last executing test programs: 8.185940739s ago: executing program 4 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) readv(0xffffffffffffffff, &(0x7f0000001440)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0xe}, 0x19d01, 0x0, 0x11ffe, 0x0, 0x7fff, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x100000000008}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee61e00bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 6.777528054s ago: executing program 1 (id=63): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000740)={0x0}, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1b, 0x7ff, 0x6}}}}]}, 0x48}}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5e0}], 0x1}, 0x4) 6.170875473s ago: executing program 1 (id=66): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdae"], 0x0, 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x1000000, 0x25dfdbfd, {}, [@IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc}, 0x1c) 6.013343688s ago: executing program 4 (id=68): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7, 0x6}, 0x204, 0x0, 0x7bb00, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0xc4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x5}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0xb, 0x8, 0x9, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0xc000001, 0x9, 0x2, 0x3}, {0x0, 0x8000, 0x1, 0x32ec}, {0x9, 0x8, 0x7, 0x4}, {0x4, 0x2, 0xc5f5, 0x7fffffff}, {0xffff, 0x7, 0x2, 0x9}, {0xffffffff, 0x6, 0x80, 0x4}, {0x8, 0xb56, 0x1003}, {0x6, 0x4, 0x4d, 0x653}]}}]}}]}, 0xc4}}, 0x24040084) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 5.716319577s ago: executing program 4 (id=70): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6043440a000040433cb17e060000000821f7622a00348973e77b00"/50], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000080)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$eJzs3T9rc1UYAPDn5l9THRLERRG8oINTeaujS6O8gtBJiIuLwbcFSUqhhYAVrZ36BXQUwU/h6ubsNxB0FNzaoXLl5t7bJDapwf6T+vstPT3nPuc+5zyQTnn68St7w2f7SZyc/RLtdhK1rdiK8yS6UYvKV3EWAMDjcZ5l8UcWEc3i92TlyEbt7rICAO5S8fe/8NC5AAD347fv3/qit7399IM0bcdLndNxP4mIvdNxv1jv7canMYqdeBKduIjILhXj997ffhqNNNeN1/eOx/3x3P6932N9Er8Znegujt9MC2V8PyL/2YznIo3ebrPaqhMvLo5/c0F89Fvxxmsz+W9EJ37+JPZjFM8ij53Gf7mZpu9m35x9/lH+mjw+qUV/bfJcaT0iq99bUQAAAAAAAAAAAAAAAAAAAAAAePQ20jQp2vdM+vfkU2X/nfrFZH0jrXTn+/MU8Zf9gov+QFmULXqOs/i26q/zJE3TrHxwGt+IlxvReJhTAwAAAAAAAAAAAAAAAAAAwH/L4WdHw8FotHNw40F9OBhV3QCqr/X/2w23ZmZejaPhoL58w7XV3zXbbSDP9dqHo9GIW7iWfx7Ej+t5Pkue+a7Mt5ypr36ra9PifliGV4W51VO88M5lhmm5VF3ycJAU71qec7ta+mF2qRUrp5EkczOT2o52DrLJRV1k8zVtz13mdKm17BVfJ/kpVrqNvDSt5xcu/Zll2WrHefvXokblTDJpsbFaLZrlYOEB80H7at1/Wr7h0o+M+k0/cwAAAAAAAAAAAAAAAAAAgMXmvzj9NyfXhtbuLCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuGfT//9fDdoRMT9zZXBcBl/3TDloxcHhAx8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/4G/AgAA//9x9ETn") openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.426322567s ago: executing program 1 (id=74): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = syz_clone(0xa1302400, 0x0, 0x57, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_pidfd_open(r1, 0x0) process_mrelease(r2, 0x700000000000000) writev(r0, &(0x7f0000000780)=[{&(0x7f00000000c0)="4d2e2e7c8bdc018d531b710a78ed2ce8e3298297c11cd0d6371dbfdb7a91885dd2e6fc18a41fe4ac1b", 0x29}], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000008c0)="a905000000007464000100000000ae5774ee54bbda4c1a986374cf1ea1a6aefe6a5c90db", 0x2c}], 0x1}}], 0x1, 0x24004044) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000200)="201064414d65af6dabca84da06e7eea01290879483af69d778ee39af46e3f9e1a799a7535857a8b6f4", 0x29) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 5.057277329s ago: executing program 1 (id=76): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f00000000c0)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=r3}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) chroot(&(0x7f0000000200)='./file0\x00') 4.885846724s ago: executing program 3 (id=78): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_setup(0x6c0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, 0x0, 0x0, 0x20008840) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) shutdown(r0, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48890, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x89901) move_mount(r1, 0x0, r1, 0x0, 0x46) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 4.831024546s ago: executing program 3 (id=79): perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000acc000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000009e000c0046723040dcf851353d80428b66c4a5c76fdd086344be5b4b365b030000000000000098b7647dd42e1f003e993562f77b29872355e30839152ef602e4e7b1a25f4123ba0b4f5889c3681c221c0b96e521524250432d6063a60098490ece73ddd10f0030be88fed0a90e3ad8f6863296818bb85f56f7ce8ea7f57bd1a124d9398abb1f83e8205bc2cc80e9577a02dd7f0018c1ac994fbb855ea542000014000000110001"], 0xf4}, 0x1, 0x0, 0x0, 0x4000855}, 0x24000840) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbad0800470000380000000000019078ac1e0001ac1414aa0194040000000000030490781200183f250000000002000000010000e00000017f000001"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000180)={0x0}, 