last executing test programs: 3.686755576s ago: executing program 1 (id=28): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r1 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r1, 0x7000000) r2 = dup(r1) preadv2(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x2000, 0x0, 0x0) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x4) 3.504612294s ago: executing program 1 (id=32): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x0, 0x0, 0x0, 0xde63, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, @fallback=0x36, r0, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.360415001s ago: executing program 1 (id=33): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) creat(&(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f0000000900), 0x5, 0xa01) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x6, 0x10000, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x8, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) 2.449514585s ago: executing program 1 (id=49): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x8}, 0x10c0ec, 0x3, 0x40b7, 0x3, 0x9, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3022010, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7ef, &(0x7f0000002440)="$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") r0 = open(&(0x7f0000000280)='./file1\x00', 0x4827e, 0x10) fallocate(r0, 0x0, 0x0, 0x8800000) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='\na', 0x2) 2.357226699s ago: executing program 4 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write$binfmt_format(r1, &(0x7f00000000c0)='-1\x00', 0x3) 1.876998291s ago: executing program 4 (id=59): socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xdea, 0x7}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000002b400000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x4) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037002000000008000200", @ANYRES32=r0], 0x50}, 0x4, 0x700000000000000}, 0x4040814) 1.780191096s ago: executing program 4 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fac8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000100)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000fff500000001ff02000000000000000000000000000120e620e6"], 0x64) 1.395578114s ago: executing program 2 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff010}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1.328747577s ago: executing program 4 (id=65): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000180)={'system_u:object_r:qemu_device_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x7fffffff}, 0x47) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)={0x40, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x1c5e42, 0xcb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1.282997s ago: executing program 0 (id=66): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x20000, 0x0) 1.233695442s ago: executing program 2 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) recvmmsg(r0, 0x0, 0x0, 0x22, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0x51f2, 0xdb00, 0x10000008, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.185094324s ago: executing program 0 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) 1.160323755s ago: executing program 1 (id=69): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c12344000402f"], 0x1c) 1.080660459s ago: executing program 4 (id=70): socket(0x1, 0x4, 0xfffffffe) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, @perf_config_ext={0x1, 0x400}, 0x100200, 0x0, 0x0, 0x0, 0xf, 0x2, 0x800, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 1.048929301s ago: executing program 2 (id=71): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 917.845447ms ago: executing program 0 (id=72): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40851) write$sndseq(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) memfd_create(0x0, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl(r0, 0xc138fd0f, &(0x7f0000000000)="0400000000000000000000003801") 890.359478ms ago: executing program 2 (id=73): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) mkdir(0x0, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0x1007f}, 0xfffffffffffffee8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c76000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x8b9, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0x3, 0x30002b7}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)=0xf, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 794.206943ms ago: executing program 4 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0xc467) 756.507904ms ago: executing program 0 (id=75): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000002, &(0x7f0000000180), 0x2, 0x7b2, &(0x7f0000000b40)="$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") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v2={0x2000000, [{0x4, 0x4}, {0x1ff, 0x3}]}, 0x14, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 615.017651ms ago: executing program 0 (id=77): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x10000}, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@exit]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) recvmmsg(r0, &(0x7f0000000600), 0x0, 0x120a0, 0x0) connect$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 499.613276ms ago: executing program 3 (id=78): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x29, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 375.648342ms ago: executing program 3 (id=79): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 296.859346ms ago: executing program 3 (id=80): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x5, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x100000002}, 0x8100, 0xc8, 0x8, 0x0, 0xfffffffffffffffe, 0x38, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x17) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0xa, 0x6}, 0x7602, 0x5, 0x86, 0x0, 0x6, 0x6, 0x0, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000700)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8112032900fc08000000000200875a65969ff57b00fc"], 0xfdef) 238.712579ms ago: executing program 3 (id=81): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r1, 0x7fffffff, 0x12, 0x0, 0x0, @ib={0x1b, 0x8, 0x6, {"78c36cbe7e38dade0099fe4e9d908e9b"}, 0xffff, 0x1ff, 0xfffffffeffffffff}, @in6={0xa, 0x4e22, 0x2, @local, 0x2}}}, 0x118) 230.921869ms ago: executing program 2 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x5, 0x7, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x3}}]}, 0x8c}}, 0x4800) 169.765982ms ago: executing program 3 (id=83): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe, 0x40000}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0xfffffffe, 0xffff, 0x5}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 132.036564ms ago: executing program 0 (id=84): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5597c7114de75d6a, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 101.981826ms ago: executing program 1 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x91, 0x0, @empty}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x20008802) 73.847727ms ago: executing program 2 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4500001c123440004011149b0a0000010a00000204d2162e0008"], 0x1c) 0s ago: executing program 3 (id=87): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) kernel console output (not intermixed with test programs): [ 24.155816][ T29] audit: type=1400 audit(1789181373.105:103): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.155863][ T29] audit: type=1400 audit(1789181373.105:104): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.056681][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 25.056700][ T29] audit: type=1400 audit(1789181374.005:118): avc: denied { write } for pid=3221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.081516][ T29] audit: type=1400 audit(1789181374.025:119): avc: denied { write } for pid=3232 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.188042][ T29] audit: type=1400 audit(1789181374.135:120): avc: denied { write } for pid=3235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.220419][ T29] audit: type=1400 audit(1789181374.165:121): avc: denied { write } for pid=3246 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.291179][ T29] audit: type=1400 audit(1789181374.235:122): avc: denied { write } for pid=3249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.323564][ T29] audit: type=1400 audit(1789181374.265:123): avc: denied { write } for pid=3260 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.713425][ T29] audit: type=1400 audit(1789181374.655:124): avc: denied { write } for pid=3263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.749669][ T29] audit: type=1400 audit(1789181374.695:125): avc: denied { write } for pid=3274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 31.207639][ T29] audit: type=1400 audit(1789181380.155:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.207998][ T29] audit: type=1400 audit(1789181380.155:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.208626][ T3285] cgroup: Unknown subsys name 'net' [ 31.208916][ T29] audit: type=1400 audit(1789181380.155:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.355854][ T3285] cgroup: Unknown subsys name 'cpuset' [ 31.356599][ T3285] cgroup: Unknown subsys name 'rlimit' [ 31.444395][ T29] audit: type=1400 audit(1789181380.385:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.446520][ T29] audit: type=1400 audit(1789181380.395:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.448070][ T29] audit: type=1400 audit(1789181380.395:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.448160][ T29] audit: type=1400 audit(1789181380.395:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.465111][ T29] audit: type=1400 audit(1789181380.405:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.467252][ T29] audit: type=1400 audit(1789181380.415:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.515731][ T29] audit: type=1400 audit(1789181380.465:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.576104][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.618732][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.713453][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.713496][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.713654][ T3304] bridge_slave_0: entered allmulticast mode [ 33.714172][ T3304] bridge_slave_0: entered promiscuous mode [ 33.715961][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.716065][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.716391][ T3304] bridge_slave_1: entered allmulticast mode [ 33.717431][ T3304] bridge_slave_1: entered promiscuous mode [ 33.798635][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.799951][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.837717][ T3304] team0: Port device team_slave_0 added [ 33.839077][ T3304] team0: Port device team_slave_1 added [ 33.841975][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.842013][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.842094][ T3297] bridge_slave_0: entered allmulticast mode [ 33.842618][ T3297] bridge_slave_0: entered promiscuous mode [ 33.860522][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.860621][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.860774][ T3297] bridge_slave_1: entered allmulticast mode [ 33.862031][ T3297] bridge_slave_1: entered promiscuous mode [ 33.917508][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.917522][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.917555][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.918338][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.918427][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.918463][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.934957][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.937484][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.021819][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.021905][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.022059][ T3296] bridge_slave_0: entered allmulticast mode [ 34.023254][ T3296] bridge_slave_0: entered promiscuous mode [ 34.057122][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.057161][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.057227][ T3296] bridge_slave_1: entered allmulticast mode [ 34.057859][ T3296] bridge_slave_1: entered promiscuous mode [ 34.063168][ T3304] hsr_slave_0: entered promiscuous mode [ 34.064115][ T3304] hsr_slave_1: entered promiscuous mode [ 34.094691][ T3297] team0: Port device team_slave_0 added [ 34.109975][ T3297] team0: Port device team_slave_1 added [ 34.111179][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.112345][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.156492][ T3296] team0: Port device team_slave_0 added [ 34.173142][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.173179][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.173264][ T3301] bridge_slave_0: entered allmulticast mode [ 34.173671][ T3301] bridge_slave_0: entered promiscuous mode [ 34.191481][ T3296] team0: Port device team_slave_1 added [ 34.191766][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.191857][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.192080][ T3302] bridge_slave_0: entered allmulticast mode [ 34.193062][ T3302] bridge_slave_0: entered promiscuous mode [ 34.195585][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.195619][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.195724][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.204235][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.204320][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.204508][ T3301] bridge_slave_1: entered allmulticast mode [ 34.206556][ T3301] bridge_slave_1: entered promiscuous mode [ 34.227706][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.227748][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.227837][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.228414][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.228505][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.228745][ T3302] bridge_slave_1: entered allmulticast mode [ 34.230820][ T3302] bridge_slave_1: entered promiscuous mode [ 34.257615][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.257650][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.257809][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.283620][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.284617][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.284654][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.284738][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.318598][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.349276][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.418128][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.423167][ T3297] hsr_slave_0: entered promiscuous mode [ 34.423993][ T3297] hsr_slave_1: entered promiscuous mode [ 34.424508][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 34.424557][ T3297] Cannot create hsr debugfs directory [ 34.438136][ T3301] team0: Port device team_slave_0 added [ 34.473094][ T3301] team0: Port device team_slave_1 added [ 34.497706][ T3296] hsr_slave_0: entered promiscuous mode [ 34.498528][ T3296] hsr_slave_1: entered promiscuous mode [ 34.499106][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 34.499147][ T3296] Cannot create hsr debugfs directory [ 34.527761][ T3302] team0: Port device team_slave_0 added [ 34.530087][ T3302] team0: Port device team_slave_1 added [ 34.552720][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.552792][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.552881][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.571425][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.571477][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.571602][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.602128][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.602172][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.602275][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.703489][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.703506][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.703602][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.762690][ T3301] hsr_slave_0: entered promiscuous mode [ 34.763245][ T3301] hsr_slave_1: entered promiscuous mode [ 34.763502][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 34.763524][ T3301] Cannot create hsr debugfs directory [ 34.807527][ T3302] hsr_slave_0: entered promiscuous mode [ 34.808057][ T3302] hsr_slave_1: entered promiscuous mode [ 34.808338][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 34.808357][ T3302] Cannot create hsr debugfs directory [ 34.852553][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.854454][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.877368][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.879062][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.881649][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.883598][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.923586][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.926498][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.002136][ T3296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.003929][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.023178][ T3296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.025731][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.045830][ T3296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.047678][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.048499][ T3296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.050317][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.077674][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.088154][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.101322][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.103413][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.119202][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.121208][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.121714][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.123793][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.156272][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.158679][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.167808][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.175958][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.185960][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.197442][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.210568][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.212534][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.214036][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.247760][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.249590][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.276579][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.278727][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.279338][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.281574][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.282564][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.288598][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.296123][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.327500][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.327664][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.352929][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.352958][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.376978][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.402829][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.417342][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.420670][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.420705][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.434190][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.434277][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.447212][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.447319][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.461259][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.499804][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.499858][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.525502][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.528485][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.528537][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.569704][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.579976][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.598979][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.599009][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.623185][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.623222][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.644480][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.662070][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.662108][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.683156][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.683201][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.722198][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.803437][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.957898][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.963152][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.995936][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.028681][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.155986][ T3304] veth0_vlan: entered promiscuous mode [ 36.160927][ T3304] veth1_vlan: entered promiscuous mode [ 36.190457][ T3301] veth0_vlan: entered promiscuous mode [ 36.192962][ T3301] veth1_vlan: entered promiscuous mode [ 36.223368][ T3302] veth0_vlan: entered promiscuous mode [ 36.231603][ T3296] veth0_vlan: entered promiscuous mode [ 36.232409][ T3302] veth1_vlan: entered promiscuous mode [ 36.251271][ T3296] veth1_vlan: entered promiscuous mode [ 36.252489][ T3304] veth0_macvtap: entered promiscuous mode [ 36.263985][ T3301] veth0_macvtap: entered promiscuous mode [ 36.279015][ T3301] veth1_macvtap: entered promiscuous mode [ 36.280035][ T3304] veth1_macvtap: entered promiscuous mode [ 36.284819][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.305142][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.309312][ T3302] veth0_macvtap: entered promiscuous mode [ 36.314429][ T3297] veth0_vlan: entered promiscuous mode [ 36.328059][ T3296] veth0_macvtap: entered promiscuous mode [ 36.331607][ T3296] veth1_macvtap: entered promiscuous mode [ 36.344146][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.351161][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.360866][ T3302] veth1_macvtap: entered promiscuous mode [ 36.380712][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.397750][ T3297] veth1_vlan: entered promiscuous mode [ 36.399212][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.399675][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 36.399686][ T29] audit: type=1400 audit(1789181385.345:147): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.qBzzT1/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 36.399750][ T29] audit: type=1400 audit(1789181385.345:148): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 36.403039][ T29] audit: type=1400 audit(1789181385.345:149): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.qBzzT1/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 36.408722][ T29] audit: type=1400 audit(1789181385.355:150): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.409813][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.411693][ T29] audit: type=1400 audit(1789181385.355:151): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.qBzzT1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 36.412289][ T29] audit: type=1400 audit(1789181385.355:152): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.qBzzT1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 36.415005][ T29] audit: type=1400 audit(1789181385.355:153): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.425397][ T29] audit: type=1400 audit(1789181385.375:154): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 36.428052][ T29] audit: type=1400 audit(1789181385.375:155): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=5383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 36.458535][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.458661][ T38] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.458773][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.458883][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.459008][ T38] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.459190][ T38] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.459305][ T38] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.459421][ T38] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.473090][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.627870][ T3301] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.674434][ T3297] veth0_macvtap: entered promiscuous mode [ 36.761369][ T3297] veth1_macvtap: entered promiscuous mode [ 36.772856][ T29] audit: type=1400 audit(1789181385.725:156): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.776113][ T405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.805266][ T405] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.831424][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.844015][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.156137][ T313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.156461][ T313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.156775][ T313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.157041][ T313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.157265][ T313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.158922][ T313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.159085][ T313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.159312][ T313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.159691][ T313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.985600][ T405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.009420][ T3626] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 38.150080][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bfdfc00: rx timeout, send abort [ 38.150190][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bfdfc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 38.264264][ T3647] loop4: detected capacity change from 0 to 7 [ 