318][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3000'. [ 193.566864][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3056'. [ 193.575962][T12084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3056'. [ 193.840977][T12094] lo speed is unknown, defaulting to 1000 [ 193.851990][T12106] loop4: detected capacity change from 0 to 2048 [ 193.861834][ T53] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.885098][T12106] EXT4-fs: Ignoring removed bh option [ 193.907535][ T53] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.938527][T12106] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #12: comm syz.4.3062: corrupted in-inode xattr: e_name out of bounds [ 193.995111][ T53] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.008640][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3066'. [ 194.036545][T12119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3065'. [ 194.045724][T12106] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 194.047142][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3065'. [ 194.069564][T12094] chnl_net:caif_netlink_parms(): no params data found [ 194.085912][ T53] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.089290][T12106] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 201 with error 28 [ 194.108056][T12106] EXT4-fs (loop4): This should not happen!! Data will be lost [ 194.108056][T12106] [ 194.117936][T12106] EXT4-fs (loop4): Total free blocks count 0 [ 194.124049][T12106] EXT4-fs (loop4): Free/Dirty block details [ 194.129995][T12106] EXT4-fs (loop4): free_blocks=2415919104 [ 194.135852][T12106] EXT4-fs (loop4): dirty_blocks=208 [ 194.141132][T12106] EXT4-fs (loop4): Block reservation details [ 194.147266][T12106] EXT4-fs (loop4): i_reserved_data_blocks=13 [ 194.202934][T12094] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.210439][T12094] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.213891][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3067'. [ 194.221760][T12094] bridge_slave_0: entered allmulticast mode [ 194.242987][T12094] bridge_slave_0: entered promiscuous mode [ 194.261102][T12094] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.268200][T12094] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.275546][T12094] bridge_slave_1: entered allmulticast mode [ 194.278709][T12126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3069'. [ 194.282573][T12094] bridge_slave_1: entered promiscuous mode [ 194.313726][T12130] loop3: detected capacity change from 0 to 1024 [ 194.317651][T12094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.330824][T12130] EXT4-fs: Ignoring removed orlov option [ 194.344296][T12094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.360620][T12128] tipc: Started in network mode [ 194.365668][T12128] tipc: Node identity a24e0a35fbd6, cluster identity 4711 [ 194.372825][T12128] tipc: Enabled bearer , priority 0 [ 194.394352][T12094] team0: Port device team_slave_0 added [ 194.401720][T12094] team0: Port device team_slave_1 added [ 194.412450][ T53] bridge_slave_1: left allmulticast mode [ 194.418155][ T53] bridge_slave_1: left promiscuous mode [ 194.418730][ T29] audit: type=1326 audit(1764885243.085:42677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12129 comm="syz.3.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aa006f749 code=0x7ffc0000 [ 194.424026][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.455481][ T53] bridge_slave_0: left allmulticast mode [ 194.461191][ T53] bridge_slave_0: left promiscuous mode [ 194.467024][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.702262][ T53] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.716896][ T53] bond_slave_0: left promiscuous mode [ 194.723789][ T53] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.733628][ T53] bond_slave_1: left promiscuous mode [ 194.740711][ T53] $H (unregistering): Released all slaves [ 194.750464][T12128] syzkaller0: entered promiscuous mode [ 194.756091][T12128] syzkaller0: entered allmulticast mode [ 194.780325][T12142] tipc: Resetting bearer [ 194.798536][T12094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.805602][T12094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.831629][T12094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.836003][T12158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=12158 comm=syz.3.3080 [ 194.868441][T12127] tipc: Resetting bearer [ 194.887725][T12127] tipc: Disabling bearer [ 194.897339][T12094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.904375][T12094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.930497][T12094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.931776][ T9989] kernel read not supported for file /vga_arbiter (pid: 9989 comm: kworker/0:13) [ 194.941588][ T53] tipc: Left network mode [ 194.992650][T12160] bridge0: entered promiscuous mode [ 195.013376][T12160] bridge0: port 3(macsec1) entered blocking state [ 195.020747][T12160] bridge0: port 3(macsec1) entered disabled state [ 195.028570][T12160] macsec1: entered allmulticast mode [ 195.034033][T12160] bridge0: entered allmulticast mode [ 195.045569][T12160] macsec1: left allmulticast mode [ 195.051088][T12160] bridge0: left allmulticast mode [ 195.059485][T12160] bridge0: left promiscuous mode [ 195.117885][T12162] bridge0: entered promiscuous mode [ 195.131835][T12162] bridge0: port 3(macsec1) entered blocking state [ 195.139125][T12162] bridge0: port 3(macsec1) entered disabled state [ 195.147628][T12162] macsec1: entered allmulticast mode [ 195.153261][T12162] bridge0: entered allmulticast mode [ 195.161848][T12162] macsec1: left allmulticast mode [ 195.167328][T12162] bridge0: left allmulticast mode [ 195.175582][T12162] bridge0: left promiscuous mode [ 195.221129][ T53] veth1_macvtap: left promiscuous mode [ 195.226655][ T53] veth0_macvtap: left promiscuous mode [ 195.232619][ T53] veth1_vlan: left promiscuous mode [ 195.237981][ T53] veth0_vlan: left promiscuous mode [ 195.384375][T12187] SELinux: security_context_str_to_sid (iu®gIadA$\IіiuM;4ˀ8@]E?