0x1) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x103300, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e1208000c0002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f", 0x6c}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r3, 0xc4c03d09, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400481d) 4.71866726s ago: executing program 4 (id=80): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x3, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 4.452888308s ago: executing program 0 (id=81): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x2a02, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, 0x0, 0x20000000) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, 0x0, 0x4) 4.440390669s ago: executing program 3 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, 0x0, 0x8004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) 3.946310434s ago: executing program 0 (id=84): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$llc(0x1a, 0x802, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1407, 0x1}, 0x10}}, 0x0) 3.860487137s ago: executing program 3 (id=85): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x7, 0x3}, 0x8000, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek(r3, 0xa777, 0x0) accept$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r6) mq_open(0x0, 0x1, 0x11, &(0x7f0000000180)={0xffff, 0x7f, 0x9, 0x8}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$KDSKBENT(0xffffffffffffffff, 0x560a, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c00dce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.004746314s ago: executing program 0 (id=86): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f0000da5000/0x4000)=nil, 0x4000, 0x2, 0x4c831, 0xffffffffffffffff, 0xb89bc000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) 2.484989081s ago: executing program 3 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r3 = dup(r2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x800000003, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x1}}, 0xb8}}, 0x50) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) 2.19159485s ago: executing program 1 (id=89): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioprio_set$pid(0x2, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioperm(0x40, 0x9, 0x7f) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) getgid() socket$inet6_sctp(0xa, 0x5, 0x84) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) munlock(&(0x7f0000002000/0x1000)=nil, 0x1000) 1.88289221s ago: executing program 0 (id=90): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, 0x0) 1.747360404s ago: executing program 0 (id=91): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) 1.55754515s ago: executing program 4 (id=92): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) preadv(r0, &(0x7f00000025c0)=[{&(0x7f0000000040)=""/169, 0xa9}, {&(0x7f0000000100)=""/50, 0x32}, {0x0}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000840)=""/137, 0x89}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/235, 0xeb}, {0x0}, {&(0x7f00000024c0)=""/230, 0xe6}], 0x9, 0x1, 0x401) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x3, 0x6, 0x0, 0x100, 0x4, 0x540210, r4}) 763.672586ms ago: executing program 0 (id=94): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x4, 0x6, 0x7ff, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2008c010) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) 763.272806ms ago: executing program 2 (id=95): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) fsopen(0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) close(0x3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) 518.633174ms ago: executing program 4 (id=96): socket$inet(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 428.036127ms ago: executing program 1 (id=97): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfea7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 374.217039ms ago: executing program 2 (id=98): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) msgget$private(0x0, 0x404) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0xb0, r1, 0x1, 0x70bd2d, 0x65dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) fsync(0xffffffffffffffff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x2400000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0xffa, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 301.047661ms ago: executing program 2 (id=99): socket$netlink(0x10, 0x3, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x1}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x42283, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r3, 0x9, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, &(0x7f0000000000)=0xc, 0x4) ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_ADD(r2, 0x0, 0x2400c000) getpgrp(0x0) 108.198127ms ago: executing program 2 (id=100): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$rds(0x15, 0x5, 0x0) unshare(0x2c020400) r3 = socket(0x2, 0xa, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40850) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) r5 = dup(r4) bind$unix(r5, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r7 = dup(r6) bind$unix(r7, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) getpeername$llc(r3, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@fadd={0x58, 0x114, 0x6, {{0x3, 0xffffffff}, &(0x7f0000000080)=0xfd, 0x0, 0x7, 0xfffffffffffffffd, 0x9, 0x4, 0x75, 0xcf9}}], 0x58, 0x9eefccb24cc890e7}, 0x0) 12.28826ms ago: executing program 3 (id=101): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x10910, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x6) syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x880, &(0x7f0000000540)={[{@utf8no}, {@utf8}, {@shortname_mixed}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8no}, {@rodir}, {@utf8}, {@numtail}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_win95}]}, 0x26, 0x356, &(0x7f0000000100)="$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") getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f0000000040), &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2004c080) futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/nf_conntrack\x00') getdents64(r1, &(0x7f0000001f80)=""/4110, 0x100e) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) 0s ago: executing program 2 (id=102): socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x5ad7, &(0x7f0000000040)={0x0, 0xe5a6, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getpid() perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9, 0x6409}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x7fffffff}]}}}]}, 0x54}}, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e22, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002540)=ANY=[@ANYBLOB="140000001000010000005e7918e30b1b3d60000a28000000000a050000000000000000000300000308000240000000050900010073797a300000000028000000000a0104000000000000000003000a0a0900010073797a30000000000800024000000007"], 0x78}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000140)={0x9d3, 0x2, 0x10001, 0x7, 0x7}) kernel console output (not intermixed with test programs): 5): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. [ 33.228106][ T28] audit: type=1400 audit(1781217922.595:126): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.251332][ T28] audit: type=1400 audit(1781217922.615:127): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.253693][ T3287] cgroup: Unknown subsys name 'net' [ 33.279230][ T28] audit: type=1400 audit(1781217922.645:128): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.374962][ T3287] cgroup: Unknown subsys name 'cpuset' [ 33.381291][ T3287] cgroup: Unknown subsys name 'rlimit' [ 33.492801][ T28] audit: type=1400 audit(1781217922.855:129): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.516518][ T28] audit: type=1400 audit(1781217922.855:130): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.541954][ T28] audit: type=1400 audit(1781217922.855:131): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.562598][ T28] audit: type=1400 audit(1781217922.855:132): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.583173][ T28] audit: type=1400 audit(1781217922.855:133): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.603646][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.604761][ T28] audit: type=1400 audit(1781217922.885:134): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.637746][ T28] audit: type=1400 audit(1781217922.885:135): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.655819][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.026639][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.033830][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.041174][ T3300] bridge_slave_0: entered allmulticast mode [ 35.047881][ T3300] bridge_slave_0: entered promiscuous mode [ 35.070671][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.077818][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.085118][ T3300] bridge_slave_1: entered allmulticast mode [ 35.091663][ T3300] bridge_slave_1: entered promiscuous mode [ 35.134613][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.141757][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.149182][ T3299] bridge_slave_0: entered allmulticast mode [ 35.155813][ T3299] bridge_slave_0: entered promiscuous mode [ 35.171741][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.179036][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.186297][ T3305] bridge_slave_0: entered allmulticast mode [ 35.192990][ T3305] bridge_slave_0: entered promiscuous mode [ 35.199750][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.207053][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.214539][ T3299] bridge_slave_1: entered allmulticast mode [ 35.221039][ T3299] bridge_slave_1: entered promiscuous mode [ 35.229212][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.244482][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.251662][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.258999][ T3305] bridge_slave_1: entered allmulticast mode [ 35.265735][ T3305] bridge_slave_1: entered promiscuous mode [ 35.278565][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.322429][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.346903][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.357214][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.367202][ T3300] team0: Port device team_slave_0 added [ 35.372922][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.380081][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.387410][ T3303] bridge_slave_0: entered allmulticast mode [ 35.393960][ T3303] bridge_slave_0: entered promiscuous mode [ 35.400517][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.407845][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.415190][ T3304] bridge_slave_0: entered allmulticast mode [ 35.421987][ T3304] bridge_slave_0: entered promiscuous mode [ 35.430019][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.449655][ T3300] team0: Port device team_slave_1 added [ 35.460095][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.467461][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.474964][ T3303] bridge_slave_1: entered allmulticast mode [ 35.481483][ T3303] bridge_slave_1: entered promiscuous mode [ 35.488047][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.495717][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.503048][ T3304] bridge_slave_1: entered allmulticast mode [ 35.509570][ T3304] bridge_slave_1: entered promiscuous mode [ 35.540719][ T3305] team0: Port device team_slave_0 added [ 35.547359][ T3299] team0: Port device team_slave_0 added [ 35.553328][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.560461][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.586491][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.608126][ T3305] team0: Port device team_slave_1 added [ 35.614674][ T3299] team0: Port device team_slave_1 added [ 35.625761][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.632759][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.658965][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.671234][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.681767][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.705010][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.715358][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.729719][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.736806][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.762961][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.774921][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.782006][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.808136][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.829271][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.836410][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.862403][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.891630][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.898728][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.924941][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.952344][ T3303] team0: Port device team_slave_0 added [ 35.958880][ T3304] team0: Port device team_slave_0 added [ 35.966045][ T3304] team0: Port device team_slave_1 added [ 35.979588][ T3300] hsr_slave_0: entered promiscuous mode [ 35.986180][ T3300] hsr_slave_1: entered promiscuous mode [ 35.992930][ T3303] team0: Port device team_slave_1 added [ 36.017955][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.025141][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.051390][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.082087][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.089349][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.115723][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.126716][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.133728][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.159869][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.172806][ T3305] hsr_slave_0: entered promiscuous mode [ 36.179027][ T3305] hsr_slave_1: entered promiscuous mode [ 36.184935][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 36.190786][ T3305] Cannot create hsr debugfs directory [ 36.199487][ T3299] hsr_slave_0: entered promiscuous mode [ 36.205774][ T3299] hsr_slave_1: entered promiscuous mode [ 36.211728][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 36.217555][ T3299] Cannot create hsr debugfs directory [ 36.226567][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.233560][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.259676][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.323013][ T3304] hsr_slave_0: entered promiscuous mode [ 36.329093][ T3304] hsr_slave_1: entered promiscuous mode [ 36.335157][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.340897][ T3304] Cannot create hsr debugfs directory [ 36.371858][ T3303] hsr_slave_0: entered promiscuous mode [ 36.377982][ T3303] hsr_slave_1: entered promiscuous mode [ 36.383961][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 36.389701][ T3303] Cannot create hsr debugfs directory [ 