38.265432][ T3647] loop4: [ 38.340844][ T3653] sl0: entered promiscuous mode [ 38.913377][ T3706] FAULT_INJECTION: forcing a failure. [ 38.913377][ T3706] name failslab, interval 1, probability 0, space 0, times 0 [ 38.913426][ T3706] CPU: 1 UID: 0 PID: 3706 Comm: syz.1.25 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.913457][ T3706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.913490][ T3706] Call Trace: [ 38.913499][ T3706] [ 38.913509][ T3706] __dump_stack+0x1d/0x30 [ 38.913584][ T3706] dump_stack_lvl+0x95/0xd0 [ 38.913611][ T3706] dump_stack+0x15/0x1b [ 38.913637][ T3706] should_fail_ex+0x262/0x280 [ 38.913670][ T3706] should_failslab+0x8c/0xb0 [ 38.913705][ T3706] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 38.913800][ T3706] ? v9fs_init_fs_context+0x33/0x220 [ 38.913837][ T3706] ? v9fs_init_fs_context+0x9d/0x220 [ 38.913879][ T3706] ? v9fs_init_fs_context+0x9d/0x220 [ 38.913903][ T3706] ? __kmalloc_cache_noprof+0x19b/0x400 [ 38.913942][ T3706] kstrdup+0x3e/0xd0 [ 38.913983][ T3706] v9fs_init_fs_context+0x9d/0x220 [ 38.914023][ T3706] alloc_fs_context+0x490/0x570 [ 38.914084][ T3706] fs_context_for_mount+0x22/0x30 [ 38.914112][ T3706] do_new_mount+0xe7/0x8d0 [ 38.914228][ T3706] ? security_capable+0x7b/0x90 [ 38.914256][ T3706] path_mount+0x4ad/0xb90 [ 38.914362][ T3706] __se_sys_mount+0x28c/0x2e0 [ 38.914381][ T3706] __x64_sys_mount+0x67/0x80 [ 38.914404][ T3706] x64_sys_call+0xc3b/0x2550 [ 38.914512][ T3706] do_syscall_64+0x112/0x360 [ 38.914564][ T3706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.914591][ T3706] RIP: 0033:0x7f39506ee159 [ 38.914610][ T3706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.914770][ T3706] RSP: 002b:00007f394f147028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.914799][ T3706] RAX: ffffffffffffffda RBX: 00007f3950975fa0 RCX: 00007f39506ee159 [ 38.914816][ T3706] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 38.914833][ T3706] RBP: 00007f395078503b R08: 00002000000005c0 R09: 0000000000000000 [ 38.914852][ T3706] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 38.914867][ T3706] R13: 00007f3950976038 R14: 00007f3950975fa0 R15: 00007fff060118b8 [ 38.914941][ T3706] [ 39.227968][ T3684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 39.386086][ T3732] syzkaller0: entered promiscuous mode [ 39.386108][ T3732] syzkaller0: entered allmulticast mode [ 39.388317][ T3731] syzkaller1: entered promiscuous mode [ 39.388412][ T3731] syzkaller1: entered allmulticast mode [ 39.532080][ T3738] loop3: detected capacity change from 0 to 512 [ 39.670312][ T3746] loop4: detected capacity change from 0 to 512 [ 39.670648][ T3746] ======================================================= [ 39.670648][ T3746] WARNING: The mand mount option has been deprecated and [ 39.670648][ T3746] and is ignored by this kernel. Remove the mand [ 39.670648][ T3746] option from the mount to silence this warning. [ 39.670648][ T3746] ======================================================= [ 39.741235][ T3748] FAULT_INJECTION: forcing a failure. [ 39.741235][ T3748] name failslab, interval 1, probability 0, space 0, times 0 [ 39.741263][ T3748] CPU: 0 UID: 0 PID: 3748 Comm: syz.3.38 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.741295][ T3748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.741368][ T3748] Call Trace: [ 39.741377][ T3748] [ 39.741387][ T3748] __dump_stack+0x1d/0x30 [ 39.741461][ T3748] dump_stack_lvl+0x95/0xd0 [ 39.741488][ T3748] dump_stack+0x15/0x1b [ 39.741535][ T3748] should_fail_ex+0x262/0x280 [ 39.741567][ T3748] ? alloc_empty_file+0x70/0x1e0 [ 39.741647][ T3748] should_failslab+0x8c/0xb0 [ 39.741731][ T3748] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 39.741767][ T3748] ? alloc_empty_file+0x70/0x1e0 [ 39.741790][ T3748] alloc_empty_file+0x70/0x1e0 [ 39.741828][ T3748] alloc_file_pseudo+0x92/0x120 [ 39.741853][ T3748] anon_inode_getfile+0xa0/0x120 [ 39.741874][ T3748] __se_sys_perf_event_open+0xbfa/0x1280 [ 39.741924][ T3748] __x64_sys_perf_event_open+0x67/0x80 [ 39.741986][ T3748] x64_sys_call+0x1f25/0x2550 [ 39.742021][ T3748] do_syscall_64+0x112/0x360 [ 39.742061][ T3748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.742142][ T3748] RIP: 0033:0x7fde5d46e159 [ 39.742163][ T3748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.742206][ T3748] RSP: 002b:00007fde5bec7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 39.742227][ T3748] RAX: ffffffffffffffda RBX: 00007fde5d6f5fa0 RCX: 00007fde5d46e159 [ 39.742242][ T3748] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500 [ 39.742259][ T3748] RBP: 00007fde5d50503b R08: 0000000000000000 R09: 0000000000000000 [ 39.742294][ T3748] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 39.742311][ T3748] R13: 00007fde5d6f6038 R14: 00007fde5d6f5fa0 R15: 00007ffdc0398d98 [ 39.742331][ T3748] [ 40.076570][ T3755] loop2: detected capacity change from 0 to 512 [ 40.133256][ T3755] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.141955][ T3758] loop3: detected capacity change from 0 to 128 [ 40.153960][ T3755] EXT4-fs error (device loop2): ext4_xattr_inode_iget:473: comm syz.2.40: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 40.154112][ T3755] loop2: lost filesystem error report for type 5 error -117 [ 40.169547][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 40.169586][ C1] EXT4-fs (loop2): initial