@$t2P7p".wKS,)n}` [ 195.384375][T12187] 5iҘ9?jHF|ƭ/&_F<`joR"HES5{41]%87`߻3? i7icL4!dc s) failed with errno=-22 [ 195.424383][T12185] FAULT_INJECTION: forcing a failure. [ 195.424383][T12185] name failslab, interval 1, probability 0, space 0, times 0 [ 195.437179][T12185] CPU: 1 UID: 0 PID: 12185 Comm: syz.2.3092 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.437221][T12185] Tainted: [W]=WARN [ 195.437227][T12185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.437243][T12185] Call Trace: [ 195.437253][T12185] [ 195.437298][T12185] __dump_stack+0x1d/0x30 [ 195.437324][T12185] dump_stack_lvl+0xe8/0x140 [ 195.437347][T12185] dump_stack+0x15/0x1b [ 195.437434][T12185] should_fail_ex+0x265/0x280 [ 195.437478][T12185] should_failslab+0x8c/0xb0 [ 195.437519][T12185] kmem_cache_alloc_node_noprof+0x57/0x4c0 [ 195.437582][T12185] ? __alloc_skb+0x324/0x4d0 [ 195.437608][T12185] __alloc_skb+0x324/0x4d0 [ 195.437655][T12185] ? __alloc_skb+0x24d/0x4d0 [ 195.437755][T12185] netlink_alloc_large_skb+0xbf/0xf0 [ 195.437808][T12185] netlink_sendmsg+0x3cf/0x6b0 [ 195.437846][T12185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.437988][T12185] __sock_sendmsg+0x145/0x180 [ 195.438025][T12185] ____sys_sendmsg+0x31e/0x4a0 [ 195.438063][T12185] ___sys_sendmsg+0x17b/0x1d0 [ 195.438171][T12185] __x64_sys_sendmsg+0xd4/0x160 [ 195.438201][T12185] x64_sys_call+0x17ba/0x3000 [ 195.438225][T12185] do_syscall_64+0xd8/0x2a0 [ 195.438261][T12185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.438339][T12185] RIP: 0033:0x7ff729cdf749 [ 195.438359][T12185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.438377][T12185] RSP: 002b:00007ff72873f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.438396][T12185] RAX: ffffffffffffffda RBX: 00007ff729f35fa0 RCX: 00007ff729cdf749 [ 195.438412][T12185] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 195.438428][T12185] RBP: 00007ff72873f090 R08: 0000000000000000 R09: 0000000000000000 [ 195.438445][T12185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.438537][T12185] R13: 00007ff729f36038 R14: 00007ff729f35fa0 R15: 00007fffc2c4bd18 [ 195.438556][T12185] [ 195.672394][ T53] team0 (unregistering): Port device team_slave_1 removed [ 195.682865][ T53] team0 (unregistering): Port device team_slave_0 removed [ 195.758893][T12191] tipc: Started in network mode [ 195.763859][T12191] tipc: Node identity aa3575ca5eee, cluster identity 4711 [ 195.771288][T12191] tipc: Enabled bearer , priority 0 [ 195.806204][T12194] syzkaller0: entered promiscuous mode [ 195.811797][T12194] syzkaller0: entered allmulticast mode [ 195.876731][T12197] syzkaller0: entered promiscuous mode [ 195.882512][T12197] syzkaller0: entered allmulticast mode [ 195.910374][T12201] tipc: Resetting bearer [ 195.927146][T12225] openvswitch: netlink: EtherType 0 is less than min 600 [ 195.950335][T12094] hsr_slave_0: entered promiscuous mode [ 195.956870][T12094] hsr_slave_1: entered promiscuous mode [ 195.963852][T12094] debugfs: 'hsr0' already exists in 'hsr' [ 195.969687][T12094] Cannot create hsr debugfs directory [ 195.975758][T12181] tipc: Resetting bearer [ 195.983712][T12181] tipc: Disabling bearer [ 196.234861][T12246] loop2: detected capacity change from 0 to 1024 [ 196.242540][T12246] EXT4-fs: Ignoring removed oldalloc option [ 196.248646][T12246] EXT4-fs: Ignoring removed bh option [ 196.369298][T12251] bridge0: entered promiscuous mode [ 196.391424][T12251] bridge0: port 3(macsec1) entered blocking state [ 196.399211][T12251] bridge0: port 3(macsec1) entered disabled state [ 196.407716][T12251] macsec1: entered allmulticast mode [ 196.413834][T12251] bridge0: entered allmulticast mode [ 196.427027][T12251] macsec1: left allmulticast mode [ 196.432917][T12251] bridge0: left allmulticast mode [ 196.441690][T12251] bridge0: left promiscuous mode [ 196.534369][T12094] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.545379][T12094] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.554965][T12094] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.571198][T12094] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.604452][T12263] lo speed is unknown, defaulting to 1000 [ 196.622182][T12273] blktrace: Concurrent blktraces are not allowed on loop3 [ 196.632845][T12274] netlink: 'syz.3.3115': attribute type 3 has an invalid length. [ 196.640876][T12274] netlink: 'syz.3.3115': attribute type 1 has an invalid length. [ 196.656209][T12094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.689059][T12094] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.701032][ T850] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.708329][ T850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.745173][ T850] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.752376][ T850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.769764][T12278] loop3: detected capacity change from 0 to 512 [ 196.777674][T12278] /dev/loop3: Can't open blockdev [ 196.927411][T12296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.959119][T12094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.031957][T12306] xt_TCPMSS: Only works on TCP SYN packets [ 197.082763][T12094] veth0_vlan: entered promiscuous mode [ 197.092141][T12094] veth1_vlan: entered promiscuous mode [ 197.114790][T12094] veth0_macvtap: entered promiscuous mode [ 197.134910][T12094] veth1_macvtap: entered promiscuous mode [ 197.145905][T12094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.158369][T12094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.178161][T12313] __nla_validate_parse: 12 callbacks suppressed [ 197.178179][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3123'. [ 197.194029][ T2712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.206342][ T2712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.256685][T12312] bridge0: entered promiscuous mode [ 197.278230][T12312] bridge0: port 3(macsec1) entered blocking state [ 197.286041][T12312] bridge0: port 3(macsec1) entered disabled state [ 197.301685][T12312] macsec1: entered allmulticast mode [ 197.313851][T12312] bridge0: entered allmulticast mode [ 197.328107][T12312] macsec1: left allmulticast mode [ 197.333978][T12312] bridge0: left allmulticast mode [ 197.357168][T12312] bridge0: left promiscuous mode [ 197.365916][T12322] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3130'. [ 197.396529][T12327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3131'. [ 197.433456][T12331] netlink: 'syz.2.3127': attribute type 3 has an invalid length. [ 197.441244][T12331] netlink: 'syz.2.3127': attribute type 1 has an invalid length. [ 197.449050][T12331] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3127'. [ 197.474864][ T2712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.488208][T12330] tipc: Enabled bearer , priority 0 [ 197.499791][ T2712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.509208][T12335] syzkaller0: entered promiscuous mode [ 197.514775][T12335] syzkaller0: entered allmulticast mode [ 197.547369][T12325] lo speed is unknown, defaulting to 1000 [ 197.560765][T12318] tipc: Resetting bearer [ 197.591152][T12342] 8021q: VLANs not supported on ip_vti0 [ 197.600550][T12317] tipc: Resetting bearer [ 197.617768][T12317] tipc: Disabling bearer [ 197.658973][T12341] syzkaller0: entered promiscuous mode [ 197.664800][T12341] syzkaller0: entered allmulticast mode [ 197.708930][T12341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3135'. [ 197.753370][T12341] netem: change failed [ 197.769444][T12354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3141'. [ 198.002792][T12362] bridge0: entered promiscuous mode [ 198.023940][T12362] bridge0: port 3(macsec1) entered blocking state [ 198.031416][T12362] bridge0: port 3(macsec1) entered disabled state [ 198.054277][T12362] macsec1: entered allmulticast mode [ 198.060327][T12362] bridge0: entered allmulticast mode [ 198.085176][T12362] macsec1: left allmulticast mode [ 198.091291][T12362] bridge0: left allmulticast mode [ 198.111564][T12362] bridge0: left promiscuous mode [ 198.153805][T12368] $H: renamed from bond0 (while UP) [ 198.172965][T12368] $H: entered promiscuous mode [ 198.178126][T12368] bond_slave_0: entered promiscuous mode [ 198.183962][T12368] bond_slave_1: entered promiscuous mode [ 198.255434][T12357] lo speed is unknown, defaulting to 1000 [ 198.319774][T12372] bridge0: entered promiscuous mode [ 198.352169][T12372] bridge0: port 3(macsec1) entered blocking state [ 198.360709][T12372] bridge0: port 3(macsec1) entered disabled state [ 198.370029][T12372] macsec1: entered allmulticast mode [ 198.376036][T12372] bridge0: entered allmulticast mode [ 198.410881][T12372] macsec1: left allmulticast mode [ 198.417174][T12372] bridge0: left allmulticast mode [ 198.444735][T12372] bridge0: left promiscuous mode [ 198.507439][T12389] netlink: 'syz.0.3151': attribute type 3 has an invalid length. [ 198.515352][T12389] netlink: 'syz.0.3151': attribute type 1 has an invalid length. [ 198.523103][T12389] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3151'. [ 198.555749][T12379] 8021q: VLANs not supported on ip_vti0 [ 198.578705][T12388] lo speed is unknown, defaulting to 1000 [ 198.611769][T12392] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3152'. [ 198.636363][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 198.749875][T12357] chnl_net:caif_netlink_parms(): no params data found [ 198.792409][T12399] loop0: detected capacity change from 0 to 1024 [ 198.799266][T12399] EXT4-fs: Ignoring removed orlov option [ 198.890069][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 198.890084][ T29] audit: type=1326 audit(1764885247.305:42837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fae5f749 code=0x7ffc0000 [ 198.926603][ T29] audit: type=1326 audit(1764885247.305:42838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fae5f749 code=0x7ffc0000 [ 198.950460][ T29] audit: type=1326 audit(1764885247.305:42839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84fae5f749 code=0x7ffc0000 [ 198.974266][ T29] audit: type=1326 audit(1764885247.305:42840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fae5f749 code=0x7ffc0000 [ 198.998072][ T29] audit: type=1326 audit(1764885247.305:42841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84fae5f749 code=0x7ffc0000 [ 199.001661][T12414] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3158'. [ 199.022240][ T29] audit: type=1326 audit(1764885247.305:42842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fae5f749 code=0x7ffc0000 [ 199.055699][ T29] audit: type=1326 audit(1764885247.305:42843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84fae5df90 code=0x7ffc0000 [ 199.080128][ T29] audit: type=1326 audit(1764885247.305:42844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f84fae60f77 code=0x7ffc0000 [ 199.104154][ T29] audit: type=1326 audit(1764885247.305:42845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84fae5f749 code=0x7ffc0000 [ 199.128627][ T29] audit: type=1326 audit(1764885247.305:42846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12398 comm="syz.0.3155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f84fae60f77 code=0x7ffc0000 [ 199.154764][T12357] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.161857][T12357] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.175729][T12357] bridge_slave_0: entered allmulticast mode [ 199.197105][T12357] bridge_slave_0: entered promiscuous mode [ 199.208595][T12357] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.215761][T12357] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.239053][T12357] bridge_slave_1: entered allmulticast mode [ 199.251050][T12357] bridge_slave_1: entered promiscuous mode [ 199.337140][T12421] 