last executing test programs: 1.564590194s ago: executing program 1 (id=9557): r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 1.512849677s ago: executing program 1 (id=9561): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2d78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {0x0}], 0x2) 1.429494594s ago: executing program 1 (id=9565): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0009000000cd72009f6f480000030000850000001b000000b70000000000020095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) mkdirat(0xffffffffffffffff, 0x0, 0x1c2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)={0x50002011}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1e, 0x80004, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r11 = dup3(r10, r9, 0x0) recvmmsg(r11, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) ioctl$RNDZAPENTCNT(r11, 0x5204, &(0x7f0000000000)=0x6) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000007b660000400000000101000004010000", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=r14, @ANYRES32, @ANYBLOB="050000000501000000004000"/28], 0x50) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x10) 1.22784323s ago: executing program 2 (id=9576): r0 = socket$caif_stream(0x25, 0x1, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d90000000000f9ea00850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) writev(r0, &(0x7f0000000c40), 0x0) 1.192257363s ago: executing program 2 (id=9579): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{}], 0x8, 0x6b, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x3f, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10) 1.152441607s ago: executing program 2 (id=9582): prctl$PR_SET_NAME(0xf, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x103940) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r2, 0xffffffffffffffff, 0x0) 1.092662001s ago: executing program 2 (id=9586): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kmem_cache_free\x00'}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x2200a, 0x4) unshare(0x2c020600) fchdir(r3) r7 = socket(0x10, 0x3, 0x9) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x3bc}}, 0x0) 1.029854237s ago: executing program 3 (id=9591): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2d78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {0x0}], 0x2) 1.029031057s ago: executing program 0 (id=9592): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{}], 0x8, 0x6b, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x3f, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10) 1.012267148s ago: executing program 2 (id=9593): r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002200)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x1, 0x2eb, &(0x7f00000004c0)="$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") ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xf}}, './bus\x00'}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100), 0x10) openat(0xffffffffffffff9c, 0x0, 0x143042, 0xf0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000180)={'raw\x00', 0x34, "8becf645de79bc422c8046ec2f634297609467b88bdcf9e4a1ab0624a517df6da0bf91e58c2bfc3164e465416e2a64a25113a310"}, &(0x7f0000000200)=0x58) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 982.8389ms ago: executing program 0 (id=9595): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x0) 982.48089ms ago: executing program 3 (id=9596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', r5, 0x7800, 0x10, 0x4, 0x8, {{0x29, 0x4, 0x0, 0x1, 0xa4, 0x66, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_addr={0x44, 0x24, 0x5f, 0x1, 0x6, [{@remote, 0x401}, {@multicast1, 0x8}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x4, [{@multicast2, 0x44}, {@multicast2, 0xa}, {@loopback, 0xb}, {@local, 0x7}]}, @generic={0x7, 0xf, "16715ad9b9fbda4a8b7aec8da8"}, @lsrr={0x83, 0x1f, 0x63, [@empty, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @private=0xa010100]}, @lsrr={0x83, 0xb, 0xc5, [@remote, @local]}, @generic={0x89, 0xd, "84014c8d589e86e03c8373"}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, 0x0, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) r10 = fsmount(0xffffffffffffffff, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) rmdir(0x0) pwritev2(r11, &(0x7f00000003c0)=[{&(0x7f0000000340)="d5", 0x1}], 0x1, 0xe7b, 0x0, 0xf) ioctl$AUTOFS_DEV_IOCTL_READY(r10, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r11, {0x5}}, './file0\x00'}) 955.130132ms ago: executing program 0 (id=9597): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 32) unshare(0x48000000) (rerun: 32) sendmmsg(r1, &(0x7f0000009980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x301, &(0x7f0000000080)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 32) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10) (rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32, @ANYBLOB="14000600"], 0x54}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="13022cbd7000fbdbdf25010000000000000008410000004c00180002000662726f6164636173742d6c696e6b00"], 0x68}}, 0x4048080) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r6, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0xeb51, 0x6, 0x3, 0x8000}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8050) (async) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x28}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x5a, 0x0, 0x1}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_timeval(r7, 0x1, 0x42, &(0x7f0000000140), 0x10) mq_open(&(0x7f00000003c0)='vfat\x00', 0x80, 0x166, &(0x7f0000000400)={0x5, 0xfa5f, 0x1, 0x3}) (async) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000800)={0x0, 0x9790, "ed22fa", 0x84, 0x40}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)) 818.304804ms ago: executing program 3 (id=9599): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=@delchain={0x38, 0x2c, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4010) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 741.11131ms ago: executing program 0 (id=9601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2d78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {0x0}], 0x2) 740.27415ms ago: executing program 4 (id=9602): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002200)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x1, 0x2eb, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)={0x11, 0xe, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) (fail_nth: 3) 687.779514ms ago: executing program 3 (id=9603): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 368.00701ms ago: executing program 1 (id=9604): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 317.915764ms ago: executing program 4 (id=9605): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{}], 0x8, 0x6b, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0x0, 0x8, 0x3f, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10) 317.620074ms ago: executing program 0 (id=9606): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 315.456544ms ago: executing program 4 (id=9607): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) close_range(r3, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0), 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x2200a, 0x4) unshare(0x2c020600) fchdir(r4) r8 = socket(0x10, 0x3, 0x9) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x3bc}}, 0x0) 302.981885ms ago: executing program 2 (id=9608): socket$inet6(0xa, 0x3, 0x5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x5, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x5, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e000800080048", 0x19, 0x0, &(0x7f0000000140), 0x14) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="183400000400000000000000000000001846000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="ef00000000000000b703000000000000850000000c000000b700000000f5000067133000f0ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x23, &(0x7f0000000300)=""/35, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1f491, r2, 0x1, &(0x7f0000000580)=[r0, r0, r0, r1, r0, r0, r0, r0], &(0x7f0000000680)=[{0x3, 0x5, 0xb, 0x9}], 0x10, 0x1}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000673000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000180)=0x1, 0x9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff01) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r7], 0x4c}}, 0x0) 294.044296ms ago: executing program 0 (id=9609): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) close_range(r3, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000380)=0x2200a, 0x4) unshare(0x2c020600) fchdir(r4) r8 = socket(0x10, 0x3, 0x9) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a440000000b0a0103000000000000f5ff010000090c00104000000000000000020800064000000000080004400000000308000640000000000900010073797a300000000020000000180a000000000000000000000a0000040c000540000000000000000408010000050a010400000000000000000a0000067d000c0024e20e328f714eb94821d8f0ed7710fb6496e4099349eb9c9c517565096f18c880475159401e1cf6a514dd89e1bd64efcecbfea02d9e38ea80fb0e9dd1ae8a0447734c3f03b388ea5d8a7627ca599091df016790282e6e4442fe69899793daf514943cedbc35c45d9ea69d42644a3421f3148cb6dc09474e9500000008000b4000000004640004801400030076657468305f746f5f62617461647600080002406453b531140003007866726d3000000000000000000000000800014000000002080002404f23c5d2080002407f39b539080002405a1b90bc080001400000000208000240ffff7fff08000540fffffffb20000000120a05000000000000000000070000050c00064000000000000000021c000000090a0407000000000000000007000007080003400000000220000000120a01040000000000000000070000070900010073797a3100000000cc010000180a01080000000000000000010000050900020073797a32000000003c0003801800038014000100626f6e645f736c6176655f310000000008000240fffffffc180003801400010076657468315f766972745f7769666900700103805400038014000100766574683000000000000000000000001400010064766d727031000000000000000000001400010074756e6c3000000000000000000000001400010076657468315f766c616e000000000000080002400000000f0800014000000000080001400000000090000380140001006d616373656330000000000000000000140001006261746164765f736c6176655f3000001400010069705f767469300000000000000000001400010064766d7270300000000000000000000014000100736974300000000000000000000000001400010070696d7265670000000000000000000014000100000000000000000000000000000000002c0003801400010070696d7265673000000000000000000014000100767863616e31000000000000000000001800038014000100697036677265746170300000000000002c000380140001007663616e300000000000000000000000140001007465616d5f736c6176655f300000000014"], 0x3bc}}, 0x0) 281.622537ms ago: executing program 1 (id=9610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', r5, 0x7800, 0x10, 0x4, 0x8, {{0x29, 0x4, 0x0, 0x1, 0xa4, 0x66, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_addr={0x44, 0x24, 0x5f, 0x1, 0x6, [{@remote, 0x401}, {@multicast1, 0x8}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x4, [{@multicast2, 0x44}, {@multicast2, 0xa}, {@loopback, 0xb}, {@local, 0x7}]}, @generic={0x7, 0xf, "16715ad9b9fbda4a8b7aec8da8"}, @lsrr={0x83, 0x1f, 0x63, [@empty, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @private=0xa010100]}, @lsrr={0x83, 0xb, 0xc5, [@remote, @local]}, @generic={0x89, 0xd, "84014c8d589e86e03c8373"}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}, 0x1, 0x0, 0x0, 0x4008091}, 0x4) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, 0x0, 0x0) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) r10 = fsmount(0xffffffffffffffff, 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) rmdir(0x0) pwritev2(r11, &(0x7f00000003c0)=[{&(0x7f0000000340)="d5", 0x1}], 0x1, 0xe7b, 0x0, 0xf) ioctl$AUTOFS_DEV_IOCTL_READY(r10, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r11, {0x5}}, './file0\x00'}) 217.917802ms ago: executing program 3 (id=9611): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) (async) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x3, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\x00') r1 = accept4$inet(r0, 0x0, &(0x7f00000000c0), 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xff01, 0xab, 0xfb, 0x5}, {0xe2, 0x7, 0x4, 0x160c}, {0xfffb, 0xa, 0xf, 0xb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xff01, 0xab, 0xfb, 0x5}, {0xe2, 0x7, 0x4, 0x160c}, {0xfffb, 0xa, 0xf, 0xb}]}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000200)) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000280)={'hsr0\x00', @ifru_data=&(0x7f0000000240)="01fd750e0a4716acb49cda468142043366b890ead6ce05808e039484c694a13b"}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0xed5d, 0x80, 0x7, 0x101}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0xed5d, 0x80, 0x7, 0x101}]}) setreuid(r3, r3) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000340)={0x9, 0x800, 0x5, 0x4, 0x3, "1068e1ebd0e77d25fff095bbebe57eb1f1687a"}) r5 = fsopen(&(0x7f0000000380)='erofs\x00', 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xce, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xce, &(0x7f0000000400), &(0x7f0000000440)=0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000004c0)={0x4, &(0x7f0000000480)=[{0x1, 0x2, 0x2e, 0xf1a8}, {0x6, 0x26, 0x0, 0xb}, {0x1, 0x0, 0xf6, 0x5}, {0x100, 0x60, 0x80, 0x1000}]}) epoll_pwait(r0, &(0x7f0000000500)=[{}, {}], 0x2, 0x10, &(0x7f0000000540)={[0xfffffffffffffff8]}, 0x8) (async) epoll_pwait(r0, &(0x7f0000000500)=[{}, {}], 0x2, 0x10, &(0x7f0000000540)={[0xfffffffffffffff8]}, 0x8) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000580)) ioctl$TCSBRK(r0, 0x5409, 0x8001) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) kcmp$KCMP_EPOLL_TFD(r2, r8, 0x7, r7, &(0x7f0000000600)={r0, r6, 0x1}) (async) kcmp$KCMP_EPOLL_TFD(r2, r8, 0x7, r7, &(0x7f0000000600)={r0, r6, 0x1}) flock(r5, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000006c0)={0x9, &(0x7f0000000640)=[{0x8c0, 0x6, 0x6, 0xc}, {0x3, 0x2, 0x2, 0x5}, {0xd9fe, 0x56, 0x1, 0x5}, {0x7, 0x2, 0x0, 0xfe83}, {0x9, 0x5, 0x1, 0x8}, {0x363, 0x4, 0x8, 0x101}, {0x4, 0xf7, 0xe, 0x5}, {0xfff, 0x2, 0x2, 0xffffff80}, {0x6, 0x1, 0x2, 0xc}]}) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000700)={'mangle\x00', 0xa0, "c3552c97be7c655005ac14b06a8d1c528684346c709d6795cd093b7156f2628022505503ea82ffe94a35b28a0d3b1037a6546dad11dd827c4199f043de08fc3ccb9362b9beff3e42d5c0ea67551712c90debb6d2dce1bee1ba6334dcebd98b3d86c21b430f1d85339fa1f3e113096e5fdd794648ff58e9e226972ef9608f782873c2a71931ee587c83a20faa7d0c6d0d2f8515bbe1ddbdfc5a4e51d3d14aa1e5"}, &(0x7f0000000800)=0xc4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r6, &(0x7f0000000840)={0x10000000}) fsmount(r5, 0x1, 0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000880), 0x103801, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000c80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000900)={0x31c, 0x3d, 0x300, 0x70bd28, 0x25dfdbfd, {0xd}, [@nested={0x8, 0x2a, 0x0, 0x1, [@nested={0x4, 0x14b}]}, @nested={0x27b, 0x103, 0x0, 0x1, [@generic="2b38e95efdb7acac2c49b3d779a86621d2d0747b2bf0f836e7d87f95a870523f89c7aaaa4fde15c8004441b60a597ea0c10b17140ac8dc76ea8aff57a90676a9ad2f7faa95cb567c20f31b3951c60097d9595ae6f6164ada8f44d17632dc9f037261bed7b2a28045d1b0929c937ce3ecfd1b889d83223ab0883e552d3d77043dacb93f6f5081817cacfa4336b433c02fe825e1714face3f13c2a8d25a2d863e7c862330755765e4e24af724c84d032d5cef458c1e7678731de515ec6bf634707327b28cac3ccc675339355d3d0968783", @generic="a0b3f08aeeb9c5a1765fb3a6484cab522e823b219cc3e581a8df47431cef2364e1542c8232038bb4b56c64a90984a0213e9b18ccc858a7d93673cf982a132ff418aeebab9e2db50055783cfd93b8904cdacb309d0de752659be72ff486abfa6411401de7513a5637a3362da9d3a4ac8d16fe54fe8f01f7c50f8f505be457be0c0126d66446bffefc18761c5a625098599829ccd7", @nested={0x4, 0x86}, @typed={0x8, 0xa, 0x0, 0x0, @pid=r2}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0xff}, @generic="d24ff39cba36fb33d25e78a3a940f104b0c5b022f5fa1331f9391b9dd49d62d507caa8f5c4e0e30931df62c83f7c1f9b84b4e94166724fc80fa39e3d254027a7957c826c547a501ad4ef13c58c9bb70edaeb7f9428b5cb043c4430fbcc2c221ee443a41582f1dae0dcb89537ac4bec2da6a58a51bd1715c91acef41d37de2382e5a2346aa8abfbf26720f2fc41e3bb7a0173e4bee01a0856b302c5928b5a7fc441bb61ab4f2ef4c36ab8ccd2241508f1c72a4f4b987047c7e221861c401d0ab9d282919073d675c0dd3d2c32c51384882103bf0dc07a04559280511d80f9925bce3606f96373957657ba010a4721", @nested={0x4, 