error at time 1789181389: ext4_xattr_inode_iget:473 [ 40.169618][ C1] EXT4-fs (loop2): last error at time 1789181389: ext4_xattr_inode_iget:473 [ 40.175543][ T3758] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.206376][ T3755] EXT4-fs (loop2): 1 orphan inode deleted [ 40.226427][ T3755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.315441][ T3296] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.391410][ T3773] syz.2.45 uses obsolete (PF_INET,SOCK_PACKET) [ 40.474023][ T3777] loop0: detected capacity change from 0 to 1024 [ 40.474932][ T3777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.539205][ T3777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.591596][ T3795] loop3: detected capacity change from 0 to 1024 [ 40.606875][ T3782] loop1: detected capacity change from 0 to 2048 [ 40.627282][ T3795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.644955][ T3795] FAULT_INJECTION: forcing a failure. [ 40.644955][ T3795] name failslab, interval 1, probability 0, space 0, times 0 [ 40.645087][ T3795] CPU: 0 UID: 0 PID: 3795 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.645176][ T3795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.645224][ T3795] Call Trace: [ 40.645245][ T3795] [ 40.645273][ T3795] __dump_stack+0x1d/0x30 [ 40.645348][ T3795] dump_stack_lvl+0x95/0xd0 [ 40.645419][ T3795] dump_stack+0x15/0x1b [ 40.645502][ T3795] should_fail_ex+0x262/0x280 [ 40.645581][ T3795] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 40.645652][ T3795] should_failslab+0x8c/0xb0 [ 40.645758][ T3795] __kmalloc_cache_noprof+0x7a/0x400 [ 40.645942][ T3795] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 40.646012][ T3795] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 40.646092][ T3795] bpf_prog_alloc_no_stats+0xc4/0x390 [ 40.646173][ T3795] bpf_prog_alloc+0x3c/0x150 [ 40.646326][ T3795] bpf_prog_load+0x54b/0x1060 [ 40.646406][ T3795] ? avc_has_perm_noaudit+0xa3/0x120 [ 40.646566][ T3795] __sys_bpf+0xbae/0xc30 [ 40.646642][ T3795] ? do_futex+0x3f0/0x460 [ 40.646809][ T3795] __x64_sys_bpf+0x69/0x80 [ 40.646877][ T3795] x64_sys_call+0xf26/0x2550 [ 40.646917][ T3795] do_syscall_64+0x112/0x360 [ 40.646965][ T3795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.646996][ T3795] RIP: 0033:0x7fde5d46e159 [ 40.647014][ T3795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.647038][ T3795] RSP: 002b:00007fde5bec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 40.647061][ T3795] RAX: ffffffffffffffda RBX: 00007fde5d6f5fa0 RCX: 00007fde5d46e159 [ 40.647077][ T3795] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 40.647089][ T3795] RBP: 00007fde5d50503b R08: 0000000000000000 R09: 0000000000000000 [ 40.647101][ T3795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.647146][ T3795] R13: 00007fde5d6f6038 R14: 00007fde5d6f5fa0 R15: 00007ffdc0398d98 [ 40.647214][ T3795] [ 40.721445][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.880525][ T3801] mmap: syz.0.55 (3801) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.891009][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.024506][ T3811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.59'. [ 41.128796][ T3823] FAULT_INJECTION: forcing a failure. [ 41.128796][ T3823] name failslab, interval 1, probability 0, space 0, times 0 [ 41.128902][ T3823] CPU: 1 UID: 0 PID: 3823 Comm: syz.0.61 Not tainted syzkaller #0 PREEMPT(lazy) [ 41.128937][ T3823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.128997][ T3823] Call Trace: [ 41.129008][ T3823] [ 41.129018][ T3823] __dump_stack+0x1d/0x30 [ 41.129085][ T3823] dump_stack_lvl+0x95/0xd0 [ 41.129189][ T3823] dump_stack+0x15/0x1b [ 41.129264][ T3823] should_fail_ex+0x262/0x280 [ 41.129298][ T3823] ? alloc_pwq+0x629/0x670 [ 41.129332][ T3823] should_failslab+0x8c/0xb0 [ 41.129374][ T3823] kmem_cache_alloc_node_noprof+0x82/0x400 [ 41.129414][ T3823] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 41.129529][ T3823] ? alloc_pwq+0x629/0x670 [ 41.129573][ T3823] alloc_pwq+0x629/0x670 [ 41.129663][ T3823] apply_wqattrs_prepare+0x1d3/0x840 [ 41.129711][ T3823] alloc_workqueue_va+0xac1/0x1630 [ 41.129793][ T3823] alloc_workqueue_noprof+0x84/0xb0 [ 41.129839][ T3823] ? timer_init_key+0x75/0x130 [ 41.129877][ T3823] __rds_conn_create+0xa85/0x11a0 [ 41.129908][ T3823] rds_conn_create_outgoing+0x43/0x60 [ 41.129930][ T3823] rds_sendmsg+0xbf0/0x1580 [ 41.130042][ T3823] ? __pfx_rds_sendmsg+0x10/0x10 [ 41.130141][ T3823] ____sys_sendmsg+0x532/0x580 [ 41.130208][ T3823] ___sys_sendmsg+0x195/0x1e0 [ 41.130243][ T3823] __x64_sys_sendmsg+0xd4/0x160 [ 41.130275][ T3823] x64_sys_call+0x22ab/0x2550 [ 41.130381][ T3823] do_syscall_64+0x112/0x360 [ 41.130470][ T3823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.130494][ T3823] RIP: 0033:0x7fd8207de159 [ 41.130544][ T3823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.130569][ T3823] RSP: 002b:00007fd81f237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.130640][ T3823] RAX: ffffffffffffffda RBX: 00007fd820a65fa0 RCX: 00007fd8207de159 [ 41.130654][ T3823] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 41.130708][ T3823] RBP: 00007fd82087503b R08: 0000000000000000 R09: 0000000000000000 [ 41.130726][ T3823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.130744][ T3823] R13: 00007fd820a66038 R14: 00007fd820a65fa0 R15: 00007ffd2451bb28 [ 41.130765][ T3823] [ 