8021q: VLANs not supported on ip_vti0 [ 199.343953][T12423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.361685][T12357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.376926][T12357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.410589][T12357] team0: Port device team_slave_0 added [ 199.418110][T12357] team0: Port device team_slave_1 added [ 199.436292][T12427] siw: device registration error -23 [ 199.456404][T12357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.463423][T12357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.489622][T12357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.507141][T12432] SELinux: security_context_str_to_sid (˻)CJ/K|`xuSMp{nKHFLLC&5,xz3UkZĿ*SjglظA]x' AWY~G+Ne`۹ͼ2.ZWz)r<X*,07[ e(@1 [R%xS,q G|T8F]1OBw) failed with errno=-22 [ 199.511645][T12431] tipc: Enabled bearer , priority 0 [ 199.545592][T12357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.552883][T12357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.578981][T12357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.599163][T12434] syzkaller0: entered promiscuous mode [ 199.605418][T12434] syzkaller0: entered allmulticast mode [ 199.628396][T12430] tipc: Resetting bearer [ 199.657891][T12430] tipc: Disabling bearer [ 199.763209][T12438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.065494][T12357] hsr_slave_0: entered promiscuous mode [ 200.071791][T12357] hsr_slave_1: entered promiscuous mode [ 200.078039][T12357] debugfs: 'hsr0' already exists in 'hsr' [ 200.085341][T12357] Cannot create hsr debugfs directory [ 200.208969][T12439] bridge0: entered promiscuous mode [ 200.272366][T12439] bridge0: port 3(macsec1) entered blocking state [ 200.291863][T12439] bridge0: port 3(macsec1) entered disabled state [ 200.302487][T12439] macsec1: entered allmulticast mode [ 200.308527][T12439] bridge0: entered allmulticast mode [ 200.334612][T12439] macsec1: left allmulticast mode [ 200.341775][T12439] bridge0: left allmulticast mode [ 200.373197][T12439] bridge0: left promiscuous mode [ 200.401944][T12449] netlink: 'syz.1.3169': attribute type 3 has an invalid length. [ 200.409853][T12449] netlink: 'syz.1.3169': attribute type 1 has an invalid length. [ 200.471436][T12448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.516061][T12446] lo speed is unknown, defaulting to 1000 [ 200.604394][T12357] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.693694][T12357] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.790874][T12468] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 200.800745][T12468] SELinux: failed to load policy [ 200.809914][T12470] loop2: detected capacity change from 0 to 512 [ 200.817660][T12357] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.843460][T12470] EXT4-fs (loop2): 1 orphan inode deleted [ 200.857443][T12470] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.870269][ T837] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 200.897477][T12357] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.964588][T12486] loop0: detected capacity change from 0 to 128 [ 200.983211][T12489] tipc: Enabled bearer , priority 0 [ 200.990289][T12489] syzkaller0: entered promiscuous mode [ 200.993127][T12488] SELinux: security_context_str_to_sid (8RMuJP?G卼f\R;h^-aR\֨p31-x+5K1]|{x&;p O›F%Oks?1tZb_mo,H)p5y_JKע6C) failed with errno=-22 [ 200.996131][T12489] syzkaller0: entered allmulticast mode [ 201.044422][T12357] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 201.057820][T12357] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 201.071777][T12357] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 201.090996][T12487] tipc: Resetting bearer [ 201.116455][T12487] tipc: Disabling bearer [ 201.123577][T12357] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 201.187925][T12357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.203336][T12357] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.224030][ T1703] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.231294][ T1703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.285457][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.292600][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.315351][T12357] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.325919][T12357] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.403618][T12357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.487186][T12357] veth0_vlan: entered promiscuous mode [ 201.496719][T12357] veth1_vlan: entered promiscuous mode [ 201.514936][T12357] veth0_macvtap: entered promiscuous mode [ 201.523217][T12357] veth1_macvtap: entered promiscuous mode [ 201.540561][T12357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.555207][T12357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.606643][T12527] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 201.626098][T12527] SELinux: failed to load policy [ 201.634908][T12527] loop2: detected capacity change from 0 to 512 [ 201.644418][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.657201][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.668402][T12527] EXT4-fs (loop2): 1 orphan inode deleted [ 201.674630][T12527] EXT4-fs mount: 72 callbacks suppressed [ 201.674651][T12527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.693683][ T850] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 1 [ 201.699275][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.729217][T12527] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.762888][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.789643][T11681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.855217][T12538] bridge0: entered promiscuous mode [ 201.887680][T12538] bridge0: port 3(macsec1) entered blocking state [ 201.894914][T12538] bridge0: port 3(macsec1) entered disabled state [ 201.904440][T12538] macsec1: entered allmulticast mode [ 201.910330][T12538] bridge0: entered