0x134}, @generic="56a7f4a9f3"]}, @generic="5fbfcfc2a3000a5038acde386e3069d7d2d5d0d96181f29484f69660b4928d9015e53636267120840fb752e74bf21d5a0d6f8c1c07aecda11c0161e4849c2783883f8bc41e978fd48b87b8adf97a1d287ebbb776f994f12e6c280f2f06753a9b36121225548e1489a51521f67348b13d28e3ea105f770eb9f41cd81ea691e7ab509e"]}, 0x31c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 48.292995ms ago: executing program 4 (id=9612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc080001800000000708000340"], 0x548}}, 0x0) (fail_nth: 3) 1.046739ms ago: executing program 4 (id=9613): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) 495.33µs ago: executing program 1 (id=9614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800"], 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0009000000cd72009f6f480000030000850000001b000000b70000000000020095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) mkdirat(0xffffffffffffffff, 0x0, 0x1c2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = epoll_create1(0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)={0x50002011}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1e, 0x80004, 0x0) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r11 = dup3(r10, r9, 0x0) recvmmsg(r11, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) ioctl$RNDZAPENTCNT(r11, 0x5204, &(0x7f0000000000)=0x6) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000007b660000400000000101000004010000", @ANYRES32=r0, @ANYBLOB='\t\x00'/20, @ANYRES32=r14, @ANYRES32, @ANYBLOB="050000000501000000004000"/28], 0x50) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r13, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x10) 166.969µs ago: executing program 3 (id=9615): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000d00)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xc, 0x80005, 0xed, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) dup3(r4, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001100)=0x12) syz_clone(0x2204080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 0s ago: executing program 4 (id=9616): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000d00)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xc, 0x80005, 0xed, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x80) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b14010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) dup3(r4, r3, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001100)=0x12) syz_clone(0x2204080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): tered blocking state [ 558.998126][T28383] bridge0: port 20(batadv21) entered disabled state [ 559.004946][T28383] batadv21: entered allmulticast mode [ 559.013625][T28383] batadv21: entered promiscuous mode [ 559.017803][T28384] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 559.026562][T28384] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 559.066686][T28386] __nla_validate_parse: 11 callbacks suppressed [ 559.066703][T28386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8836'. [ 559.082374][T28386] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8836'. [ 559.195944][T28394] bridge0: entered promiscuous mode [ 559.212331][T28394] macsec1: entered promiscuous mode [ 559.224021][T28394] bridge0: port 6(macsec1) entered blocking state [ 559.230585][T28394] bridge0: port 6(macsec1) entered disabled state [ 559.243796][T28394] macsec1: entered allmulticast mode [ 559.249161][T28394] bridge0: entered allmulticast mode [ 559.264562][T28394] macsec1: left allmulticast mode [ 559.269643][T28394] bridge0: left allmulticast mode [ 559.277228][T28394] bridge0: left promiscuous mode [ 559.395738][T28401] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 559.403139][T28401] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 559.483614][ T1938] batman_adv: batadv21: No IGMP Querier present - multicast optimizations disabled [ 559.492979][ T1938] batman_adv: batadv21: No MLD Querier present - multicast optimizations disabled [ 559.777813][T28411] lo speed is unknown, defaulting to 1000 [ 560.041067][T28424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8848'. [ 560.050980][T28424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8848'. [ 560.299072][T28432] bridge0: port 21(batadv22) entered blocking state [ 560.305771][T28432] bridge0: port 21(batadv22) entered disabled state [ 560.377914][T28432] batadv22: entered allmulticast mode [ 560.390009][T28432] batadv22: entered promiscuous mode [ 560.688558][T28440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8855'. [ 560.692618][T28438] veth1_to_batadv: entered promiscuous mode [ 560.716236][T28440] selinux_netlink_send: 4 callbacks suppressed [ 560.716250][T28440] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28440 comm=syz.1.8855 [ 560.754772][T28443] block device autoloading is deprecated and will be removed. [ 560.790300][ T4654] batman_adv: batadv22: No IGMP Querier present - multicast optimizations disabled [ 560.799710][ T4654] batman_adv: batadv22: No MLD Querier present - multicast optimizations disabled [ 561.139544][T28455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8860'. [ 561.149450][T28455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8860'. [ 561.603326][T28470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8867'. [ 561.623185][T28468] loop2: detected capacity change from 0 to 512 [ 561.707838][T28475] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28475 comm=syz.0.8867 [ 561.835819][T28468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 561.852752][T28468] System zones: 1-12 [ 561.866868][T28468] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.8866: error while reading EA inode 32 err=-116 [ 561.903151][T28468] EXT4-fs (loop2): Remounting filesystem read-only [ 561.909745][T28468] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 561.956371][T28468] EXT4-fs (loop2): 1 orphan inode deleted [ 561.971891][T28488] bridge0: port 6(batadv4) entered blocking state [ 561.978429][T28488] bridge0: port 6(batadv4) entered disabled state [ 561.995853][T28468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.008528][T28488] batadv4: entered allmulticast mode [ 562.021721][T28488] batadv4: entered promiscuous mode [ 562.055054][T21465] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.454593][ T4654] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 562.463943][ T4654] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 563.105585][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 563.105604][ T29] audit: type=1326 audit(1350.580:49872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.8879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 563.135032][ T29] audit: type=1326 audit(1350.580:49873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.8879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 563.158132][ T29] audit: type=1326 audit(1350.580:49874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.8879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 563.181195][ T29] audit: type=1326 audit(1350.580:49875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.8879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 563.204393][ T29] audit: type=1326 audit(1350.580:49876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.8879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 563.227576][ T29] audit: type=1326 audit(1350.580:49877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.8879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 563.250800][ T29] audit: type=1326 audit(1350.580:49878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.8879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 563.273958][ T29] audit: type=1326 audit(1350.590:49879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.8879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 563.297137][ T29] audit: type=1326 audit(1350.590:49880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.8879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 563.349081][ T29] audit: type=1326 audit(1350.821:49881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.8879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 563.362987][T28508] tipc: Enabled bearer , priority 0 [ 563.411744][T28507] tipc: Resetting bearer [ 563.428481][T28507] tipc: Disabling bearer [ 563.432861][T28512] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8882'. [ 563.444706][T28512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8882'. [ 563.458946][T28514] bridge0: port 16(batadv16) entered blocking state [ 563.465741][T28514] bridge0: port 16(batadv16) entered disabled state [ 563.472493][T28514] batadv16: entered allmulticast mode [ 563.478445][T28514] batadv16: entered promiscuous mode [ 563.740544][T28527] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 563.756633][T28527] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 563.951601][T28533] lo speed is unknown, defaulting to 1000 [ 563.966637][ T4604] batman_adv: batadv16: No IGMP Querier present - multicast optimizations disabled [ 563.976019][ T4604] batman_adv: batadv16: No MLD Querier present - multicast optimizations disabled [ 564.232952][T28545] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 564.254480][T28545] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 564.299615][T28549] tipc: Started in network mode [ 564.304591][T28549] tipc: Node identity deac534ca768, cluster identity 4711 [ 564.311844][T28549] tipc: Enabled bearer , priority 0 [ 564.339388][ T4654] tipc: Resetting bearer [ 564.507428][T28547] tipc: Resetting bearer [ 564.548741][T28547] tipc: Disabling bearer [ 564.565691][T28557] bridge0: port 3(batadv1) entered blocking state [ 564.572342][T28557] bridge0: port 3(batadv1) entered disabled state [ 564.579146][T28557] batadv1: entered allmulticast mode [ 564.585039][T28557] batadv1: entered promiscuous mode [ 565.045595][ T4620] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 565.054902][ T4620] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 565.770233][T28587] bridge0: entered promiscuous mode [ 565.800140][T28587] macsec0: entered promiscuous mode [ 565.827413][T28590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28590 comm=syz.2.8907 [ 565.840117][T28590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28590 comm=syz.2.8907 [ 565.897984][T28587] bridge0: port 17(macsec0) entered blocking state [ 565.904671][T28587] bridge0: port 17(macsec0) entered disabled state [ 565.933259][T28587] macsec0: entered allmulticast mode [ 565.938701][T28587] bridge0: entered allmulticast mode [ 565.954633][T28587] macsec0: left allmulticast mode [ 565.959779][T28587] bridge0: left allmulticast mode [ 565.966642][T28587] bridge0: left promiscuous mode [ 566.007287][T28581] tipc: Started in network mode [ 566.012206][T28581] tipc: Node identity 6e0b1bbd5e15, cluster identity 4711 [ 566.019476][T28581] tipc: Enabled bearer , priority 0 [ 566.081566][T28597] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 566.089050][T28597] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 566.117334][T28580] tipc: Resetting bearer [ 566.140442][T28580] tipc: Disabling bearer [ 566.309217][T28608] bridge0: port 7(batadv5) entered blocking state [ 566.315771][T28608] bridge0: port 7(batadv5) entered disabled state [ 566.324363][T28610] __nla_validate_parse: 2 callbacks suppressed [ 566.324408][T28610] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8915'. [ 566.487952][T28608] batadv5: entered allmulticast mode [ 566.503538][T28608] batadv5: entered promiscuous mode [ 566.817190][ T4604] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 566.826482][ T4604] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 566.845671][T28622] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28622 comm=syz.1.8915 [ 566.900283][T28624] sctp: [Deprecated]: syz.0.8918 (pid 28624) Use of int in maxseg socket option. [ 566.900283][T28624] Use struct sctp_assoc_value instead [ 567.040862][T28614] bridge0: port 4(batadv2) entered blocking state [ 567.047401][T28614] bridge0: port 4(batadv2) entered disabled state [ 567.068018][T28614] batadv2: entered allmulticast mode [ 567.318579][T28626] block device autoloading is deprecated and will be removed. [ 567.346770][T28614] batadv2: entered promiscuous mode [ 567.529725][T28640] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 567.547637][T28640] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 567.557319][ T4620] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 567.566668][ T4620] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 567.576207][T28641] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 567.588439][T28641] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 567.628393][T28644] bridge0: port 8(batadv6) entered blocking state [ 567.634933][T28644] bridge0: port 8(batadv6) entered disabled state [ 567.655139][T28644] batadv6: entered allmulticast mode [ 567.660898][T28644] batadv6: entered promiscuous mode [ 567.735572][T28645] bridge: RTM_NEWNEIGH with invalid ether address [ 567.798713][T28647] tipc: Enabled bearer , priority 0 [ 567.827015][T28646] tipc: Resetting bearer [ 567.862470][T28646] tipc: Disabling bearer [ 568.096182][T28656] sctp: [Deprecated]: syz.0.8929 (pid 28656) Use of int in maxseg socket option. [ 568.096182][T28656] Use struct sctp_assoc_value instead [ 568.120772][ T4620] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 568.130340][ T4620] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 568.174111][T28658] loop0: detected capacity change from 0 to 512 [ 568.219851][T28658] __quota_error: 52 callbacks suppressed [ 568.219924][T28658] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 568.235845][T28658] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 568.245857][T28658] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8930: Failed to acquire dquot type 1 [ 568.291999][T28663] bridge0: port 4(batadv3) entered blocking state [ 568.298612][T28663] bridge0: port 4(batadv3) entered disabled state [ 568.317552][T28658] EXT4-fs (loop0): 1 truncate cleaned up [ 568.323803][T28658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.349109][T28663] batadv3: entered allmulticast mode [ 568.375935][T28663] batadv3: entered promiscuous mode [ 568.500662][T28667] bridge0: entered promiscuous mode [ 568.514266][T28667] macsec2: entered promiscuous mode [ 568.521485][T28667] bridge0: port 9(macsec2) entered blocking state [ 568.528040][T28667] bridge0: port 9(macsec2) entered disabled state [ 568.549878][T28668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28668 comm=syz.4.8932 [ 568.562498][T28668] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28668 comm=syz.4.8932 [ 568.587909][T28667] macsec2: entered allmulticast mode [ 568.593289][T28667] bridge0: entered allmulticast mode [ 568.611451][T28667] macsec2: left allmulticast mode [ 568.616575][T28667] bridge0: left allmulticast mode [ 568.630777][T28667] bridge0: left promiscuous mode [ 568.725100][T20329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.746342][T28672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8935'. [ 568.774003][ T4604] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 568.783314][ T4604] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 568.809779][T28672] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28672 comm=syz.3.8935 [ 568.867272][T28678] bridge0: port 22(batadv23) entered blocking state [ 568.873991][T28678] bridge0: port 22(batadv23) entered disabled state [ 568.880805][T28678] batadv23: entered allmulticast mode [ 568.887042][T28678] batadv23: entered promiscuous mode [ 569.381701][ T4614] batman_adv: batadv23: No IGMP Querier present - multicast optimizations disabled [ 569.391178][ T4614] batman_adv: batadv23: No MLD Querier present - multicast optimizations disabled [ 569.423401][T28690] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8940'. [ 569.513719][T28691] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28691 comm=syz.1.8940 [ 569.762805][T28702] sctp: [Deprecated]: syz.0.8945 (pid 28702) Use of int in maxseg socket option. [ 569.762805][T28702] Use struct sctp_assoc_value instead [ 569.975796][T28711] loop0: detected capacity change from 0 to 512 [ 570.045915][T28711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 570.076213][T28711] System zones: 1-12 [ 570.103735][T28711] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.8948: error while reading EA inode 