41.405057][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 41.405076][ T29] audit: type=1400 audit(1789181390.345:290): avc: denied { write } for pid=3826 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.476755][ T3829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.63'. [ 41.489838][ T3829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.63'. [ 41.589971][ T3829] syz.0.63 (3829) used greatest stack depth: 10624 bytes left [ 41.664571][ T29] audit: type=1400 audit(1789181390.605:291): avc: denied { ioctl } for pid=3838 comm="syz.2.67" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 41.673296][ T29] audit: type=1400 audit(1789181390.615:292): avc: denied { mount } for pid=3833 comm="syz.4.65" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 41.777934][ T29] audit: type=1400 audit(1789181390.725:293): avc: denied { ioctl } for pid=3843 comm="syz.0.68" path="socket:[6326]" dev="sockfs" ino=6326 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 41.780094][ T3844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 41.791211][ T29] audit: type=1400 audit(1789181390.725:294): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 41.877474][ T3850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.71'. [ 41.886887][ T29] audit: type=1400 audit(1789181390.835:295): avc: denied { bind } for pid=3849 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.011495][ T29] audit: type=1400 audit(1789181390.955:296): avc: denied { read } for pid=3852 comm="syz.0.72" name="control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 42.011532][ T29] audit: type=1400 audit(1789181390.955:297): avc: denied { open } for pid=3852 comm="syz.0.72" path="/19/dev/mapper/control" dev="devtmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 42.012125][ T29] audit: type=1400 audit(1789181390.955:298): avc: denied { ioctl } for pid=3852 comm="syz.0.72" path="/19/dev/mapper/control" dev="devtmpfs" ino=248 ioctlcmd=0xfd0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 42.169785][ T3859] loop0: detected capacity change from 0 to 2048 [ 42.198180][ T3859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.202921][ T29] audit: type=1400 audit(1789181391.145:299): avc: denied { setattr } for pid=3858 comm="syz.0.75" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.263566][ T3863] loop3: detected capacity change from 0 to 2048 [ 42.263695][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.304335][ T3863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.374608][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.783010][ T3889] bridge0: port 3(syz_tun) entered blocking state [ 42.783047][ T3889] bridge0: port 3(syz_tun) entered disabled state [ 42.783226][ T3889] syz_tun: entered allmulticast mode [ 42.783722][ T3889] syz_tun: entered promiscuous mode [ 42.783911][ T3889] bridge0: port 3(syz_tun) entered blocking state [ 42.784017][ T3889] bridge0: port 3(syz_tun) entered forwarding state [ 42.827031][ T3889] bridge0: port 3(syz_tun) entered disabled state [ 42.828550][ T3889] syz_tun (unregistering): left allmulticast mode [ 42.828575][ T3889] syz_tun (unregistering): left promiscuous mode [ 42.828668][ T3889] bridge0: port 3(syz_tun) entered disabled state [ 42.867302][ T3864] ================================================================== [ 42.867338][ T3864] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 42.867378][ T3864] [ 42.867383][ T3864] read-write to 0xffff888106f8b900 of 8 bytes by task 3612 on cpu 0: [ 42.867398][ T3864] __xa_clear_mark+0xf5/0x1e0 [ 42.867416][ T3864] __folio_end_writeback+0xe7/0x530 [ 42.867450][ T3864] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 42.867479][ T3864] folio_end_writeback+0x1c/0x70 [ 42.867502][ T3864] ext4_finish_bio+0x454/0x770 [ 42.867527][ T3864] ext4_release_io_end+0x9f/0x1f0 [ 42.867547][ T3864] ext4_end_io_end+0x18d/0x240 [ 42.867565][ T3864] ext4_end_io_rsv_work+0x15b/0x1f0 [ 42.867582][ T3864] process_scheduled_works+0x56a/0xa50 [ 42.867618][ T3864] worker_thread+0x569/0x750 [ 42.867654][ T3864] kthread+0x223/0x270 [ 42.867677][ T3864] ret_from_fork+0x146/0x330 [ 42.867705][ T3864] ret_from_fork_asm+0x1a/0x30 [ 42.867726][ T3864] [ 42.867731][ T3864] read to 0xffff888106f8b900 of 8 bytes by task 3864 on cpu 1: [ 42.867745][ T3864] xas_find_marked+0x211/0x650 [ 42.867781][ T3864] filemap_get_folios_tag+0xf7/0x400 [ 42.867807][ T3864] filemap_write_and_wait_range+0x1f5/0x370 [ 42.867841][ T3864] ext4_bmap+0x155/0x190 [ 42.867872][ T3864] bmap+0x5c/0x90 [ 42.867898][ T3864] file_ioctl+0x35c/0x5b0 [ 42.867932][ T3864] do_vfs_ioctl+0x7c4/0xe50 [ 42.867966][ T3864] __se_sys_ioctl+0x82/0x140 [ 42.867990][ T3864] __x64_sys_ioctl+0x43/0x50 [ 42.868015][ T3864] x64_sys_call+0x239d/0x2550 [ 42.868041][ T3864] do_syscall_64+0x112/0x360 [ 42.868070][ T3864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.868088][ T3864] [ 42.868092][ T3864] value changed: 0xffffffffff800000 -> 0xffffff8000000000 [ 42.868103][ T3864] [ 42.868106][ T3864] Reported by Kernel Concurrency Sanitizer on: [ 42.868118][ T3864] CPU: 1 UID: 0 PID: 3864 Comm: syz.4.74 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.868148][ T3864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.868170][ T3864] ================================================================== [ 43.052963][ T3892] TC_ACT_REPEAT abuse ?