allmulticast mode [ 201.935638][T12538] macsec1: left allmulticast mode [ 201.947770][T12538] bridge0: left allmulticast mode [ 201.958964][T12538] bridge0: left promiscuous mode [ 202.010943][T12547] tipc: Enabled bearer , priority 0 [ 202.019706][T12547] syzkaller0: entered promiscuous mode [ 202.025283][T12547] syzkaller0: entered allmulticast mode [ 202.040732][T12546] tipc: Resetting bearer [ 202.047102][T12557] loop2: detected capacity change from 0 to 128 [ 202.070918][T12546] tipc: Disabling bearer [ 202.113001][T12564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.174920][T12569] veth3: entered allmulticast mode [ 202.193204][T12557] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 202.201095][T12557] FAT-fs (loop2): Filesystem has been set read-only [ 202.208802][T12557] syz.2.3197: attempt to access beyond end of device [ 202.208802][T12557] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 202.223601][T12557] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 202.231677][T12557] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 202.241594][T12557] syz.2.3197: attempt to access beyond end of device [ 202.241594][T12557] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 202.257390][T12557] syz.2.3197: attempt to access beyond end of device [ 202.257390][T12557] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 202.274137][T12557] syz.2.3197: attempt to access beyond end of device [ 202.274137][T12557] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 202.287644][T12557] syz.2.3197: attempt to access beyond end of device [ 202.287644][T12557] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 202.309316][T12576] SELinux: security_context_str_to_sid () failed with errno=-22 [ 202.310967][T12578] loop0: detected capacity change from 0 to 128 [ 202.343516][T12557] syz.2.3197: attempt to access beyond end of device [ 202.343516][T12557] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 202.365682][T12557] syz.2.3197: attempt to access beyond end of device [ 202.365682][T12557] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 202.379648][T12557] syz.2.3197: attempt to access beyond end of device [ 202.379648][T12557] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 202.394145][T12557] syz.2.3197: attempt to access beyond end of device [ 202.394145][T12557] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 202.408041][T12557] syz.2.3197: attempt to access beyond end of device [ 202.408041][T12557] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 202.555036][T12584] loop3: detected capacity change from 0 to 512 [ 202.567562][T12584] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 202.609280][T12584] EXT4-fs (loop3): mount failed [ 203.053710][T12606] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 203.068029][T12606] SELinux: failed to load policy [ 203.195763][T12617] loop3: detected capacity change from 0 to 2048 [ 203.202456][T12617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.223925][T12620] __nla_validate_parse: 17 callbacks suppressed [ 203.223945][T12620] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3213'. [ 203.245155][T12617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.272136][T12617] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3209: bg 0: block 2: invalid block bitmap [ 203.294269][T12626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.310099][T12617] EXT4-fs (loop3): Remounting filesystem read-only [ 203.397639][T12633] tipc: Enabled bearer , priority 0 [ 203.406448][T12633] tipc: Resetting bearer [ 203.415025][T12632] tipc: Disabling bearer [ 203.422519][T12629] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3212'. [ 203.433272][T12608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'. [ 203.491710][T12636] loop0: detected capacity change from 0 to 1024 [ 203.513715][T12636] EXT4-fs: Ignoring removed orlov option [ 203.535101][T12640] loop2: detected capacity change from 0 to 2048 [ 203.548281][T12640] EXT4-fs: Ignoring removed bh option [ 203.709528][T12636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.723226][T12640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.736396][T12640] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #12: comm syz.2.3219: corrupted in-inode xattr: e_name out of bounds [ 203.788760][T12640] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 203.818818][T12652] loop4: detected capacity change from 0 to 512 [ 203.827429][T12652] EXT4-fs: Ignoring removed oldalloc option [ 203.846829][T12640] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 201 with error 28 [ 203.859344][T12640] EXT4-fs (loop2): This should not happen!! Data will be lost [ 203.859344][T12640] [ 203.869168][T12640] EXT4-fs (loop2): Total free blocks count 0 [ 203.875170][T12640] EXT4-fs (loop2): Free/Dirty block details [ 203.881163][T12640] EXT4-fs (loop2): free_blocks=2415919104 [ 203.886978][T12640] EXT4-fs (loop2): dirty_blocks=208 [ 203.892251][T12640] EXT4-fs (loop2): Block reservation details [ 203.898778][T12640] EXT4-fs (loop2): i_reserved_data_blocks=13 [ 203.906158][T12652] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 204.001295][T11681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.010450][T12652] EXT4-fs (loop4): failed to open journal device unknown-block(1,255) -6 [ 204.058475][T12660] netlink: 'syz.1.3228': attribute type 10 has an invalid length. [ 204.066441][T12660] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3228'. [ 204.075950][T12357] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.077199][T12660] batman_adv: batadv0: Adding interface: veth1_vlan [ 204.091668][T12660] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.118317][T12660] batman_adv: batadv0: Interface activated: veth1_vlan [ 204.139497][T12094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.283872][T12683] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3233'. [ 