32 err=-116 [ 570.155766][T28711] EXT4-fs (loop0): Remounting filesystem read-only [ 570.162415][T28711] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 570.229482][T28711] EXT4-fs (loop0): 1 orphan inode deleted [ 570.262105][T28711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.299724][T28725] sctp: [Deprecated]: syz.1.8954 (pid 28725) Use of int in maxseg socket option. [ 570.299724][T28725] Use struct sctp_assoc_value instead [ 570.315622][T28727] bridge0: port 5(batadv3) entered blocking state [ 570.322068][T28727] bridge0: port 5(batadv3) entered disabled state [ 570.379107][T28727] batadv3: entered allmulticast mode [ 570.393314][T20329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.413656][T28727] batadv3: entered promiscuous mode [ 570.669708][ T29] audit: type=1326 audit(1358.537:49934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.2.8958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 570.695069][ T29] audit: type=1326 audit(1358.537:49935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.2.8958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 570.718289][ T29] audit: type=1326 audit(1358.537:49936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.2.8958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 570.741360][ T29] audit: type=1326 audit(1358.537:49937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.2.8958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 570.764559][ T29] audit: type=1326 audit(1358.537:49938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.2.8958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 570.787993][ T29] audit: type=1326 audit(1358.537:49939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.2.8958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 570.803227][T28736] loop0: detected capacity change from 0 to 512 [ 570.811196][ T29] audit: type=1326 audit(1358.537:49940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.2.8958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 570.811245][ T29] audit: type=1326 audit(1358.537:49941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28732 comm="syz.2.8958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 570.829751][T28730] veth1_to_batadv: entered promiscuous mode [ 570.849481][ T4614] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 570.878918][ T4614] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 570.904618][T28736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 570.912623][T28736] System zones: 1-12 [ 570.918362][T28736] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.8956: error while reading EA inode 32 err=-116 [ 570.931341][T28736] EXT4-fs (loop0): Remounting filesystem read-only [ 570.937914][T28736] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 570.948302][T28736] EXT4-fs (loop0): 1 orphan inode deleted [ 570.954808][T28736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.960843][T28740] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8960'. [ 570.986181][T20329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.024197][T28740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8960'. [ 571.051621][T28740] bond2: entered promiscuous mode [ 571.056927][T28740] bond2: entered allmulticast mode [ 571.062240][T28740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.081865][T28740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8960'. [ 571.110140][T28758] FAULT_INJECTION: forcing a failure. [ 571.110140][T28758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.123377][T28758] CPU: 0 UID: 0 PID: 28758 Comm: syz.3.8966 Tainted: G W 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 571.123408][T28758] Tainted: [W]=WARN [ 571.123414][T28758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.123503][T28758] Call Trace: [ 571.123509][T28758] [ 571.123515][T28758] __dump_stack+0x1d/0x30 [ 571.123534][T28758] dump_stack_lvl+0xe8/0x140 [ 571.123553][T28758] dump_stack+0x15/0x1b [ 571.123572][T28758] should_fail_ex+0x265/0x280 [ 571.123659][T28758] should_fail+0xb/0x20 [ 571.123679][T28758] should_fail_usercopy+0x1a/0x20 [ 571.123703][T28758] _copy_from_user+0x1c/0xb0 [ 571.123730][T28758] __sys_bpf+0x178/0x7b0 [ 571.123837][T28758] __x64_sys_bpf+0x41/0x50 [ 571.123863][T28758] x64_sys_call+0x2aea/0x2ff0 [ 571.123886][T28758] do_syscall_64+0xd2/0x200 [ 571.123914][T28758] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 571.123936][T28758] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 571.124034][T28758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.124053][T28758] RIP: 0033:0x7f7da32febe9 [ 571.124101][T28758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.124159][T28758] RSP: 002b:00007f7da1d5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 571.124179][T28758] RAX: ffffffffffffffda RBX: 00007f7da3525fa0 RCX: 00007f7da32febe9 [ 571.124195][T28758] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 571.124322][T28758] RBP: 00007f7da1d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 571.124338][T28758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.124354][T28758] R13: 00007f7da3526038 R14: 00007f7da3525fa0 R15: 00007fff71385f18 [ 571.124380][T28758] [ 571.129756][T28759] loop0: detected capacity change from 0 to 1024 [ 571.314195][T28759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 571.321596][T28759] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 571.332383][T28763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8969'. [ 571.333302][T28759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.354427][T28759] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.406210][T28763] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28763 comm=syz.4.8969 [ 571.497169][T28776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8974'. [ 571.631803][T28791] block device autoloading is deprecated and will be removed. [ 571.772769][T28800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8984'. [ 571.782547][T28800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8984'. [ 571.947870][T28816] bridge0: entered promiscuous mode [ 571.957343][T28816] macsec1: entered promiscuous mode [ 571.963796][T28816] bridge0: port 6(macsec1) entered blocking state [ 571.970430][T28816] bridge0: port 6(macsec1) entered disabled state [ 571.977245][T28816] macsec1: entered allmulticast mode [ 571.982700][T28816] bridge0: entered allmulticast mode [ 571.988667][T28816] macsec1: left allmulticast mode [ 571.993302][T28820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28820 comm=syz.3.8989 [ 571.993819][T28816] bridge0: left allmulticast mode [ 572.006300][T28820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28820 comm=syz.3.8989 [ 572.051898][T28816] bridge0: left promiscuous mode [ 572.117618][T28827] : renamed from bond0 (while UP) [ 572.175914][T28832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8997'. [ 572.192598][T28832] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28832 comm=syz.4.8997 [ 572.287419][T28840] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9001'. [ 572.297937][T28840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9001'. [ 572.307703][T28840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9001'. [ 572.322381][T28840] bond3: entered promiscuous mode [ 572.327461][T28840] bond3: entered allmulticast mode [ 572.332893][T28840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 572.346865][T28840] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9001'. [ 572.376517][T28844] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9002'. [ 572.635224][T28857] bridge0: port 23(batadv24) entered blocking state [ 572.642068][T28857] bridge0: port 23(batadv24) entered disabled state [ 572.648966][T28857] batadv24: entered allmulticast mode [ 572.655472][T28857] batadv24: entered promiscuous mode [ 572.816604][T28869] bond1: entered promiscuous mode [ 572.821767][T28869] bond1: entered allmulticast mode [ 572.827162][T28869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.844613][T28871] bond1: entered promiscuous mode [ 572.849751][T28871] bond1: entered allmulticast mode [ 572.868366][T28871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.127274][ T4620] batman_adv: batadv24: No IGMP Querier present - multicast optimizations disabled [ 573.136666][ T4620] batman_adv: batadv24: No MLD Querier present - multicast optimizations disabled [ 573.224762][T28890] loop4: detected capacity change from 0 to 512 [ 573.247282][T28890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 573.263001][T28894] bridge0: entered promiscuous mode [ 573.268449][T28894] macsec1: entered promiscuous mode [ 573.269887][T28890] System zones: 1-12 [ 573.274746][T28894] bridge0: port 6(macsec1) entered blocking state [ 573.284261][T28894] bridge0: port 6(macsec1) entered disabled state [ 573.295338][T28890] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.9021: error while reading EA inode 32 err=-116 [ 573.307935][T28890] EXT4-fs (loop4): Remounting filesystem read-only [ 573.314598][T28890] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 573.326698][T28890] EXT4-fs (loop4): 1 orphan inode deleted [ 573.332966][T28890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.345716][T28894] macsec1: entered allmulticast mode [ 573.351034][T28894] bridge0: entered allmulticast mode [ 573.381006][T28901] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28901 comm=syz.3.9022 [ 573.393668][T28901] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28901 comm=syz.3.9022 [ 573.412420][T27559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.434694][T28894] macsec1: left allmulticast mode [ 573.439868][T28894] bridge0: left allmulticast mode [ 573.483743][T28894] bridge0: left promiscuous mode [ 573.574057][T28896] lo speed is unknown, defaulting to 1000 [ 573.736141][T28909] sctp: [Deprecated]: syz.4.9026 (pid 28909) Use of int in maxseg socket option. [ 573.736141][T28909] Use struct sctp_assoc_value instead [ 573.872313][T28917] bridge0: entered promiscuous mode [ 573.884590][T28917] macsec2: entered promiscuous mode [ 573.898389][T28917] bridge0: port 9(macsec2) entered blocking state [ 573.905103][T28917] bridge0: port 9(macsec2) entered disabled state [ 573.929721][T28917] macsec2: entered allmulticast mode [ 573.930003][T28920] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28920 comm=syz.4.9028 [ 573.935223][T28917] bridge0: entered allmulticast mode [ 573.947702][T28920] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28920 comm=syz.4.9028 [ 573.972940][T28917] macsec2: left allmulticast mode [ 573.978129][T28917] bridge0: left allmulticast mode [ 573.993277][T28917] bridge0: left promiscuous mode [ 574.170900][T28929] bridge0: port 17(batadv17) entered blocking state [ 574.177642][T28929] bridge0: port 17(batadv17) entered disabled state [ 574.184445][T28929] batadv17: entered allmulticast mode [ 574.191409][T28929] batadv17: entered promiscuous mode [ 574.279055][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 574.279070][ T29] audit: type=1326 audit(1362.327:50068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28931 comm="syz.0.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919794ebe9 code=0x7ffc0000 [ 574.308528][ T29] audit: type=1326 audit(1362.327:50069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28931 comm="syz.0.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919794ebe9 code=0x7ffc0000 [ 574.333400][ T29] audit: type=1326 audit(1362.359:50070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28931 comm="syz.0.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f919794ebe9 code=0x7ffc0000 [ 574.356544][ T29] audit: type=1326 audit(1362.359:50071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28931 comm="syz.0.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919794ebe9 code=0x7ffc0000 [ 574.379664][ T29] audit: type=1326 audit(1362.359:50072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28931 comm="syz.0.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f919794ebe9 code=0x7ffc0000 [ 574.402790][ T29] audit: type=1326 audit(1362.359:50073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28931 comm="syz.0.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919794ebe9 code=0x7ffc0000 [ 574.426073][ T29] audit: type=1326 audit(1362.359:50074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28931 comm="syz.0.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f919794ebe9 code=0x7ffc0000 [ 574.449135][ T29] audit: type=1326 audit(1362.359:50075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28931 comm="syz.0.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919794ebe9 code=0x7ffc0000 [ 574.472188][ T29] audit: type=1326 audit(1362.359:50076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28931 comm="syz.0.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f919794ebe9 code=0x7ffc0000 [ 574.495283][ T29] audit: type=1326 audit(1362.359:50077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28931 comm="syz.0.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919794ebe9 code=0x7ffc0000 [ 574.540404][T28938] netlink: 'syz.1.9037': attribute type 29 has an invalid length. [ 574.671180][ T4614] batman_adv: batadv17: No IGMP Querier present - multicast optimizations disabled [ 574.680556][ T4614] batman_adv: batadv17: No MLD Querier present - multicast optimizations disabled [ 574.776466][T28944] lo speed is unknown, defaulting to 1000 [ 574.796277][T28949] bond2: entered promiscuous mode [ 574.801560][T28949] bond2: entered allmulticast mode [ 574.807000][T28949] 8021q: adding VLAN 0 to HW filter on device bond2 [ 574.935466][T28944] chnl_net:caif_netlink_parms(): no params data found [ 575.061506][T28944] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.068676][T28944] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.079048][T28944] bridge_slave_0: entered allmulticast mode [ 575.094794][T28944] bridge_slave_0: entered promiscuous mode [ 575.122900][T28981] bridge0: entered promiscuous mode [ 575.129849][T28981] macsec2: entered promiscuous mode [ 575.136293][T28981] bridge0: port 9(macsec2) entered blocking state [ 575.142783][T28981] bridge0: port 9(macsec2) entered disabled state [ 575.149428][T28981] macsec2: entered allmulticast mode [ 575.154787][T28981] bridge0: entered allmulticast mode [ 575.160699][T28986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28986 comm=syz.4.9049 [ 575.173362][T28986] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=28986 comm=syz.4.9049 [ 575.186233][T28981] macsec2: left allmulticast mode [ 575.191315][T28981] bridge0: left allmulticast mode [ 575.197181][T28981] bridge0: left promiscuous mode [ 575.206621][T28944] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.213762][T28944] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.222320][T28944] bridge_slave_1: entered allmulticast mode [ 575.229109][T28944] bridge_slave_1: entered promiscuous mode [ 575.241392][T28985] bond3: entered promiscuous mode [ 575.246454][T28985] bond3: entered allmulticast mode [ 575.264290][T28985] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.327626][T28944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.338650][T28944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.373884][T28996] bridge0: entered promiscuous mode [ 575.393616][T28996] macsec1: entered promiscuous mode [ 575.400266][T28996] bridge0: port 5(macsec1) entered blocking state [ 575.406732][T28996] bridge0: port 5(macsec1) entered disabled state [ 575.433285][T28996] macsec1: entered allmulticast mode [ 575.438853][T28996] bridge0: entered allmulticast mode [ 575.446196][T28998] block device autoloading is deprecated and will be removed. [ 575.461664][T28996] macsec1: left allmulticast mode [ 575.466944][T28996] bridge0: left allmulticast mode [ 575.474200][T28996] bridge0: left promiscuous mode [ 575.483799][T28944] team0: Port device team_slave_0 added [ 575.506866][T28944] team0: Port device team_slave_1 added [ 575.546772][T28944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.553976][T28944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.580061][T28944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.597390][T28944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.604403][T28944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.630481][T28944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.674660][ T4624] batadv24: left allmulticast mode [ 575.679925][ T4624] batadv24: left promiscuous mode [ 575.685053][ T4624] bridge0: port 23(batadv24) entered disabled state [ 575.693285][ T4624] batadv23: left allmulticast mode [ 575.698458][ T4624] batadv23: left promiscuous mode [ 575.703592][ T4624] bridge0: port 22(batadv23) entered disabled state [ 575.710892][ T4624] batadv22: left allmulticast mode [ 575.716054][ T4624] batadv22: left promiscuous mode [ 575.721225][ T4624] bridge0: port 21(batadv22) entered disabled state [ 575.728868][ T4624] batadv21: left allmulticast mode [ 575.734041][ T4624] batadv21: left promiscuous mode [ 575.739197][ T4624] bridge0: port 20(batadv21) entered disabled state [ 575.746676][ T4624] batadv20: left allmulticast mode [ 575.751800][ T4624] batadv20: left promiscuous mode [ 575.757096][ T4624] bridge0: port 19(batadv20) entered disabled state [ 575.765354][ T4624] batadv19: left allmulticast mode [ 575.770479][ T4624] batadv19: left promiscuous mode [ 575.775756][ T4624] bridge0: port 18(batadv19) entered disabled state [ 575.784851][ T4624] batadv18: left allmulticast mode [ 575.789981][ T4624] batadv18: left promiscuous mode [ 575.795232][ T4624] bridge0: port 17(batadv18) entered disabled state [ 575.803129][ T4624] batadv17: left allmulticast mode [ 575.808285][ T4624] batadv17: left promiscuous mode [ 575.813481][ T4624] bridge0: port 16(batadv17) entered disabled state [ 575.821779][ T4624] batadv16: left allmulticast mode [ 575.827060][ T4624] batadv16: left promiscuous mode [ 575.832331][ T4624] bridge0: port 15(batadv16) entered disabled state [ 575.842355][ T4624] batadv15: left allmulticast mode [ 575.847555][ T4624] batadv15: left promiscuous mode [ 575.852681][ T4624] bridge0: port 14(batadv15) entered disabled state [ 575.870035][T29008] loop4: detected capacity change from 0 to 128 [ 575.877372][ T4624] batadv12: left allmulticast mode [ 575.882573][ T4624] batadv12: left promiscuous mode [ 575.883821][T29008] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 575.888007][ T4624] bridge0: port 13(batadv12) entered disabled state [ 575.921888][ T4624] batadv11: left allmulticast mode [ 575.927100][ T4624] batadv11: left promiscuous mode [ 575.932257][ T4624] bridge0: port 12(batadv11) entered disabled state [ 575.957197][ T4624] batadv10: left allmulticast mode [ 575.962471][ T4624] batadv10: left promiscuous mode [ 575.967752][ T4624] bridge0: port 11(batadv10) entered disabled state [ 575.975548][ T4624] batadv8: left allmulticast mode [ 575.980647][ T4624] batadv8: left promiscuous mode [ 575.985710][ T4624] bridge0: port 10(batadv8) entered disabled state [ 575.993231][ T4624] batadv7: left allmulticast mode [ 575.998293][ T4624] batadv7: left promiscuous mode [ 576.003418][ T4624] bridge0: port 9(batadv7) entered disabled state [ 576.010733][ T4624] batadv6: left allmulticast mode [ 576.015789][ T4624] batadv6: left promiscuous mode [ 576.021006][ T4624] bridge0: port 8(batadv6) entered disabled state [ 576.027892][ T4624] batadv5: left allmulticast mode [ 576.033096][ T4624] batadv5: left promiscuous mode [ 576.038181][ T4624] bridge0: port 7(batadv5) entered disabled state [ 576.045198][ T4624] batadv4: left allmulticast mode [ 576.050604][ T4624] batadv4: left promiscuous mode [ 576.055738][ T4624] bridge0: port 6(batadv4) entered disabled state [ 576.062933][ T4624] batadv3: left allmulticast mode [ 576.068020][ T4624] batadv3: left promiscuous mode [ 576.073092][ T4624] bridge0: port 5(batadv3) entered disabled state [ 576.080569][ T4624] batadv2: left allmulticast mode [ 576.085713][ T4624] batadv2: left promiscuous mode [ 576.090817][ T4624] bridge0: port 4(batadv2) entered disabled state [ 576.098130][ T4624] batadv1: left allmulticast mode [ 576.103231][ T4624] batadv1: left promiscuous mode [ 576.108379][ T4624] bridge0: port 3(batadv1) entered disabled state [ 576.120030][ T4624] bridge_slave_1: left allmulticast mode [ 576.125785][ T4624] bridge_slave_1: left promiscuous mode [ 576.131499][ T4624] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.141723][ T4624] bridge_slave_0: left allmulticast mode [ 576.147455][ T4624] bridge_slave_0: left promiscuous mode [ 576.153326][ T4624] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.162085][ T4624] batman_adv: batadv12: Interface deactivated: bond3 [ 576.168884][ T4624] batman_adv: batadv12: Interface deactivated: bond4 [ 576.188403][ T4624] batman_adv: batadv12: Interface deactivated: bond5 [ 576.258825][ T4624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.268217][ T4624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.277652][ T4624] bond0 (unregistering): Released all slaves [ 576.287084][ T4624] batman_adv: batadv12: Removing interface: bond1 [ 576.294094][ T4624] bond1 (unregistering): Released all slaves [ 576.302810][ T4624] batman_adv: batadv12: Removing interface: bond2 [ 576.309828][ T4624] bond2 (unregistering): Released all slaves [ 576.318694][ T4624] batman_adv: batadv12: Removing interface: bond3 [ 576.326023][ T4624] bond3 (unregistering): Released all slaves [ 576.335524][ T4624] batman_adv: batadv12: Removing interface: bond4 [ 576.342624][ T4624] bond4 (unregistering): Released all slaves [ 576.351246][ T4624] batman_adv: batadv12: Removing interface: bond5 [ 576.358578][ T4624] bond5 (unregistering): Released all slaves [ 576.416405][ T4624] tipc: Left network mode [ 576.422101][T27559] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 576.452137][T28944] hsr_slave_0: entered promiscuous mode [ 576.476324][T28944] hsr_slave_1: entered promiscuous mode [ 576.484280][T28944] debugfs: 'hsr0' already exists in 'hsr' [ 576.490107][T28944] Cannot create hsr debugfs directory [ 576.500654][ T4624] hsr_slave_0: left promiscuous mode [ 576.524226][ T4624] hsr_slave_1: left promiscuous mode [ 576.532209][ T4624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.546115][T29023] block device autoloading is deprecated and will be removed. [ 576.572114][ T4624] pim6reg (unregistering): left allmulticast mode [ 576.579017][T29032] __nla_validate_parse: 21 callbacks suppressed [ 576.579034][T29032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9066'. [ 576.637586][ T4624] team0 (unregistering): Port device team_slave_1 removed [ 576.652345][T29036] selinux_netlink_send: 2 callbacks suppressed [ 576.652357][T29036] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29036 comm=syz.4.9064 [ 576.671255][T29036] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29036 comm=syz.4.9064 [ 576.687248][ T4624] team0 (unregistering): Port device team_slave_0 removed [ 576.728998][ T3363] lo speed is unknown, defaulting to 1000 [ 576.734832][ T3363] infiniband syz0: ib_query_port failed (-19) [ 576.736306][T29033] bridge0: entered promiscuous mode [ 576.746405][T29033] macsec2: entered promiscuous mode [ 576.752768][T29033] bridge0: port 9(macsec2) entered blocking state [ 576.759292][T29033] bridge0: port 9(macsec2) entered disabled state [ 576.766263][T29033] macsec2: entered allmulticast mode [ 576.771663][T29033] bridge0: entered allmulticast mode [ 576.777599][T29033] macsec2: left allmulticast mode [ 576.782668][T29033] bridge0: left allmulticast mode [ 576.788480][T29033] bridge0: left promiscuous mode [ 576.834443][T29031] tipc: Enabled bearer , priority 0 [ 576.873037][T29044] bridge0: port 5(batadv4) entered blocking state [ 576.879598][T29044] bridge0: port 5(batadv4) entered disabled state [ 576.887558][T29044] batadv4: entered allmulticast mode [ 576.893368][T29044] batadv4: entered promiscuous mode [ 576.899400][T29030] tipc: Resetting bearer [ 576.912816][T29030] tipc: Disabling bearer [ 576.919719][T29042] tipc: Enabled bearer , priority 0 [ 576.950880][T29039] tipc: Resetting bearer [ 576.978604][T29039] tipc: Disabling bearer [ 577.045947][T29049] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9071'. [ 577.055869][T29048] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9071'. [ 577.098227][T29051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9072'. [ 577.107742][T29051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9072'. [ 577.141742][T29053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9073'. [ 577.150779][T29053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9073'. [ 577.179574][T29055] bridge0: port 6(batadv4) entered blocking state [ 577.186070][T29055] bridge0: port 6(batadv4) entered disabled state [ 577.192673][T29055] batadv4: entered allmulticast mode [ 577.198688][T29055] batadv4: entered promiscuous mode [ 577.346696][T28944] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 577.355892][T28944] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 577.359611][ T1938] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 577.372027][ T1938] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 577.384523][T28944] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 577.403107][T28944] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 577.513273][T28944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.526193][T28944] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.537524][ T4614] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.544661][ T4614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.565403][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.572556][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.635585][T28944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.661752][ T4620] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 577.671188][ T4620] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 577.724082][T29078] bridge0: port 6(batadv5) entered blocking state [ 577.730593][T29078] bridge0: port 6(batadv5) entered disabled state [ 577.738043][T29078] batadv5: entered allmulticast mode [ 577.744241][T29078] batadv5: entered promiscuous mode [ 577.769952][T28944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.787757][T29049] 9pnet_fd: p9_fd_create_tcp (29049): problem connecting socket to 127.0.0.1 [ 577.851248][T28944] veth0_vlan: entered promiscuous mode [ 577.885864][T28944] veth1_vlan: entered promiscuous mode [ 577.892741][T29088] tipc: Enabled bearer , priority 0 [ 577.900535][T29087] tipc: Resetting bearer [ 577.914468][T29091] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9081'. [ 577.917043][T29087] tipc: Disabling bearer [ 577.924481][T29091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9081'. [ 577.944273][T29091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9081'. [ 577.953072][T28944] veth0_macvtap: entered promiscuous mode [ 577.960943][T28944] veth1_macvtap: entered promiscuous mode [ 577.996379][T28944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.014118][T28944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.035884][ T4600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.058004][ T4600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.096182][ T4600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.108583][T29101] block device autoloading is deprecated and will be removed. [ 578.133540][ T4600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.200445][ T4624] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 578.209870][T29106] sctp: [Deprecated]: syz.0.9038 (pid 29106) Use of int in maxseg socket option. [ 578.209870][T29106] Use struct sctp_assoc_value instead [ 578.209800][ T4624] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 578.294191][T29116] loop4: detected capacity change from 0 to 512 [ 578.340322][T29116] EXT4-fs (loop4): too many log groups per flexible block group [ 578.348090][T29116] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 578.355407][T29116] EXT4-fs (loop4): mount failed [ 578.372185][T29122] bridge0: port 3(batadv1) entered blocking state [ 578.378670][T29122] bridge0: port 3(batadv1) entered disabled state [ 578.411141][T29122] batadv1: entered allmulticast mode [ 578.446243][T29122] batadv1: entered promiscuous mode [ 579.227417][T29148] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29148 comm=syz.2.9102 [ 579.291317][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 579.291334][ T29] audit: type=1326 audit(1367.587:50136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29152 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 579.441863][ T29] audit: type=1326 audit(1367.618:50137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29152 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 579.465031][ T29] audit: type=1326 audit(1367.618:50138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29152 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 579.488108][ T29] audit: type=1326 audit(1367.618:50139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29152 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 579.511240][ T29] audit: type=1326 audit(1367.618:50140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29152 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 579.534306][ T29] audit: type=1326 audit(1367.618:50141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29152 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 579.557393][ T29] audit: type=1326 audit(1367.629:50142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29152 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 579.580430][ T29] audit: type=1326 audit(1367.629:50143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29152 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 579.603532][ T29] audit: type=1326 audit(1367.629:50144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29152 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 579.626637][ T29] audit: type=1326 audit(1367.629:50145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29152 comm="syz.3.9104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 579.660381][ T4614] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 579.669745][ T4614] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 579.683202][T29159] bridge0: port 18(batadv18) entered blocking state [ 579.689854][T29159] bridge0: port 18(batadv18) entered disabled state [ 579.702329][T29159] batadv18: entered allmulticast mode [ 579.721733][T29159] batadv18: entered promiscuous mode [ 579.747928][T29164] block device autoloading is deprecated and will be removed. [ 579.822237][T29165] loop0: detected capacity change from 0 to 1024 [ 579.832070][T29165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 579.844886][T29165] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 579.859086][T29162] bridge0: entered promiscuous mode [ 579.865616][T29162] macsec1: entered promiscuous mode [ 579.883881][T29166] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29166 comm=syz.3.9106 [ 579.896584][T29166] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29166 comm=syz.3.9106 [ 579.919145][T29165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.937427][ T4641] batman_adv: batadv18: No IGMP Querier present - multicast optimizations disabled [ 579.946859][ T4641] batman_adv: batadv18: No MLD Querier present - multicast optimizations disabled [ 579.957873][T29165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.975075][T29162] bridge0: port 7(macsec1) entered blocking state [ 579.981610][T29162] bridge0: port 7(macsec1) entered disabled state [ 579.994910][T29162] macsec1: entered allmulticast mode [ 580.000246][T29162] bridge0: entered allmulticast mode [ 580.008763][T29162] macsec1: left allmulticast mode [ 580.013897][T29162] bridge0: left allmulticast mode [ 580.025419][T29162] bridge0: left promiscuous mode [ 580.349733][T29182] netlink: 'syz.2.9113': attribute type 29 has an invalid length. [ 580.378084][T29184] bridge0: port 19(batadv19) entered blocking state [ 580.384846][T29184] bridge0: port 19(batadv19) entered disabled state [ 580.400693][T29184] batadv19: entered allmulticast mode [ 580.406574][T29184] batadv19: entered promiscuous mode [ 580.512389][T29188] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29188 comm=syz.3.9115 [ 580.659973][T29195] bridge0: entered promiscuous mode [ 580.666834][T29195] macsec2: entered promiscuous mode [ 580.673300][T29195] bridge0: port 9(macsec2) entered blocking state [ 580.679808][T29195] bridge0: port 9(macsec2) entered disabled