204.323643][T12676] bridge0: entered promiscuous mode [ 204.341300][T12676] bridge0: port 3(macsec1) entered blocking state [ 204.349006][T12676] bridge0: port 3(macsec1) entered disabled state [ 204.361626][T12683] loop2: detected capacity change from 0 to 1024 [ 204.369277][T12683] EXT4-fs: Ignoring removed oldalloc option [ 204.375351][T12683] EXT4-fs: Ignoring removed bh option [ 204.376244][T12692] SELinux: security_context_str_to_sid (~Ouŷs9: lJp6ѥ~$״`\@5lΡtPVb5dFC\W݂7xaK? ǭN!y*&Udt% fn) failed with errno=-22 [ 204.393610][T12676] macsec1: entered allmulticast mode [ 204.408182][T12676] bridge0: entered allmulticast mode [ 204.429396][T12676] macsec1: left allmulticast mode [ 204.435931][T12676] bridge0: left allmulticast mode [ 204.443965][T12683] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.465033][T12698] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3230'. [ 204.497852][T12676] bridge0: left promiscuous mode [ 204.517875][T12700] FAULT_INJECTION: forcing a failure. [ 204.517875][T12700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.531336][T12700] CPU: 1 UID: 0 PID: 12700 Comm: syz.1.3236 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.531371][T12700] Tainted: [W]=WARN [ 204.531379][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.531395][T12700] Call Trace: [ 204.531403][T12700] [ 204.531413][T12700] __dump_stack+0x1d/0x30 [ 204.531509][T12700] dump_stack_lvl+0xe8/0x140 [ 204.531533][T12700] dump_stack+0x15/0x1b [ 204.531553][T12700] should_fail_ex+0x265/0x280 [ 204.531589][T12700] should_fail+0xb/0x20 [ 204.531694][T12700] should_fail_usercopy+0x1a/0x20 [ 204.531715][T12700] _copy_to_user+0x20/0xa0 [ 204.531739][T12700] simple_read_from_buffer+0xb5/0x130 [ 204.531774][T12700] proc_fail_nth_read+0x10e/0x150 [ 204.531811][T12700] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.531915][T12700] vfs_read+0x1a8/0x770 [ 204.531945][T12700] ? lockref_put_return+0xf7/0x130 [ 204.531968][T12700] ? __rcu_read_unlock+0x4f/0x70 [ 204.532042][T12700] ? __fget_files+0x184/0x1c0 [ 204.532121][T12700] ? mutex_lock+0x58/0x90 [ 204.532146][T12700] ksys_read+0xda/0x1a0 [ 204.532229][T12700] __x64_sys_read+0x40/0x50 [ 204.532360][T12700] x64_sys_call+0x2889/0x3000 [ 204.532386][T12700] do_syscall_64+0xd8/0x2a0 [ 204.532419][T12700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.532450][T12700] RIP: 0033:0x7f2ddf66e15c [ 204.532466][T12700] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 204.532505][T12700] RSP: 002b:00007f2dde0d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.532526][T12700] RAX: ffffffffffffffda RBX: 00007f2ddf8c5fa0 RCX: 00007f2ddf66e15c [ 204.532541][T12700] RDX: 000000000000000f RSI: 00007f2dde0d70a0 RDI: 0000000000000005 [ 204.532554][T12700] RBP: 00007f2dde0d7090 R08: 0000000000000000 R09: 0000000000000000 [ 204.532593][T12700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.532606][T12700] R13: 00007f2ddf8c6038 R14: 00007f2ddf8c5fa0 R15: 00007ffc4c8cc2f8 [ 204.532626][T12700] [ 204.807606][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3230'. [ 204.882172][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 204.882190][ T29] audit: type=1326 audit(1764885252.908:43006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.1.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ddf66f749 code=0x7ffc0000 [ 204.912099][ T29] audit: type=1326 audit(1764885252.908:43007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.1.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ddf66f749 code=0x7ffc0000 [ 204.951458][ T29] audit: type=1326 audit(1764885252.918:43008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.1.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ddf66f749 code=0x7ffc0000 [ 204.975403][ T29] audit: type=1326 audit(1764885252.918:43009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.1.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ddf66f749 code=0x7ffc0000 [ 204.999194][ T29] audit: type=1326 audit(1764885252.918:43010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.1.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ddf66f749 code=0x7ffc0000 [ 205.022931][ T29] audit: type=1326 audit(1764885252.918:43011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.1.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2ddf66f749 code=0x7ffc0000 [ 205.046727][ T29] audit: type=1326 audit(1764885252.918:43012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.1.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ddf66f749 code=0x7ffc0000 [ 205.070557][ T29] audit: type=1326 audit(1764885252.918:43013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.1.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ddf66f749 code=0x7ffc0000 [ 205.094090][ T29] audit: type=1326 audit(1764885252.918:43014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.1.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ddf66f749 code=0x7ffc0000 [ 205.117690][ T29] audit: type=1326 audit(1764885252.918:43015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12706 comm="syz.1.3239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2ddf66f749 code=0x7ffc0000 [ 205.190972][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3243'. [ 205.201088][T11681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.282224][T12727] loop2: detected capacity change from 0 to 1024 [ 205.300010][T12727] EXT4-fs: Ignoring removed orlov option [ 205.327385][T12729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3248'. [ 205.338377][T12729] netlink: 'syz.0.3248': attribute type 4 has an invalid length. [ 205.338699][T12727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.443327][T12738] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.476835][T12744] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3254'. [ 205.491032][T12743] netlink: 'syz.3.3253': attribute type 10 has an invalid length. [ 205.502179][T12738] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 