state [ 580.690755][T29195] macsec2: entered allmulticast mode [ 580.696174][T29195] bridge0: entered allmulticast mode [ 580.710391][T29196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29196 comm=syz.4.9118 [ 580.723047][T29196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29196 comm=syz.4.9118 [ 580.747772][T29195] macsec2: left allmulticast mode [ 580.752962][T29195] bridge0: left allmulticast mode [ 580.761059][T29195] bridge0: left promiscuous mode [ 580.866965][ T4614] batman_adv: batadv19: No IGMP Querier present - multicast optimizations disabled [ 580.876437][ T4614] batman_adv: batadv19: No MLD Querier present - multicast optimizations disabled [ 581.002211][T29214] netlink: 'syz.3.9126': attribute type 29 has an invalid length. [ 581.609033][T29224] bridge0: port 7(batadv6) entered blocking state [ 581.615732][T29224] bridge0: port 7(batadv6) entered disabled state [ 581.867879][T29224] batadv6: entered allmulticast mode [ 581.896787][T29224] batadv6: entered promiscuous mode [ 582.028842][T29235] __nla_validate_parse: 14 callbacks suppressed [ 582.028862][T29235] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9133'. [ 582.055640][T29235] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9133'. [ 582.074119][ T4620] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 582.083379][ T4620] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 582.092779][T29235] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9133'. [ 582.108146][T29235] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9133'. [ 582.604256][T29259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9144'. [ 582.613770][T29259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9144'. [ 582.654695][T29267] netlink: 'syz.0.9146': attribute type 29 has an invalid length. [ 582.981118][T29272] veth1_to_batadv: entered promiscuous mode [ 583.052314][T29289] bridge0: port 7(batadv5) entered blocking state [ 583.058869][T29289] bridge0: port 7(batadv5) entered disabled state [ 583.065370][T29289] batadv5: entered allmulticast mode [ 583.071211][T29289] batadv5: entered promiscuous mode [ 583.123297][T29291] bridge0: port 8(batadv7) entered blocking state [ 583.129820][T29291] bridge0: port 8(batadv7) entered disabled state [ 583.136533][T29291] batadv7: entered allmulticast mode [ 583.142542][T29291] batadv7: entered promiscuous mode [ 583.391000][T29296] bridge0: entered promiscuous mode [ 583.396340][T29296] macsec2: entered promiscuous mode [ 583.403300][T29296] bridge0: port 9(macsec2) entered blocking state [ 583.409783][T29296] bridge0: port 9(macsec2) entered disabled state [ 583.416460][T29296] macsec2: entered allmulticast mode [ 583.421838][T29296] bridge0: entered allmulticast mode [ 583.427690][T29296] macsec2: left allmulticast mode [ 583.432742][T29296] bridge0: left allmulticast mode [ 583.438330][T29296] bridge0: left promiscuous mode [ 583.438596][T29297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29297 comm=syz.4.9159 [ 583.455898][T29297] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29297 comm=syz.4.9159 [ 583.546566][ T4614] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 583.556022][ T4614] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 583.610275][ T4604] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 583.619570][ T4604] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 583.642961][T29305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.650463][T29305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.658121][T29305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.665482][T29305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.691942][T29306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9163'. [ 583.704741][T29306] bridge0: port 4(macvlan2) entered blocking state [ 583.711614][T29306] bridge0: port 4(macvlan2) entered disabled state [ 583.718793][T29306] macvlan2: entered allmulticast mode [ 583.724232][T29306] bridge0: entered allmulticast mode [ 583.730280][T29306] macvlan2: left allmulticast mode [ 583.735502][T29306] bridge0: left allmulticast mode [ 583.920303][T29312] loop0: detected capacity change from 0 to 1024 [ 583.927219][T29312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 583.937277][T29312] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 583.963405][T29312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.988369][T29320] FAULT_INJECTION: forcing a failure. [ 583.988369][T29320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.989461][T29312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.001572][T29320] CPU: 1 UID: 0 PID: 29320 Comm: syz.1.9169 Tainted: G W 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 584.001689][T29320] Tainted: [W]=WARN [ 584.001700][T29320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 584.001718][T29320] Call Trace: [ 584.001726][T29320] [ 584.001736][T29320] __dump_stack+0x1d/0x30 [ 584.001784][T29320] dump_stack_lvl+0xe8/0x140 [ 584.001812][T29320] dump_stack+0x15/0x1b [ 584.001836][T29320] should_fail_ex+0x265/0x280 [ 584.001865][T29320] should_fail+0xb/0x20 [ 584.001889][T29320] should_fail_usercopy+0x1a/0x20 [ 584.001958][T29320] _copy_from_user+0x1c/0xb0 [ 584.001996][T29320] ___sys_sendmsg+0xc1/0x1d0 [ 584.002045][T29320] __x64_sys_sendmsg+0xd4/0x160 [ 584.002142][T29320] x64_sys_call+0x191e/0x2ff0 [ 584.002170][T29320] do_syscall_64+0xd2/0x200 [ 584.002206][T29320] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 584.002308][T29320] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 584.002342][T29320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.002381][T29320] RIP: 0033:0x7fa3020cebe9 [ 584.002401][T29320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.002427][T29320] RSP: 002b:00007fa300b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.002460][T29320] RAX: ffffffffffffffda RBX: 00007fa3022f5fa0 RCX: 00007fa3020cebe9 [ 584.002478][T29320] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 584.002495][T29320] RBP: 00007fa300b37090 R08: 0000000000000000 R09: 0000000000000000 [ 584.002512][T29320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.002559][T29320] R13: 00007fa3022f6038 R14: 00007fa3022f5fa0 R15: 00007fffb81610c8 [ 584.002586][T29320] [ 584.289468][T29332] bridge0: port 9(batadv8) entered blocking state [ 584.295943][T29332] bridge0: port 9(batadv8) entered disabled state [ 584.304615][T29332] batadv8: entered allmulticast mode [ 584.310712][T29332] batadv8: entered promiscuous mode [ 584.318845][T29329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9174'. [ 584.328441][T29329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9174'. [ 584.394480][T29338] bridge0: entered promiscuous mode [ 584.418054][T29338] macsec2: entered promiscuous mode [ 584.441547][T29341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29341 comm=syz.0.9176 [ 584.444227][T29338] bridge0: port 4(macsec2) entered blocking state [ 584.454103][T29341] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29341 comm=syz.0.9176 [ 584.460721][T29338] bridge0: port 4(macsec2) entered disabled state [ 584.484453][T29340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9177'. [ 584.512004][T29338] macsec2: entered allmulticast mode [ 584.517595][T29338] bridge0: entered allmulticast mode [ 584.527177][T29338] macsec2: left allmulticast mode [ 584.532248][T29338] bridge0: left allmulticast mode [ 584.539444][T29338] bridge0: left promiscuous mode [ 584.555269][T29339] veth1_to_batadv: entered promiscuous mode [ 584.563134][T29340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.570626][T29340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.578367][T29340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.587492][T29340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.753582][T29345] bridge0: port 9(batadv0) entered blocking state [ 584.760190][T29345] bridge0: port 9(batadv0) entered disabled state [ 584.766786][T29345] batadv0: entered allmulticast mode [ 584.772535][T29345] batadv0: entered promiscuous mode [ 584.782587][ T4620] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 584.791986][ T4620] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 585.063123][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 585.063142][ T29] audit: type=1326 audit(1373.644:50186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.3.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 585.094105][ T29] audit: type=1326 audit(1373.644:50187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.3.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 585.117302][ T29] audit: type=1326 audit(1373.644:50188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.3.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 585.140399][ T29] audit: type=1326 audit(1373.644:50189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.3.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 585.163547][ T29] audit: type=1326 audit(1373.644:50190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.3.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 585.186715][ T29] audit: type=1326 audit(1373.644:50191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.3.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 585.210090][ T29] audit: type=1326 audit(1373.655:50192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.3.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 585.233354][ T29] audit: type=1326 audit(1373.655:50193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.3.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 585.242511][ T4654] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 585.256427][ T29] audit: type=1326 audit(1373.655:50194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.3.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 585.265650][ T4654] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 585.288650][ T29] audit: type=1326 audit(1373.655:50195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29347 comm="syz.3.9180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f7da32febe9 code=0x7ffc0000 [ 585.373657][T29356] block device autoloading is deprecated and will be removed. [ 585.402363][T29360] bridge0: entered promiscuous mode [ 585.407690][T29360] macsec2: entered promiscuous mode [ 585.413841][T29360] bridge0: port 4(macsec2) entered blocking state [ 585.420306][T29360] bridge0: port 4(macsec2) entered disabled state [ 585.447793][T29360] macsec2: entered allmulticast mode [ 585.453144][T29360] bridge0: entered allmulticast mode [ 585.458799][T29363] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29363 comm=syz.0.9182 [ 585.471406][T29363] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29363 comm=syz.0.9182 [ 585.487042][T29360] macsec2: left allmulticast mode [ 585.492113][T29360] bridge0: left allmulticast mode [ 585.503395][T29360] bridge0: left promiscuous mode [ 585.531977][T29364] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29364 comm=syz.1.9187 [ 585.635760][T29377] FAULT_INJECTION: forcing a failure. [ 585.635760][T29377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.645613][T29370] tipc: Enabled bearer , priority 0 [ 585.648961][T29377] CPU: 0 UID: 0 PID: 29377 Comm: syz.1.9193 Tainted: G W 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 585.649012][T29377] Tainted: [W]=WARN [ 585.649024][T29377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.649042][T29377] Call Trace: [ 585.649050][T29377] [ 585.649136][T29377] __dump_stack+0x1d/0x30 [ 585.649166][T29377] dump_stack_lvl+0xe8/0x140 [ 585.649193][T29377] dump_stack+0x15/0x1b [ 585.649217][T29377] should_fail_ex+0x265/0x280 [ 585.649278][T29377] should_fail+0xb/0x20 [ 585.649303][T29377] should_fail_usercopy+0x1a/0x20 [ 585.649401][T29377] _copy_to_user+0x20/0xa0 [ 585.649439][T29377] simple_read_from_buffer+0xb5/0x130 [ 585.649522][T29377] proc_fail_nth_read+0x10e/0x150 [ 585.649559][T29377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 585.649733][T29377] vfs_read+0x1a8/0x770 [ 585.649760][T29377] ? __rcu_read_unlock+0x4f/0x70 [ 585.649789][T29377] ? __fget_files+0x184/0x1c0 [ 585.649865][T29377] ksys_read+0xda/0x1a0 [ 585.649896][T29377] __x64_sys_read+0x40/0x50 [ 585.649927][T29377] x64_sys_call+0x27bc/0x2ff0 [ 585.649998][T29377] do_syscall_64+0xd2/0x200 [ 585.650034][T29377] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 585.650068][T29377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 585.650107][T29377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.650186][T29377] RIP: 0033:0x7fa3020cd5fc [ 585.650206][T29377] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 585.650231][T29377] RSP: 002b:00007fa300b37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 585.650257][T29377] RAX: ffffffffffffffda RBX: 00007fa3022f5fa0 RCX: 00007fa3020cd5fc [ 585.650274][T29377] RDX: 000000000000000f RSI: 00007fa300b370a0 RDI: 0000000000000005 [ 585.650364][T29377] RBP: 00007fa300b37090 R08: 0000000000000000 R09: 0000000000000000 [ 585.650381][T29377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.650399][T29377] R13: 00007fa3022f6038 R14: 00007fa3022f5fa0 R15: 00007fffb81610c8 [ 585.650426][T29377] [ 585.831389][T29386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29386 comm=syz.1.9194 [ 585.875340][T29386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29386 comm=syz.1.9194 [ 585.888216][T29368] tipc: Resetting bearer [ 585.909939][T29368] tipc: Disabling bearer [ 585.930397][T29385] bridge0: entered promiscuous mode [ 585.939218][T29385] macsec1: entered promiscuous mode [ 585.947216][T29385] bridge0: port 10(macsec1) entered blocking state [ 585.953882][T29385] bridge0: port 10(macsec1) entered disabled state [ 585.960860][T29385] macsec1: entered allmulticast mode [ 585.966264][T29385] bridge0: entered allmulticast mode [ 585.972891][T29385] macsec1: left allmulticast mode [ 585.977949][T29385] bridge0: left allmulticast mode [ 585.983559][T29385] bridge0: left promiscuous mode [ 586.217602][T29407] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29407 comm=syz.0.9203 [ 586.347653][T29411] bridge0: entered promiscuous mode [ 586.352901][T29411] macsec2: entered promiscuous mode [ 586.371492][T29411] bridge0: port 4(macsec2) entered blocking state [ 586.378094][T29411] bridge0: port 4(macsec2) entered disabled state [ 586.385274][T29411] macsec2: entered allmulticast mode [ 586.390677][T29411] bridge0: entered allmulticast mode [ 586.397954][T29411] macsec2: left allmulticast mode [ 586.403042][T29411] bridge0: left allmulticast mode [ 586.408805][T29411] bridge0: left promiscuous mode [ 587.090881][T29434] program syz.2.9212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.183332][T29436] loop0: detected capacity change from 0 to 1024 [ 587.190153][T29436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 587.197707][T29436] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 587.210171][T29436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.259442][T29436] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.303875][T29443] __nla_validate_parse: 11 callbacks suppressed [ 587.303965][T29443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9215'. [ 587.319420][T29443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9215'. [ 587.331383][T29444] bridge0: entered promiscuous mode [ 587.336962][T29444] macsec0: entered promiscuous mode [ 587.343295][T29444] bridge0: port 20(macsec0) entered blocking state [ 587.349949][T29444] bridge0: port 20(macsec0) entered disabled state [ 587.356721][T29444] macsec0: entered allmulticast mode [ 587.362028][T29444] bridge0: entered allmulticast mode [ 587.370333][T29444] macsec0: left allmulticast mode [ 587.375434][T29444] bridge0: left allmulticast mode [ 587.381182][T29444] bridge0: left promiscuous mode [ 587.671150][T29464] bridge0: entered promiscuous mode [ 587.676430][T29464] macsec1: entered promiscuous mode [ 587.682743][T29464] bridge0: port 10(macsec1) entered blocking state [ 587.689366][T29464] bridge0: port 10(macsec1) entered disabled state [ 587.696116][T29464] macsec1: entered allmulticast mode [ 587.701560][T29464] bridge0: entered allmulticast mode [ 587.710076][T29464] macsec1: left allmulticast mode [ 587.715209][T29464] bridge0: left allmulticast mode [ 587.730871][T29464] bridge0: left promiscuous mode [ 588.164283][T29473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9226'. [ 588.173388][T29473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9226'. [ 588.653908][T29498] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9237'. [ 588.663536][T29498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9237'. [ 588.679517][T29498] bond4: entered promiscuous mode [ 588.684558][T29498] bond4: entered allmulticast mode [ 588.690264][T29498] 8021q: adding VLAN 0 to HW filter on device bond4 [ 588.698412][T29498] batman_adv: batadv6: Adding interface: bond4 [ 588.704589][T29498] batman_adv: batadv6: The MTU of interface bond4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.730091][T29498] batman_adv: batadv6: Interface activated: bond4 [ 588.762098][T29498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9237'. [ 589.175502][T29522] block device autoloading is deprecated and will be removed. [ 589.302082][T29523] tipc: Enabling of bearer rejected, failed to enable media [ 589.768581][T29536] loop4: detected capacity change from 0 to 2048 [ 589.802436][T29536] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 589.869036][T29536] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9250'. [ 589.912596][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 589.912608][ T29] audit: type=1326 audit(1378.736:50276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29545 comm="syz.2.