205.510898][T12743] batman_adv: batadv0: Adding interface: veth1_vlan [ 205.517611][T12743] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 205.544553][T12743] batman_adv: batadv0: Interface activated: veth1_vlan [ 205.551220][T12738] System zones: 0-1, 3-36 [ 205.584546][T12738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.697426][T11681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.949009][T12773] netlink: 'syz.4.3265': attribute type 10 has an invalid length. [ 205.965593][T12773] batman_adv: batadv0: Adding interface: veth1_vlan [ 205.972248][T12773] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.014115][T12773] batman_adv: batadv0: Interface activated: veth1_vlan [ 206.049858][T12778] SELinux: policydb string does not match my string SE Linux [ 206.065308][T12778] SELinux: failed to load policy [ 206.074239][T12782] No source specified [ 206.389816][T12802] ext4: Invalid uid '0x00000000ffffffff' [ 206.567493][T12812] SELinux: policydb string SE L does not match my string SE Linux [ 206.575512][T12812] SELinux: failed to load policy [ 206.857723][T12830] syzkaller0: entered promiscuous mode [ 206.863498][T12830] syzkaller0: entered allmulticast mode [ 207.065181][T12094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.115145][T12844] SELinux: policydb string SE Lin does not match my string SE Linux [ 207.134245][T12844] SELinux: failed to load policy [ 207.300720][T12873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12873 comm=syz.3.3305 [ 207.317173][T12873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12873 comm=syz.3.3305 [ 207.360279][T12883] SELinux: policydb string SE Lin does not match my string SE Linux [ 207.368943][T12883] SELinux: failed to load policy [ 207.388703][T12889] FAULT_INJECTION: forcing a failure. [ 207.388703][T12889] name failslab, interval 1, probability 0, space 0, times 0 [ 207.401411][T12889] CPU: 0 UID: 0 PID: 12889 Comm: syz.0.3311 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 207.401524][T12889] Tainted: [W]=WARN [ 207.401533][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.401549][T12889] Call Trace: [ 207.401599][T12889] [ 207.401607][T12889] __dump_stack+0x1d/0x30 [ 207.401632][T12889] dump_stack_lvl+0xe8/0x140 [ 207.401655][T12889] dump_stack+0x15/0x1b [ 207.401698][T12889] should_fail_ex+0x265/0x280 [ 207.401734][T12889] should_failslab+0x8c/0xb0 [ 207.401838][T12889] kmem_cache_alloc_noprof+0x50/0x4a0 [ 207.401874][T12889] ? sctp_get_port_local+0x438/0xae0 [ 207.401908][T12889] sctp_get_port_local+0x438/0xae0 [ 207.401942][T12889] sctp_do_bind+0x398/0x4b0 [ 207.402039][T12889] sctp_connect_new_asoc+0x153/0x3a0 [ 207.402071][T12889] sctp_sendmsg+0xf10/0x18d0 [ 207.402101][T12889] ? selinux_socket_sendmsg+0x121/0x1b0 [ 207.402140][T12889] ? __pfx_sctp_sendmsg+0x10/0x10 [ 207.402216][T12889] inet_sendmsg+0xc5/0xd0 [ 207.402236][T12889] __sock_sendmsg+0x102/0x180 [ 207.402270][T12889] __sys_sendto+0x268/0x330 [ 207.402371][T12889] __x64_sys_sendto+0x76/0x90 [ 207.402454][T12889] x64_sys_call+0x29a7/0x3000 [ 207.402480][T12889] do_syscall_64+0xd8/0x2a0 [ 207.402539][T12889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.402566][T12889] RIP: 0033:0x7f84fae5f749 [ 207.402582][T12889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.402603][T12889] RSP: 002b:00007f84f98bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 207.402648][T12889] RAX: ffffffffffffffda RBX: 00007f84fb0b5fa0 RCX: 00007f84fae5f749 [ 207.402661][T12889] RDX: 000000000000fff5 RSI: 0000200000847fff RDI: 0000000000000004 [ 207.402681][T12889] RBP: 00007f84f98bf090 R08: 000020000005ffe4 R09: 000000000000001c [ 207.402694][T12889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.402707][T12889] R13: 00007f84fb0b6038 R14: 00007f84fb0b5fa0 R15: 00007fff0d377a48 [ 207.402727][T12889] [ 207.837764][T12925] netlink: 'syz.0.3323': attribute type 7 has an invalid length. [ 207.852113][T12920] bridge0: entered promiscuous mode [ 207.865667][T12920] bridge0: port 3(macsec1) entered blocking state [ 207.873148][T12920] bridge0: port 3(macsec1) entered disabled state [ 207.881554][T12920] macsec1: entered allmulticast mode [ 207.888884][T12920] bridge0: entered allmulticast mode [ 207.896680][T12920] macsec1: left allmulticast mode [ 207.902902][T12920] bridge0: left allmulticast mode [ 207.912181][T12920] bridge0: left promiscuous mode [ 207.973499][T12925] set_capacity_and_notify: 2 callbacks suppressed [ 207.973517][T12925] loop0: detected capacity change from 0 to 2048 [ 207.986831][T12925] EXT4-fs: Ignoring removed i_version option [ 207.995774][T12925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.008357][T12925] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.055699][T12935] xt_hashlimit: max too large, truncated to 1048576 [ 208.087855][T12937] FAULT_INJECTION: forcing a failure. [ 208.087855][T12937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.101058][T12937] CPU: 1 UID: 0 PID: 12937 Comm: syz.1.3326 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.101101][T12937] Tainted: [W]=WARN [ 208.101110][T12937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.101198][T12937] Call Trace: [ 208.101205][T12937] [ 208.101213][T12937] __dump_stack+0x1d/0x30 [ 208.101234][T12937] dump_stack_lvl+0xe8/0x140 [ 208.101253][T12937] dump_stack+0x15/0x1b [ 208.101270][T12937] should_fail_ex+0x265/0x280 [ 208.101356][T12937] should_fail+0xb/0x20 [ 208.101383][T12937] should_fail_usercopy+0x1a/0x20 [ 208.101400][T12937] _copy_from_user+0x1c/0xb0 [ 208.101515][T12937] ___sys_sendmsg+0xc1/0x1d0 [ 208.101563][T12937] __x64_sys_sendmsg+0xd4/0x160 [ 208.101612][T12937] x64_sys_call+0x17ba/0x3000 [ 208.101639][T12937] do_syscall_64+0xd8/0x2a0 [ 208.101674][T12937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.101693][T12937] RIP: 0033:0x7f2ddf66f749 [ 208.101846][T12937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.101863][T12937] RSP: 