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 589.941884][ T29] audit: type=1326 audit(1378.736:50277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29545 comm="syz.2.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 589.965040][ T29] audit: type=1326 audit(1378.736:50278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29545 comm="syz.2.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 589.999010][T29536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9250'. [ 590.092026][ T29] audit: type=1326 audit(1378.820:50279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29545 comm="syz.2.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 590.115267][ T29] audit: type=1326 audit(1378.820:50280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29545 comm="syz.2.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 590.138344][ T29] audit: type=1326 audit(1378.830:50281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29545 comm="syz.2.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 590.161370][ T29] audit: type=1326 audit(1378.830:50282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29545 comm="syz.2.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 590.184413][ T29] audit: type=1326 audit(1378.830:50283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29545 comm="syz.2.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 590.207267][ T29] audit: type=1326 audit(1378.830:50284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29545 comm="syz.2.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 590.230490][ T29] audit: type=1326 audit(1378.830:50285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29545 comm="syz.2.9255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fbefe90ebe9 code=0x7ffc0000 [ 590.267707][T29536] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9250'. [ 590.289246][T29548] bond0: entered promiscuous mode [ 590.294350][T29548] bond0: entered allmulticast mode [ 590.299884][T29548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.318133][T29560] selinux_netlink_send: 6 callbacks suppressed [ 590.318212][T29560] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29560 comm=syz.0.9257 [ 590.337053][T29560] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29560 comm=syz.0.9257 [ 590.361358][T29548] bond0 (unregistering): Released all slaves [ 590.380971][T29555] bridge0: port 10(batadv9) entered blocking state [ 590.387604][T29555] bridge0: port 10(batadv9) entered disabled state [ 590.403843][T29555] batadv9: entered allmulticast mode [ 590.409635][T29555] batadv9: entered promiscuous mode [ 590.425622][T29557] bridge0: entered promiscuous mode [ 590.432865][T29557] macsec2: entered promiscuous mode [ 590.439233][T29557] bridge0: port 4(macsec2) entered blocking state [ 590.445871][T29557] bridge0: port 4(macsec2) entered disabled state [ 590.461947][T29557] macsec2: entered allmulticast mode [ 590.467335][T29557] bridge0: entered allmulticast mode [ 590.483020][T29557] macsec2: left allmulticast mode [ 590.488135][T29557] bridge0: left allmulticast mode [ 590.498992][T29557] bridge0: left promiscuous mode [ 590.590728][T29564] bridge0: port 8(batadv6) entered blocking state [ 590.597303][T29564] bridge0: port 8(batadv6) entered disabled state [ 590.603925][T29564] batadv6: entered allmulticast mode [ 590.609656][T29564] batadv6: entered promiscuous mode [ 590.681808][T29571] loop4: detected capacity change from 0 to 1024 [ 590.691557][T29571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 590.699398][T29571] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 590.710947][T29571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.724077][T29571] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.778282][T29580] loop2: detected capacity change from 0 to 512 [ 590.792364][T29582] tipc: Enabled bearer , priority 0 [ 590.800789][T29580] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 590.803326][T29581] tipc: Resetting bearer [ 590.814902][T29580] System zones: 1-12 [ 590.821755][T29580] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.9267: error while reading EA inode 32 err=-116 [ 590.834821][T29581] tipc: Disabling bearer [ 590.841540][T29580] EXT4-fs (loop2): Remounting filesystem read-only [ 590.848161][T29580] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 590.858360][T29580] EXT4-fs (loop2): 1 orphan inode deleted [ 590.867573][T29580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.880085][ T4604] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled [ 590.889418][ T4604] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled [ 590.922241][T21465] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.961028][T29589] loop4: detected capacity change from 0 to 2048 [ 590.977673][T29593] FAULT_INJECTION: forcing a failure. [ 590.977673][T29593] name failslab, interval 1, probability 0, space 0, times 0 [ 590.990342][T29593] CPU: 0 UID: 0 PID: 29593 Comm: syz.0.9273 Tainted: G W 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 590.990378][T29593] Tainted: [W]=WARN [ 590.990386][T29593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.990445][T29593] Call Trace: [ 590.990453][T29593] [ 590.990461][T29593] __dump_stack+0x1d/0x30 [ 590.990485][T29593] dump_stack_lvl+0xe8/0x140 [ 590.990503][T29593] dump_stack+0x15/0x1b [ 590.990518][T29593] should_fail_ex+0x265/0x280 [ 590.990538][T29593] should_failslab+0x8c/0xb0 [ 590.990619][T29593] kmem_cache_alloc_node_noprof+0x57/0x320 [ 590.990656][T29593] ? dup_task_struct+0x70/0x6a0 [ 590.990689][T29593] dup_task_struct+0x70/0x6a0 [ 590.990771][T29593] ? path_openat+0x1bf8/0x2170 [ 590.990793][T29593] copy_process+0x399/0x2000 [ 590.990886][T29593] ? copy_clone_args_from_user+0x3ce/0x490 [ 590.990922][T29593] kernel_clone+0x16c/0x5c0 [ 590.990956][T29593] __se_sys_clone3+0x1c2/0x200 [ 590.991018][T29593] __x64_sys_clone3+0x31/0x40 [ 590.991107][T29593] x64_sys_call+0x1fc9/0x2ff0 [ 590.991132][T29593] do_syscall_64+0xd2/0x200 [ 590.991162][T29593] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 590.991190][T29593] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 590.991258][T29593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.991276][T29593] RIP: 0033:0x7fa1babcebe9 [ 590.991288][T29593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.991304][T29593] RSP: 002b:00007fa1b962ef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 590.991368][T29593] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa1babcebe9 [ 590.991379][T29593] RDX: 00007fa1b962ef20 RSI: 0000000000000058 RDI: 00007fa1b962ef20 [ 590.991398][T29593] RBP: 00007fa1b962f090 R08: 0000000000000000 R09: 0000000000000058 [ 590.991447][T29593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.991461][T29593] R13: 00007fa1badf6038 R14: 00007fa1badf5fa0 R15: 00007ffdc1736808 [ 590.991478][T29593] [ 591.021455][T29589] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 591.090775][ T4654] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 591.213358][ T4654] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 591.235380][T29600] bond5: entered promiscuous mode [ 591.240600][T29600] bond5: entered allmulticast mode [ 591.245974][T29600] 8021q: adding VLAN 0 to HW filter on device bond5 [ 591.255190][T29600] batman_adv: batadv6: Adding interface: bond5 [ 591.261438][T29600] batman_adv: batadv6: The MTU of interface bond5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.287509][T29600] batman_adv: batadv6: Interface activated: bond5 [ 591.300493][T29601] bond0: entered promiscuous mode [ 591.305555][T29601] bond0: entered allmulticast mode [ 591.311140][T29601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.327657][T29601] bond0 (unregistering): Released all slaves [ 591.535064][T29628] tipc: Enabled bearer , priority 0 [ 591.563689][T29621] tipc: Resetting bearer [ 591.600624][T29621] tipc: Disabling bearer [ 591.709628][T29642] bridge0: port 10(batadv7) entered blocking state [ 591.716215][T29642] bridge0: port 10(batadv7) entered disabled state [ 591.733170][T29642] batadv7: entered allmulticast mode [ 591.739937][T29642] batadv7: entered promiscuous mode [ 591.756649][T29638] bond2: entered promiscuous mode [ 591.761785][T29638] bond2: entered allmulticast mode [ 591.767292][T29638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 591.779225][T29638] bond2 (unregistering): Released all slaves [ 591.896690][T29656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29656 comm=syz.0.9298 [ 592.057203][T29674] bridge0: entered promiscuous mode [ 592.062505][T29674] macsec2: entered promiscuous mode [ 592.068725][T29674] bridge0: port 4(macsec2) entered blocking state [ 592.075381][T29674] bridge0: port 4(macsec2) entered disabled state [ 592.082103][T29674] macsec2: entered allmulticast mode [ 592.087420][T29674] bridge0: entered allmulticast mode [ 592.094075][T29674] macsec2: left allmulticast mode [ 592.099176][T29674] bridge0: left allmulticast mode [ 592.104163][T29675] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29675 comm=syz.0.9304 [ 592.116845][T29675] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29675 comm=syz.0.9304 [ 592.129850][T29674] bridge0: left promiscuous mode [ 592.189283][ T4600] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 592.198559][ T4600] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 592.502887][T29685] batadv_slave_1: entered promiscuous mode [ 592.503659][T29683] __nla_validate_parse: 12 callbacks suppressed [ 592.503677][T29683] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9308'. [ 592.525416][T29683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9308'. [ 592.540501][T29683] bond6: entered promiscuous mode [ 592.545671][T29683] bond6: entered allmulticast mode [ 592.551049][T29683] 8021q: adding VLAN 0 to HW filter on device bond6 [ 592.559336][T29683] batman_adv: batadv6: Adding interface: bond6 [ 592.565561][T29683] batman_adv: batadv6: The MTU of interface bond6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.590959][T29683] batman_adv: batadv6: Interface activated: bond6 [ 592.675462][T29697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9313'. [ 592.685166][T29697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29697 comm=syz.1.9313 [ 592.781944][T29702] bridge0: entered promiscuous mode [ 592.793294][T29702] macsec1: entered promiscuous mode [ 592.803488][T29702] bridge0: port 11(macsec1) entered blocking state [ 592.810041][T29702] bridge0: port 11(macsec1) entered disabled state [ 592.823202][T29704] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.9316'. [ 592.826828][T29702] macsec1: entered allmulticast mode [ 592.832428][T29704] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.9316'. [ 592.837754][T29702] bridge0: entered allmulticast mode [ 592.873527][T29706] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29706 comm=syz.2.9315 [ 592.886131][T29706] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29706 comm=syz.2.9315 [ 592.891852][T29711] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29711 comm=syz.1.9314 [ 592.911391][T29711] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29711 comm=syz.1.9314 [ 592.938772][T29702] macsec1: left allmulticast mode [ 592.943841][T29702] bridge0: left allmulticast mode [ 592.955900][T29702] bridge0: left promiscuous mode [ 592.977442][T29705] bridge0: entered promiscuous mode [ 592.982689][T29705] macsec0: entered promiscuous mode [ 592.990968][T29718] hugetlbfs: Bad value '%' for mount option 'size' [ 592.990968][T29718] [ 592.995712][T29705] bridge0: port 20(macsec0) entered blocking state [ 593.006380][T29705] bridge0: port 20(macsec0) entered disabled state [ 593.024011][T29705] macsec0: entered allmulticast mode [ 593.029321][T29705] bridge0: entered allmulticast mode [ 593.042983][T29705] macsec0: left allmulticast mode [ 593.048042][T29705] bridge0: left allmulticast mode [ 593.054152][T29705] bridge0: left promiscuous mode [ 593.064065][T29718] smc: net device bond0 applied user defined pnetid SYZ2 [ 593.072452][T29723] smc: net device bond0 erased user defined pnetid SYZ2 [ 593.149141][T29730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9326'. [ 593.293479][T29684] batadv_slave_1: left promiscuous mode [ 593.411005][T29736] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.9329'. [ 593.420197][T29736] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.9329'. [ 593.572805][T29744] block device autoloading is deprecated and will be removed. [ 593.747505][T29763] sd 0:0:1:0: device reset [ 593.859362][T29774] bridge0: entered promiscuous mode [ 593.865136][T29774] macsec2: entered promiscuous mode [ 593.871722][T29774] bridge0: port 9(macsec2) entered blocking state [ 593.878225][T29774] bridge0: port 9(macsec2) entered disabled state [ 593.884924][T29774] macsec2: entered allmulticast mode [ 593.890275][T29774] bridge0: entered allmulticast mode [ 593.896738][T29774] macsec2: left allmulticast mode [ 593.901900][T29774] bridge0: left allmulticast mode [ 593.907936][T29774] bridge0: left promiscuous mode [ 594.312886][T29805] tipc: Enabled bearer , priority 0 [ 594.320229][T29804] tipc: Resetting bearer [ 594.333879][T29804] tipc: Disabling bearer [ 594.441417][T29816] bridge0: entered promiscuous mode [ 594.447145][T29816] macsec0: entered promiscuous mode [ 594.454184][T29816] bridge0: port 20(macsec0) entered blocking state [ 594.460783][T29816] bridge0: port 20(macsec0) entered disabled state [ 594.480536][T29816] macsec0: entered allmulticast mode [ 594.485898][T29816] bridge0: entered allmulticast mode [ 594.501975][T29816] macsec0: left allmulticast mode [ 594.507036][T29816] bridge0: left allmulticast mode [ 594.522732][T29816] bridge0: left promiscuous mode [ 594.572120][T29822] bridge0: port 11(batadv8) entered blocking state [ 594.578762][T29822] bridge0: port 11(batadv8) entered disabled state [ 594.585859][T29822] batadv8: entered allmulticast mode [ 594.591673][T29822] batadv8: entered promiscuous mode [ 594.656396][T29826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9363'. [ 595.043408][ T4641] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 595.052908][ T4641] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 595.428314][T29849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9372'. [ 595.633221][T29855] block device autoloading is deprecated and will be removed. [ 595.692796][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 595.692809][ T29] audit: type=1326 audit(1384.804:50437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29863 comm="syz.4.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 595.846153][T29876] bridge0: port 20(batadv20) entered blocking state [ 595.852876][T29876] bridge0: port 20(batadv20) entered disabled state [ 595.873971][ T29] audit: type=1326 audit(1384.835:50438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29863 comm="syz.4.