002b:00007f2dde0d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.101880][T12937] RAX: ffffffffffffffda RBX: 00007f2ddf8c5fa0 RCX: 00007f2ddf66f749 [ 208.101891][T12937] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 208.101902][T12937] RBP: 00007f2dde0d7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.101913][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.101924][T12937] R13: 00007f2ddf8c6038 R14: 00007f2ddf8c5fa0 R15: 00007ffc4c8cc2f8 [ 208.101941][T12937] [ 208.315686][T12945] SELinux: policydb string SE Linu does not match my string SE Linux [ 208.324094][T12945] SELinux: failed to load policy [ 208.455149][T12954] bridge0: entered promiscuous mode [ 208.470229][T12954] bridge0: port 3(macsec1) entered blocking state [ 208.477011][T12954] bridge0: port 3(macsec1) entered disabled state [ 208.484409][T12954] macsec1: entered allmulticast mode [ 208.500840][T12954] bridge0: entered allmulticast mode [ 208.511084][T12954] macsec1: left allmulticast mode [ 208.516535][T12954] bridge0: left allmulticast mode [ 208.528542][T12954] bridge0: left promiscuous mode [ 208.541820][T12968] capability: warning: `syz.1.3336' uses 32-bit capabilities (legacy support in use) [ 208.588447][T12950] __nla_validate_parse: 11 callbacks suppressed [ 208.588461][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3332'. [ 208.610371][T12969] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3336'. [ 208.620702][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3336'. [ 208.667308][T12973] loop4: detected capacity change from 0 to 1024 [ 208.669210][T12971] bond0: option packets_per_slave: invalid value (18446744072268814746) [ 208.674460][T12973] EXT4-fs: Ignoring removed orlov option [ 208.682106][T12971] bond0: option packets_per_slave: allowed values 0 - 65535 [ 208.688351][T12971] loop2: detected capacity change from 0 to 512 [ 208.705282][T12973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.705333][T12971] EXT4-fs (loop2): 1 truncate cleaned up [ 208.705808][T12971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.761766][T11681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.772842][T12094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.824123][T12984] SELinux: policydb string SE Linu does not match my string SE Linux [ 208.834023][T12984] SELinux: failed to load policy [ 208.960966][T12994] netlink: 'syz.2.3346': attribute type 7 has an invalid length. [ 209.064061][T12995] loop2: detected capacity change from 0 to 2048 [ 209.072866][T12995] EXT4-fs: Ignoring removed i_version option [ 209.086911][T12995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.101741][T12995] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.125456][T12973] ================================================================== [ 209.133957][T12973] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 209.142670][T12973] [ 209.145049][T12973] write to 0xffff88811a042164 of 4 bytes by task 12982 on cpu 0: [ 209.153208][T12973] xas_set_mark+0x12b/0x140 [ 209.157832][T12973] __folio_start_writeback+0x155/0x390 [ 209.163420][T12973] ext4_bio_write_folio+0x5ad/0x9f0 [ 209.169130][T12973] mpage_process_page_bufs+0x4a1/0x620 [ 209.174610][T12973] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 209.180881][T12973] ext4_do_writepages+0x9f6/0x27e0 [ 209.186514][T12973] ext4_writepages+0x179/0x300 [ 209.191299][T12973] do_writepages+0x1c6/0x310 [ 209.196003][T12973] file_write_and_wait_range+0x156/0x2c0 [ 209.201669][T12973] generic_buffers_fsync_noflush+0x45/0x130 [ 209.207806][T12973] ext4_sync_file+0x1ab/0x690 [ 209.212512][T12973] vfs_fsync_range+0x10d/0x130 [ 209.217580][T12973] ext4_buffered_write_iter+0x34f/0x3c0 [ 209.223260][T12973] ext4_file_write_iter+0x387/0xf60 [ 209.229018][T12973] iter_file_splice_write+0x66b/0xa20 [ 209.234478][T12973] direct_splice_actor+0x156/0x2a0 [ 209.240148][T12973] splice_direct_to_actor+0x312/0x680 [ 209.245562][T12973] do_splice_direct+0xda/0x150 [ 209.250373][T12973] do_sendfile+0x380/0x650 [ 209.254799][T12973] __x64_sys_sendfile64+0x105/0x150 [ 209.260019][T12973] x64_sys_call+0x2db1/0x3000 [ 209.264770][T12973] do_syscall_64+0xd8/0x2a0 [ 209.269300][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.275321][T12973] [ 209.278007][T12973] read to 0xffff88811a042164 of 4 bytes by task 12973 on cpu 1: [ 209.285659][T12973] __writeback_single_inode+0x201/0x7c0 [ 209.291405][T12973] writeback_single_inode+0x16d/0x3f0 [ 209.296827][T12973] sync_inode_metadata+0x5b/0x90 [ 209.301864][T12973] generic_buffers_fsync_noflush+0xee/0x130 [ 209.307965][T12973] ext4_sync_file+0x1ab/0x690 [ 209.312677][T12973] vfs_fsync_range+0x10d/0x130 [ 209.317481][T12973] ext4_buffered_write_iter+0x34f/0x3c0 [ 209.323243][T12973] ext4_file_write_iter+0x387/0xf60 [ 209.328471][T12973] iter_file_splice_write+0x66b/0xa20 [ 209.333871][T12973] direct_splice_actor+0x156/0x2a0 [ 209.339183][T12973] splice_direct_to_actor+0x312/0x680 [ 209.344756][T12973] do_splice_direct+0xda/0x150 [ 209.349570][T12973] do_sendfile+0x380/0x650 [ 209.354167][T12973] __x64_sys_sendfile64+0x105/0x150 [ 209.359396][T12973] x64_sys_call+0x2db1/0x3000 [ 209.364364][T12973] do_syscall_64+0xd8/0x2a0 [ 209.368978][T12973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.375580][T12973] [ 209.378039][T12973] value changed: 0x0a000021 -> 0x04000021 [ 209.383769][T12973] [ 209.386107][T12973] Reported by Kernel Concurrency Sanitizer on: [ 209.392262][T12973] CPU: 1 UID: 0 PID: 12973 Comm: syz.4.3338 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 209.403842][T12973] Tainted: [W]=WARN [ 209.407659][T12973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 209.417995][T12973] ================================================================== [ 209.577409][T11509] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.863459][T11681] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.