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 595.897126][ T29] audit: type=1326 audit(1384.835:50439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29863 comm="syz.4.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 595.920212][ T29] audit: type=1326 audit(1384.835:50440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29863 comm="syz.4.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 595.943379][ T29] audit: type=1326 audit(1384.835:50441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29863 comm="syz.4.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 595.966475][ T29] audit: type=1326 audit(1384.835:50442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29863 comm="syz.4.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 595.989607][ T29] audit: type=1326 audit(1384.835:50443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29863 comm="syz.4.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 596.012743][ T29] audit: type=1326 audit(1384.846:50444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29863 comm="syz.4.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 596.035835][ T29] audit: type=1326 audit(1384.846:50445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29863 comm="syz.4.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 596.058901][ T29] audit: type=1326 audit(1384.846:50446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29863 comm="syz.4.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfd801d550 code=0x7ffc0000 [ 596.113350][T29876] batadv20: entered allmulticast mode [ 596.122710][T29877] loop4: detected capacity change from 0 to 2048 [ 596.146867][T29876] batadv20: entered promiscuous mode [ 596.152709][T29877] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 596.179394][T29884] selinux_netlink_send: 6 callbacks suppressed [ 596.179423][T29884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29884 comm=syz.3.9385 [ 596.256800][T29877] bond0: entered promiscuous mode [ 596.262032][T29877] bond0: entered allmulticast mode [ 596.267453][T29877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.289356][T29877] bond0 (unregistering): Released all slaves [ 596.353760][ T4614] batman_adv: batadv20: No IGMP Querier present - multicast optimizations disabled [ 596.363120][ T4614] batman_adv: batadv20: No MLD Querier present - multicast optimizations disabled [ 596.373011][T29887] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29887 comm=syz.1.9386 [ 596.640459][T29915] bridge0: entered promiscuous mode [ 596.645877][T29915] macsec2: entered promiscuous mode [ 596.656370][T29915] bridge0: port 9(macsec2) entered blocking state [ 596.662915][T29915] bridge0: port 9(macsec2) entered disabled state [ 596.677025][T29915] macsec2: entered allmulticast mode [ 596.682544][T29915] bridge0: entered allmulticast mode [ 596.685413][T29918] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 596.688960][T29921] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29921 comm=syz.3.9394 [ 596.707887][T29921] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29921 comm=syz.3.9394 [ 596.726484][T29915] macsec2: left allmulticast mode [ 596.731575][T29915] bridge0: left allmulticast mode [ 596.752639][T29915] bridge0: left promiscuous mode [ 596.773777][T29922] bond4: entered promiscuous mode [ 596.779086][T29922] bond4: entered allmulticast mode [ 596.788916][T29922] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.799130][T29922] bond4 (unregistering): Released all slaves [ 596.945422][T29934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29934 comm=syz.2.9404 [ 597.295110][T29944] loop4: detected capacity change from 0 to 1024 [ 597.320501][T29944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 597.343172][T29944] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 597.440957][T29944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.496068][T29944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.717250][T29970] bridge0: entered promiscuous mode [ 597.736921][T29970] macsec2: entered promiscuous mode [ 597.769068][T29970] bridge0: port 9(macsec2) entered blocking state [ 597.775644][T29970] bridge0: port 9(macsec2) entered disabled state [ 597.799494][T29971] __nla_validate_parse: 20 callbacks suppressed [ 597.799520][T29971] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.9417'. [ 597.815091][T29971] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.9417'. [ 597.832519][T29973] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29973 comm=syz.3.9415 [ 597.845245][T29973] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29973 comm=syz.3.9415 [ 597.872209][T29970] macsec2: entered allmulticast mode [ 597.877535][T29970] bridge0: entered allmulticast mode [ 597.894743][T29970] macsec2: left allmulticast mode [ 597.899876][T29970] bridge0: left allmulticast mode [ 597.961510][T29970] bridge0: left promiscuous mode [ 598.048054][T29978] loop4: detected capacity change from 0 to 512 [ 598.080208][T29978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 598.108734][T29978] System zones: 1-12 [ 598.122412][T29978] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.9418: error while reading EA inode 32 err=-116 [ 598.151974][T29983] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9421'. [ 598.168631][T29978] EXT4-fs (loop4): Remounting filesystem read-only [ 598.175285][T29978] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 598.191415][T29983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9421'. [ 598.212019][T29978] EXT4-fs (loop4): 1 orphan inode deleted [ 598.231692][T29983] bond7: entered promiscuous mode [ 598.236774][T29983] bond7: entered allmulticast mode [ 598.244426][T29978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.269429][T29983] 8021q: adding VLAN 0 to HW filter on device bond7 [ 598.295665][T29983] batman_adv: batadv6: Adding interface: bond7 [ 598.301993][T29983] batman_adv: batadv6: The MTU of interface bond7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.344073][T27559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.367005][T29983] batman_adv: batadv6: Interface activated: bond7 [ 598.688268][T30007] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.9429'. [ 598.697592][T30007] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.9429'. [ 598.763714][T30015] loop4: detected capacity change from 0 to 4096 [ 598.830032][T30015] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.874288][T30015] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.9434'. [ 598.883492][T30015] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.9434'. [ 599.155787][T27559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.169691][T30017] chnl_net:caif_netlink_parms(): no params data found [ 599.215295][T30046] block device autoloading is deprecated and will be removed. [ 599.280686][T30017] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.287870][T30017] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.300006][T30047] loop0: detected capacity change from 0 to 1024 [ 599.309848][T30047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 599.323852][T30017] bridge_slave_0: entered allmulticast mode [ 599.332527][T30047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 599.347053][T30017] bridge_slave_0: entered promiscuous mode [ 599.362017][T30047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.378312][T30017] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.385505][T30017] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.410192][T30047] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.422831][T30017] bridge_slave_1: entered allmulticast mode [ 599.444684][T30017] bridge_slave_1: entered promiscuous mode [ 599.494353][T30017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.517331][T30017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.555173][T30017] team0: Port device team_slave_0 added [ 599.563587][T30017] team0: Port device team_slave_1 added [ 599.602436][T30017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.609534][T30017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.635463][T30017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.698080][ T4604] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.715908][T30017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.723012][T30017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.749017][T30017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.779854][T30017] hsr_slave_0: entered promiscuous mode [ 599.795058][T30017] hsr_slave_1: entered promiscuous mode [ 599.819000][ T4604] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.889195][ T4604] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.986885][ T4604] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.047473][T30063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9446'. [ 600.076014][T30063] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9446'. [ 600.104000][ T4604] batadv20: left allmulticast mode [ 600.109244][ T4604] batadv20: left promiscuous mode [ 600.114363][ T4604] bridge0: port 20(batadv20) entered disabled state [ 600.133071][ T4604] batadv19: left allmulticast mode [ 600.138340][ T4604] batadv19: left promiscuous mode [ 600.143443][ T4604] bridge0: port 19(batadv19) entered disabled state [ 600.162823][ T4604] batadv18: left allmulticast mode [ 600.168048][ T4604] batadv18: left promiscuous mode [ 600.173283][ T4604] bridge0: port 18(batadv18) entered disabled state [ 600.193556][ T4604] batadv17: left allmulticast mode [ 600.198860][ T4604] batadv17: left promiscuous mode [ 600.204150][ T4604] bridge0: port 17(batadv17) entered disabled state [ 600.225662][ T4604] batadv16: left allmulticast mode [ 600.230829][ T4604] batadv16: left promiscuous mode [ 600.236090][ T4604] bridge0: port 16(batadv16) entered disabled state [ 600.253833][ T4604] batadv15: left allmulticast mode [ 600.259008][ T4604] batadv15: left promiscuous mode [ 600.264252][ T4604] bridge0: port 15(batadv15) entered disabled state [ 600.327797][ T4604] batadv14: left allmulticast mode [ 600.332971][ T4604] batadv14: left promiscuous mode [ 600.338222][ T4604] bridge0: port 14(batadv14) entered disabled state [ 600.364868][ T4604] batadv13: left allmulticast mode [ 600.370337][ T4604] batadv13: left promiscuous mode [ 600.375530][ T4604] bridge0: port 13(batadv13) entered disabled state [ 600.414225][ T4604] batadv12: left allmulticast mode [ 600.419489][ T4604] batadv12: left promiscuous mode [ 600.424851][ T4604] bridge0: port 12(batadv12) entered disabled state [ 600.443114][ T4604] batadv11: left allmulticast mode [ 600.448260][ T4604] batadv11: left promiscuous mode [ 600.453453][ T4604] bridge0: port 11(batadv11) entered disabled state [ 600.464232][T30066] netlink: 'syz.3.9447': attribute type 27 has an invalid length. [ 600.479876][ T4604] batadv9: left allmulticast mode [ 600.484989][ T4604] batadv9: left promiscuous mode [ 600.490339][ T4604] bridge0: port 10(batadv9) entered disabled state [ 600.509766][ T4604] batadv8: left allmulticast mode [ 600.514846][ T4604] batadv8: left promiscuous mode [ 600.520051][ T4604] bridge0: port 9(batadv8) entered disabled state [ 600.533412][ T4604] batadv7: left allmulticast mode [ 600.538488][ T4604] batadv7: left promiscuous mode [ 600.543702][ T4604] bridge0: port 8(batadv7) entered disabled state [ 600.554346][ T4604] batadv6: left allmulticast mode [ 600.559429][ T4604] batadv6: left promiscuous mode [ 600.564497][ T4604] bridge0: port 7(batadv6) entered disabled state [ 600.571558][ T4604] batadv5: left allmulticast mode [ 600.576626][ T4604] batadv5: left promiscuous mode [ 600.581690][ T4604] bridge0: port 6(batadv5) entered disabled state [ 600.591179][ T4604] batadv4: left allmulticast mode [ 600.596293][ T4604] batadv4: left promiscuous mode [ 600.601418][ T4604] bridge0: port 5(batadv4) entered disabled state [ 600.608864][ T4604] batadv3: left allmulticast mode [ 600.614000][ T4604] batadv3: left promiscuous mode [ 600.619086][ T4604] bridge0: port 4(batadv3) entered disabled state [ 600.626216][ T4604] batadv1: left allmulticast mode [ 600.631301][ T4604] batadv1: left promiscuous mode [ 600.636471][ T4604] bridge0: port 3(batadv1) entered disabled state [ 600.644386][ T4604] bridge_slave_1: left allmulticast mode [ 600.650084][ T4604] bridge_slave_1: left promiscuous mode [ 600.655780][ T4604] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.663764][ T4604] bridge_slave_0: left allmulticast mode [ 600.669405][ T4604] bridge_slave_0: left promiscuous mode [ 600.675111][ T4604] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.717647][ T4604] bond1 (unregistering): (slave gretap1): Releasing active interface [ 600.768724][ T4604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.778288][ T4604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.787857][ T4604] bond0 (unregistering): Released all slaves [ 600.796922][ T4604] bond1 (unregistering): Released all slaves [ 600.805401][ T4604] bond2 (unregistering): Released all slaves [ 600.814534][ T4604] bond3 (unregistering): Released all slaves [ 600.864070][T30066] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.871340][T30066] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.910750][T30066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.920263][T30066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.953423][T30066] bond1: left promiscuous mode [ 600.958360][T30066] bond1: left allmulticast mode [ 600.974730][T30070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.982918][T30070] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.992205][T30070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.011167][T30078] bridge0: port 4(batadv0) entered blocking state [ 601.017856][T30078] bridge0: port 4(batadv0) entered disabled state [ 601.028177][T30078] batadv0: entered allmulticast mode [ 601.037000][T30078] batadv0: entered promiscuous mode [ 601.047040][T30080] bridge0: port 11(batadv10) entered blocking state [ 601.053923][T30080] bridge0: port 11(batadv10) entered disabled state [ 601.060650][T30080] batadv10: entered allmulticast mode [ 601.066887][T30080] batadv10: entered promiscuous mode [ 601.072639][ T4604] tipc: Left network mode [ 601.083192][ T4620] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.092629][ T4620] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.111478][ T4604] hsr_slave_0: left promiscuous mode [ 601.124183][ T4604] hsr_slave_1: left promiscuous mode [ 601.130646][ T4604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.138272][ T4604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.149130][ T4604] veth1_to_batadv: left promiscuous mode [ 601.155076][ T4604] veth0_macvtap: left promiscuous mode [ 601.160833][ T4604] veth1_vlan: left promiscuous mode [ 601.166110][ T4604] veth0_vlan: left promiscuous mode [ 601.279602][ T4604] team0 (unregistering): Port device team_slave_1 removed [ 601.289260][ T4604] team0 (unregistering): Port device team_slave_0 removed [ 601.325902][ T4620] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.344140][ T4620] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.400702][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 601.400774][ T29] audit: type=1326 audit(1390.798:50569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30094 comm="syz.4.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 601.478539][ T29] audit: type=1326 audit(1390.798:50570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30094 comm="syz.4.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 601.484626][T30017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 601.501865][ T29] audit: type=1326 audit(1390.798:50571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30094 comm="syz.4.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 601.531635][ T29] audit: type=1326 audit(1390.798:50572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30094 comm="syz.4.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 601.554812][ T29] audit: type=1326 audit(1390.798:50573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30094 comm="syz.4.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 601.556293][ T4614] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 601.578030][ T29] audit: type=1326 audit(1390.798:50574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30094 comm="syz.4.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 601.587240][ T4614] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 601.610243][ T29] audit: type=1326 audit(1390.798:50575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30094 comm="syz.4.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 601.642495][ T29] audit: type=1326 audit(1390.798:50576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30094 comm="syz.4.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfd801d550 code=0x7ffc0000 [ 601.665836][ T29] audit: type=1326 audit(1390.798:50577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30094 comm="syz.4.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdfd801d550 code=0x7ffc0000 [ 601.689006][ T29] audit: type=1326 audit(1390.798:50578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30094 comm="syz.4.9458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd801ebe9 code=0x7ffc0000 [ 601.714712][T30017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 601.723986][T30017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 601.741333][T30017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 601.782487][T30111] block device autoloading is deprecated and will be removed. [ 601.797334][ T4614] batman_adv: batadv10: No IGMP Querier present - multicast optimizations disabled [ 601.806720][ T4614] batman_adv: batadv10: No MLD Querier present - multicast optimizations disabled [ 601.902175][T30017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.966356][T30017] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.034807][ T1938] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.041990][ T1938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.057857][ T1938] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.065049][ T1938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.123309][T30144] loop0: detected capacity change from 0 to 4096 [ 602.151775][T30144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.227963][T30017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.252324][T28944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.412210][T30017] veth0_vlan: entered promiscuous mode [ 602.433238][T30017] veth1_vlan: entered promiscuous mode [ 602.446325][T30017] veth0_macvtap: entered promiscuous mode [ 602.454066][T30017] veth1_macvtap: entered promiscuous mode [ 602.474698][T30017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.504360][T30017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.517743][ T4641] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.527809][T30187] loop0: detected capacity change from 0 to 4096 [ 602.546178][ T4641] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.555637][ T4641] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.574767][T30187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.589520][ T4641] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.625404][T28944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.658243][T30198] batadv_slave_1: entered promiscuous mode [ 602.666459][T30194] loop4: detected capacity change from 0 to 1024 [ 602.674320][T30200] __nla_validate_parse: 4 callbacks suppressed [ 602.674332][T30200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9496'. [ 602.674833][T30194] EXT4-fs: Ignoring removed nomblk_io_submit option [ 602.681522][T30200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9496'. [ 602.690066][T30194] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 602.717415][T30194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.738461][T30194] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.775837][T30204] loop2: detected capacity change from 0 to 1024 [ 602.782705][T30204] EXT4-fs: Ignoring removed nomblk_io_submit option [ 602.790286][T30204] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 602.800685][T30204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.814548][T30204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.954396][T30224] batadv_slave_1: entered promiscuous mode [ 603.043988][T30233] loop4: detected capacity change from 0 to 512 [ 603.052930][T30233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 603.060997][T30233] System zones: 1-12 [ 603.069422][T30233] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.9509: error while reading EA inode 32 err=-116 [ 603.083750][T30233] EXT4-fs (loop4): Remounting filesystem read-only [ 603.090419][T30233] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 603.100924][T30233] EXT4-fs (loop4): 1 orphan inode deleted [ 603.107199][T30233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.122268][T30238] bridge0: entered promiscuous mode [ 603.127582][T30238] macsec2: entered promiscuous mode [ 603.133157][T30238] bridge0: port 9(macsec2) entered blocking state [ 603.139745][T30238] bridge0: port 9(macsec2) entered disabled state [ 603.146316][T30238] macsec2: entered allmulticast mode [ 603.146650][T27559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.151839][T30238] bridge0: entered allmulticast mode [ 603.167546][T30238] macsec2: left allmulticast mode [ 603.172644][T30238] bridge0: left allmulticast mode [ 603.174996][T30239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30239 comm=syz.3.9510 [ 603.190461][T30239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30239 comm=syz.3.9510 [ 603.203609][T30238] bridge0: left promiscuous mode [ 603.231997][T30241] loop4: detected capacity change from 0 to 1024 [ 603.238813][T30241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 603.248524][T30241] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 603.263118][T30241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.276314][T30241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.352426][T30255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9517'. [ 603.369076][T30255] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30255 comm=syz.1.9517 [ 603.448412][T30197] batadv_slave_1: left promiscuous mode [ 603.745799][T30223] batadv_slave_1: left promiscuous mode [ 603.820567][T30283] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=30283 comm=+}[@ [ 603.918432][T30295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9535'. [ 603.934498][T30295] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30295 comm=syz.2.9535 [ 603.975735][T30298] batadv_slave_1: entered promiscuous mode [ 604.223979][T30302] batadv_slave_1: entered promiscuous mode [ 604.312360][T30307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9539'. [ 604.321450][T30307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9539'. [ 604.404562][T30314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9542'. [ 604.513058][T30331] loop0: detected capacity change from 0 to 1024 [ 604.519855][T30331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 604.526862][T30331] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 604.543507][T30331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.563632][T30331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.601986][T30337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9551'. [ 604.611093][T30337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9551'. [ 604.766382][T30297] batadv_slave_1: left promiscuous mode [ 604.952278][T30377] loop0: detected capacity change from 0 to 128 [ 605.013940][T30301] batadv_slave_1: left promiscuous mode [ 605.020956][T30377] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 605.136846][T30397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9578'. [ 605.300728][T30428] loop2: detected capacity change from 0 to 128 [ 605.414852][T30437] loop0: detected capacity change from 0 to 128 [ 605.423355][T30428] bio_check_eod: 9614 callbacks suppressed [ 605.423369][T30428] syz.2.9593: attempt to access beyond end of device [ 605.423369][T30428] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 605.450153][T30428] syz.2.9593: attempt to access beyond end of device [ 605.450153][T30428] loop2: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 605.468192][T30428] syz.2.9593: attempt to access beyond end of device [ 605.468192][T30428] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 605.488261][T30428] syz.2.9593: attempt to access beyond end of device [ 605.488261][T30428] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 605.518892][T30428] syz.2.9593: attempt to access beyond end of device [ 605.518892][T30428] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 605.540257][T30445] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30445 comm=syz.3.9599 [ 605.568054][T30428] syz.2.9593: attempt to access beyond end of device [ 605.568054][T30428] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 605.578634][T30449] loop4: detected capacity change from 0 to 128 [ 605.584461][T30428] syz.2.9593: attempt to access beyond end of device [ 605.584461][T30428] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 605.612156][T30449] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 605.622505][T30449] FAULT_INJECTION: forcing a failure. [ 605.622505][T30449] name failslab, interval 1, probability 0, space 0, times 0 [ 605.635299][T30449] CPU: 1 UID: 0 PID: 30449 Comm: syz.4.9602 Tainted: G W 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 605.635340][T30449] Tainted: [W]=WARN [ 605.635347][T30449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.635359][T30449] Call Trace: [ 605.635365][T30449] [ 605.635371][T30449] __dump_stack+0x1d/0x30 [ 605.635421][T30449] dump_stack_lvl+0xe8/0x140 [ 605.635440][T30449] dump_stack+0x15/0x1b [ 605.635458][T30449] should_fail_ex+0x265/0x280 [ 605.635553][T30449] should_failslab+0x8c/0xb0 [ 605.635579][T30449] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 605.635628][T30449] ? kstrdup_const+0x3e/0x50 [ 605.635714][T30449] ? __schedule+0x6b9/0xb30 [ 605.635767][T30449] kstrdup+0x3e/0xd0 [ 605.635796][T30449] kstrdup_const+0x3e/0x50 [ 605.635873][T30449] kernfs_rename_ns+0x22c/0x410 [ 605.635972][T30449] sysfs_rename_link_ns+0xfc/0x120 [ 605.636060][T30449] device_rename+0xd2/0x180 [ 605.636087][T30449] netif_change_name+0x1eb/0x6b0 [ 605.636195][T30449] ? __list_del_entry_valid_or_report+0x65/0x130 [ 605.636232][T30449] dev_change_name+0xc0/0x170 [ 605.636258][T30449] dev_ifsioc+0x302/0xaa0 [ 605.636363][T30449] dev_ioctl+0x4a7/0x960 [ 605.636386][T30449] sock_do_ioctl+0x197/0x220 [ 605.636512][T30449] sock_ioctl+0x41b/0x610 [ 605.636544][T30449] ? __pfx_sock_ioctl+0x10/0x10 [ 605.636574][T30449] __se_sys_ioctl+0xcb/0x140 [ 605.636656][T30449] __x64_sys_ioctl+0x43/0x50 [ 605.636691][T30449] x64_sys_call+0x1816/0x2ff0 [ 605.636723][T30449] do_syscall_64+0xd2/0x200 [ 605.636809][T30449] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 605.636835][T30449] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 605.636990][T30449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.637019][T30449] RIP: 0033:0x7fdfd801ebe9 [ 605.637038][T30449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.637136][T30449] RSP: 002b:00007fdfd6a87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.637159][T30449] RAX: ffffffffffffffda RBX: 00007fdfd8245fa0 RCX: 00007fdfd801ebe9 [ 605.637175][T30449] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000009 [ 605.637191][T30449] RBP: 00007fdfd6a87090 R08: 0000000000000000 R09: 0000000000000000 [ 605.637207][T30449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.637222][T30449] R13: 00007fdfd8246038 R14: 00007fdfd8245fa0 R15: 00007ffcbc8df7a8 [ 605.637247][T30449] [ 605.890698][T30428] syz.2.9593: attempt to access beyond end of device [ 605.890698][T30428] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 605.907931][T30428] syz.2.9593: attempt to access beyond end of device [ 605.907931][T30428] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 605.928694][T30428] syz.2.9593: attempt to access beyond end of device [ 605.928694][T30428] loop2: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 606.035555][T30460] bridge0: entered promiscuous mode [ 606.062447][T30460] macsec2: entered promiscuous mode [ 606.068925][T30460] bridge0: port 12(macsec2) entered blocking state [ 606.075567][T30460] bridge0: port 12(macsec2) entered disabled state [ 606.096963][T30472] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30472 comm=syz.4.9607 [ 606.109646][T30472] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30472 comm=syz.4.9607 [ 606.122455][T30460] macsec2: entered allmulticast mode [ 606.127760][T30460] bridge0: entered allmulticast mode [ 606.133638][T30460] macsec2: left allmulticast mode [ 606.137012][T30474] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30474 comm=syz.0.9609 [ 606.138694][T30460] bridge0: left allmulticast mode [ 606.156400][T30474] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30474 comm=syz.0.9609 [ 606.169055][T30460] bridge0: left promiscuous mode [ 606.202942][T30467] bridge0: entered promiscuous mode [ 606.216287][T30467] macsec2: entered promiscuous mode [ 606.223926][T30467] bridge0: port 5(macsec2) entered blocking state [ 606.230500][T30467] bridge0: port 5(macsec2) entered disabled state [ 606.237377][T30467] macsec2: entered allmulticast mode [ 606.242716][T30467] bridge0: entered allmulticast mode [ 606.248594][T30467] macsec2: left allmulticast mode [ 606.253757][T30467] bridge0: left allmulticast mode [ 606.262992][T30467] bridge0: left promiscuous mode [ 606.297631][T30465] veth1_to_batadv: entered promiscuous mode [ 606.385875][ C0] ================================================================== [ 606.393985][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 606.401200][ C0] [ 606.403536][ C0] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 1: [ 606.411615][ C0] wq_worker_tick+0x60/0x230 [ 606.416208][ C0] sched_tick+0x11a/0x270 [ 606.420544][ C0] update_process_times+0x15f/0x190 [ 606.425774][ C0] tick_nohz_handler+0x249/0x2d0 [ 606.430753][ C0] __hrtimer_run_queues+0x20c/0x5a0 [ 606.435964][ C0] hrtimer_interrupt+0x21a/0x460 [ 606.440916][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 606.446829][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 606.452476][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 606.458471][ C0] __tsan_unaligned_volatile_read8+0x0/0x190 [ 606.464458][ C0] flush_to_ldisc+0x1d6/0x340 [ 606.469152][ C0] process_scheduled_works+0x4cb/0x9d0 [ 606.474618][ C0] worker_thread+0x582/0x770 [ 606.479236][ C0] kthread+0x489/0x510 [ 606.483318][ C0] ret_from_fork+0xda/0x150 [ 606.487863][ C0] ret_from_fork_asm+0x1a/0x30 [ 606.492635][ C0] [ 606.494962][ C0] read-write to 0xffff8881000734b8 of 8 bytes by interrupt on cpu 0: [ 606.503056][ C0] wq_worker_tick+0x60/0x230 [ 606.507652][ C0] sched_tick+0x11a/0x270 [ 606.512000][ C0] update_process_times+0x15f/0x190 [ 606.517226][ C0] tick_nohz_handler+0x249/0x2d0 [ 606.522176][ C0] __hrtimer_run_queues+0x20c/0x5a0 [ 606.527376][ C0] hrtimer_interrupt+0x21a/0x460 [ 606.532320][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 606.538226][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 606.543862][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 606.549847][ C0] __sanitizer_cov_trace_pc+0x11/0x70 [ 606.555238][ C0] pty_write_room+0x35/0x70 [ 606.559751][ C0] tty_write_room+0x3f/0x60 [ 606.564262][ C0] __process_echoes+0x36/0x6b0 [ 606.569027][ C0] n_tty_receive_buf_common+0x8e4/0xbe0 [ 606.574583][ C0] n_tty_receive_buf2+0x33/0x40 [ 606.579452][ C0] tty_ldisc_receive_buf+0x63/0xf0 [ 606.584581][ C0] tty_port_default_receive_buf+0x59/0x90 [ 606.590303][ C0] flush_to_ldisc+0x148/0x340 [ 606.594993][ C0] process_scheduled_works+0x4cb/0x9d0 [ 606.600507][ C0] worker_thread+0x582/0x770 [ 606.605138][ C0] kthread+0x489/0x510 [ 606.609217][ C0] ret_from_fork+0xda/0x150 [ 606.613727][ C0] ret_from_fork_asm+0x1a/0x30 [ 606.618500][ C0] [ 606.620826][ C0] value changed: 0x0000000001c13800 -> 0x0000000001c15f10 [ 606.627933][ C0] [ 606.630252][ C0] Reported by Kernel Concurrency Sanitizer on: [ 606.636402][ C0] CPU: 0 UID: 0 PID: 1938 Comm: kworker/u8:9 Tainted: G W 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 606.650226][ C0] Tainted: [W]=WARN [ 606.654025][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 606.664091][ C0] Workqueue: events_unbound flush_to_ldisc [ 606.669919][ C0] ==================================================================