36.559786][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.568812][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.576566][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.585630][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.601423][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.610391][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.618411][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.627183][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.648928][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.657836][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.665756][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.674544][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.682498][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.691298][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.699096][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.708226][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.734291][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.743235][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.755566][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.764374][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.772165][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.781248][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.792349][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.801852][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.834370][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.843020][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.851078][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.860238][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.874457][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.883601][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.898939][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.907517][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.938862][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.948165][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.957059][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.966058][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.979472][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.988267][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.996110][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.005146][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.032393][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.060076][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.077485][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.099096][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.106220][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.116153][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.123349][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.135582][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.151795][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.158917][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.180087][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.187299][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.198088][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.212685][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.234147][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.250818][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.269955][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.284352][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.291585][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.301643][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.308788][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.334678][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.341841][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.354963][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.362117][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.375486][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.390415][ T1613] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.397532][ T1613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.425364][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.432491][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.533419][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.736447][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.759788][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.781704][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.800217][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.876709][ T3300] veth0_vlan: entered promiscuous mode [ 37.893815][ T3300] veth1_vlan: entered promiscuous mode [ 37.942618][ T3300] veth0_macvtap: entered promiscuous mode [ 37.976042][ T3300] veth1_macvtap: entered promiscuous mode [ 37.986730][ T3299] veth0_vlan: entered promiscuous mode [ 37.993362][ T3305] veth0_vlan: entered promiscuous mode [ 38.008565][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.017163][ T3299] veth1_vlan: entered promiscuous mode [ 38.028421][ T3305] veth1_vlan: entered promiscuous mode [ 38.036806][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.062944][ T3304] veth0_vlan: entered promiscuous mode [ 38.072602][ T290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.090402][ T290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.099243][ T290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.110517][ T3303] veth0_vlan: entered promiscuous mode [ 38.123281][ T290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.134323][ T3304] veth1_vlan: entered promiscuous mode [ 38.151672][ T3303] veth1_vlan: entered promiscuous mode [ 38.159003][ T3299] veth0_macvtap: entered promiscuous mode [ 38.174228][ T3305] veth0_macvtap: entered promiscuous mode [ 38.182153][ T3299] veth1_macvtap: entered promiscuous mode [ 38.191244][ T3305] veth1_macvtap: entered promiscuous mode [ 38.209573][ T3304] veth0_macvtap: entered promiscuous mode [ 38.219574][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.220528][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.243420][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.259718][ T3304] veth1_macvtap: entered promiscuous mode [ 38.276880][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 38.276894][ T28] audit: type=1400 audit(1781217927.645:155): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.289242][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.315808][ T30] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.329190][ T30] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.330130][ T28] audit: type=1400 audit(1781217927.645:156): avc: denied { open } for pid=3300 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.364438][ T28] audit: type=1400 audit(1781217927.675:157): avc: denied { ioctl } for pid=3300 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.374392][ T3303] veth0_macvtap: entered promiscuous mode [ 38.391341][ T28] audit: type=1400 audit(1781217927.715:158): avc: denied { open } for pid=3504 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.418075][ T28] audit: type=1400 audit(1781217927.715:159): avc: denied { perfmon } for pid=3504 comm="syz.4.5" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.418312][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.441779][ T28] audit: type=1400 audit(1781217927.715:160): avc: denied { kernel } for pid=3504 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.464714][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.469045][ T28] audit: type=1400 audit(1781217927.785:161): avc: denied { create } for pid=3504 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.500182][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.507654][ T28] audit: type=1400 audit(1781217927.865:162): avc: denied { prog_load } for pid=3504 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.514082][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.543733][ T3303] veth1_macvtap: entered promiscuous mode [ 38.549245][ T28] audit: type=1400 audit(1781217927.865:163): avc: denied { bpf } for pid=3504 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.570102][ T28] audit: type=1400 audit(1781217927.905:164): avc: denied { prog_run } for pid=3504 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.583466][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.611497][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.619767][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.631418][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.643501][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.655150][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.671707][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.684921][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.710175][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.733413][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.760011][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.768923][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.782478][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.791641][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.813725][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.824919][ T3512] netlink: 'syz.4.6': attribute type 4 has an invalid length. [ 39.170439][ T3526] loop0: detected capacity change from 0 to 128 [ 39.181957][ T3526] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.209954][ T3526] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.293753][ T3531] loop2: detected capacity change from 0 to 2048 [ 39.323747][ T3531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.380193][ T3531] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.400694][ T3526] netdevsim netdevsim0: Direct firmware load for ./file1 failed with error -2 [ 39.419876][ T3531] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 39.439712][ T3531] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.439712][ T3531] [ 39.451571][ T3531] EXT4-fs (loop2): Total free blocks count 0 [ 39.458400][ T3523] syz.0.7 (3523) used greatest stack depth: 10544 bytes left [ 39.479477][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.489690][ T3531] EXT4-fs (loop2): Free/Dirty block details [ 39.496090][ T3531] EXT4-fs (loop2): free_blocks=2415919104 [ 39.503417][ T3531] EXT4-fs (loop2): dirty_blocks=16 [ 39.533303][ T3531] EXT4-fs (loop2): Block reservation details [ 39.549975][ T3531] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 39.586039][ T3531] syz.2.9 (3531) used greatest stack depth: 9424 bytes left [ 39.618935][ T290] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 39.661553][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 39.687814][ T3543] ALSA: seq fatal error: cannot create timer (-22) [ 39.794840][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.802154][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.846385][ T3551] netlink: 204 bytes leftover after parsing attributes in process `syz.0.15'. [ 39.858411][ T3551] netlink: 84 bytes leftover after parsing attributes in process `syz.0.15'. [ 39.918486][ T3551] loop0: detected capacity change from 0 to 1024 [ 39.928062][ T3551] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 39.938690][ T3551] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 39.954160][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.968465][ T3551] EXT4-fs error (device loop0): ext4_get_journal_inode:5896: inode #32: comm syz.0.15: iget: special inode unallocated [ 39.983372][ T3554] loop3: detected capacity change from 0 to 512 [ 40.001670][ T3551] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 40.002148][ T3551] EXT4-fs (loop0): no journal found [ 40.011570][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 40.011618][ C1] EXT4-fs (loop0): initial error at time 1781217929: ext4_get_journal_inode:5896: inode 32 [ 40.011715][ C1] EXT4-fs (loop0): last error at time 1781217929: ext4_get_journal_inode:5896: inode 32 [ 40.015593][ T3554] ======================================================= [ 40.015593][ T3554] WARNING: The mand mount option has been deprecated and [ 40.015593][ T3554] and is ignored by this kernel. Remove the mand [ 40.015593][ T3554] option from the mount to silence this warning. [ 40.015593][ T3554] ======================================================= [ 40.082262][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.090274][ T3554] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.14: inode has both inline data and extents flags [ 40.117430][ T3554] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.118533][ T3554] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.14: couldn't read orphan inode 15 (err -117) [ 40.127752][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 40.127790][ C0] EXT4-fs (loop3): initial error at time 1781217929: ext4_orphan_get:1397: inode 15 [ 40.127826][ C0] EXT4-fs (loop3): last error at time 1781217929: ext4_orphan_get:1397: inode 15 [ 40.167278][ T3554] loop3: lost filesystem error report for type 5 error -117 [ 40.167993][ T3554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.252995][ T3553] netlink: 'syz.3.14': attribute type 12 has an invalid length. [ 40.268774][ T3553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14'. [ 40.285643][ T3559] tipc: Started in network mode [ 40.303988][ T3559] tipc: Node identity 421515d7a2d6, cluster identity 4711 [ 40.311915][ T3559] tipc: Enabled bearer , priority 0 [ 40.319110][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.330807][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.359223][ T3562] syzkaller0: entered promiscuous mode [ 40.367397][ T3562] syzkaller0: entered allmulticast mode [ 40.394341][ T3556] tipc: Resetting bearer [ 40.402073][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.412865][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.428756][ T3555] tipc: Resetting bearer [ 40.450492][ T3555] tipc: Disabling bearer [ 40.457390][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.650387][ T3584] loop0: detected capacity change from 0 to 512 [ 40.684372][ T3584] ------------[ cut here ]------------ [ 40.690350][ T3584] EA inode 11 i_nlink=0 [ 40.690378][ T3584] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.0.21/3584 [ 40.705432][ T3584] Modules linked in: [ 40.709642][ T3584] CPU: 1 UID: 0 PID: 3584 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.718997][ T3584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 40.729367][ T3584] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 40.736299][ T3584] Code: 44 52 98 ff 4c 8d 2d 6d 5f 5c 05 49 8d 7e 40 e8 04 15 b6 ff 49 8b 6e 40 4c 89 e7 e8 38 10 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 94 d8 03 66 66 66 66 66 66 2e [ 40.757739][ T3584] RSP: 0018:ffffc90001e035a8 EFLAGS: 00010246 [ 40.763933][ T3584] RAX: ffff888104b7cf00 RBX: ffff8881083d32f8 RCX: ffffffff81c0e298 [ 40.772213][ T3584] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d41f0 [ 40.780431][ T3584] RBP: 000000000000000b R08: 00018881083d32ab R09: 0000000000000000 [ 40.789243][ T3584] R10: ffffc90001e034d8 R11: 0001c90001e034d8 R12: ffff8881083d32a8 [ 40.797358][ T3584] R13: ffffffff871d41f0 R14: ffff8881083d3260 R15: 0000000000000001 [ 40.806272][ T3584] FS: 00007ff40432e6c0(0000) GS:ffff8882ae9f6000(0000) knlGS:0000000000000000 [ 40.815588][ T3584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.822408][ T3584] CR2: 00007f0a7547e000 CR3: 000000011af34000 CR4: 00000000003506f0 [ 40.830789][ T3584] Call Trace: [ 40.834326][ T3584] [ 40.837408][ T3584] ext4_xattr_set_entry+0x77c/0x1010 [ 40.842884][ T3584] ext4_xattr_ibody_set+0x184/0x3c0 [ 40.848278][ T3584] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 40.854379][ T3584] __ext4_expand_extra_isize+0x246/0x280 [ 40.860066][ T3584] __ext4_mark_inode_dirty+0x29b/0x3d0 [ 40.865737][ T3584] ext4_evict_inode+0x8ba/0xe30 [ 40.870672][ T3584] ? __pfx_ext4_evict_inode+0x10/0x10 [ 40.876127][ T3584] evict+0x2af/0x510 [ 40.880071][ T3584] ? __dquot_initialize+0x146/0x7c0 [ 40.885409][ T3584] iput+0x41a/0x580 [ 40.889371][ T3584] ext4_process_orphan+0x1a9/0x1c0 [ 40.894584][ T3584] ext4_orphan_cleanup+0x69c/0x9f0 [ 40.899769][ T3584] ext4_fill_super+0x3408/0x37c0 [ 40.904805][ T3584] ? set_blocksize+0x14c/0x270 [ 40.909825][ T3584] ? setup_bdev_super+0x30e/0x370 [ 40.915319][ T3584] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.920659][ T3584] get_tree_bdev_flags+0x291/0x300 [ 40.926010][ T3584] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.931430][ T3584] get_tree_bdev+0x1f/0x30 [ 40.936100][ T3584] ext4_get_tree+0x1c/0x30 [ 40.940572][ T3584] vfs_get_tree+0x57/0x1d0 [ 40.945087][ T3584] do_new_mount+0x288/0x8d0 [ 40.949745][ T3584] path_mount+0x4d0/0xbc0 [ 40.954188][ T3584] __se_sys_mount+0x28c/0x2e0 [ 40.959011][ T3584] __x64_sys_mount+0x67/0x80 [ 40.963692][ T3584] x64_sys_call+0x2d61/0x3020 [ 40.968512][ T3584] do_syscall_64+0x12c/0x3b0 [ 40.973223][ T3584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.979287][ T3584] RIP: 0033:0x7ff4058fe0ca [ 40.983870][ T3584] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.003650][ T3584] RSP: 002b:00007ff40432de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.012277][ T3584] RAX: ffffffffffffffda RBX: 00007ff40432dee0 RCX: 00007ff4058fe0ca [ 41.020394][ T3584] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007ff40432dea0 [ 41.028693][ T3584] RBP: 0000200000000180 R08: 00007ff40432dee0 R09: 0000000000000000 [ 41.036927][ T3584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 41.045085][ T3584] R13: 00007ff40432dea0 R14: 000000000000047a R15: 00002000000001c0 [ 41.053345][ T3584] [ 41.056661][ T3584] ---[ end trace 0000000000000000 ]--- [ 41.096247][ T3584] EXT4-fs error (device loop0): ext4_free_inode:354: comm syz.0.21: bit already cleared for inode 11 [ 41.107299][ T3584] loop0: lost filesystem error report for type 5 error -117 [ 41.109087][ T3584] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 41.116533][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 41.116559][ C1] EXT4-fs (loop0): initial error at time 1781217930: ext4_free_inode:354 [ 41.116583][ C1] EXT4-fs (loop0): last error at time 1781217930: ext4_free_inode:354 [ 41.188853][ T3571] loop2: detected capacity change from 0 to 128 [ 41.244030][ T3584] loop0: lost filesystem error report for type 5 error -117 [ 41.298078][ T3584] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 41.584762][ T3584] loop0: lost filesystem error report for type 5 error -117 [ 41.585003][ T3584] EXT4-fs (loop0): 1 orphan inode deleted [ 41.641376][ T3584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.923398][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.139745][ T3603] netlink: 380 bytes leftover after parsing attributes in process `syz.4.28'. [ 42.512872][ T3607] netlink: 'syz.0.27': attribute type 4 has an invalid length. [ 42.539547][ T3605] loop4: detected capacity change from 0 to 764 [ 42.563018][ T3603] Symlink component flag not implemented [ 42.578974][ T3608] netlink: 'syz.0.27': attribute type 4 has an invalid length. [ 42.698374][ T3603] Symlink component flag not implemented (116) [ 43.290480][ T28] kauditd_printk_skb: 190 callbacks suppressed [ 43.290500][ T28] audit: type=1400 audit(1781217932.645:355): avc: denied { read open } for pid=3620 comm="syz.3.31" path="/" dev="configfs" ino=991 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 43.347070][ T3623] syz.2.32: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 43.355557][ T28] audit: type=1400 audit(1781217932.695:356): avc: denied { create } for pid=3622 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 43.394022][ T3623] CPU: 1 UID: 0 PID: 3623 Comm: syz.2.32 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 43.394066][ T3623] Tainted: [W]=WARN [ 43.394075][ T3623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 43.394175][ T3623] Call Trace: [ 43.394182][ T3623] [ 43.394192][ T3623] __dump_stack+0x1d/0x30 [ 43.394221][ T3623] dump_stack_lvl+0x95/0xd0 [ 43.394246][ T3623] dump_stack+0x15/0x1b [ 43.394270][ T3623] warn_alloc+0x145/0x1c0 [ 43.394311][ T3623] ? lapic_next_event+0x11/0x20 [ 43.394334][ T3623] ? clockevents_program_event+0x2fd/0x340 [ 43.394362][ T3623] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 43.394388][ T3623] ? tick_program_event+0x79/0xc0 [ 43.394451][ T3623] ? _raw_spin_unlock+0x9/0x30 [ 43.394477][ T3623] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 43.394513][ T3623] ? irqentry_exit+0x55c/0x5d0 [ 43.394583][ T3623] ? should_fail_ex+0x30/0x280 [ 43.394612][ T3623] vmalloc_user_noprof+0x7d/0xb0 [ 43.394642][ T3623] ? xskq_create+0x80/0xe0 [ 43.394709][ T3623] xskq_create+0x80/0xe0 [ 43.394743][ T3623] xsk_init_queue+0x70/0xb0 [ 43.394783][ T3623] xsk_setsockopt+0x477/0x640 [ 43.394880][ T3623] ? __sys_setsockopt+0x157/0x200 [ 43.394914][ T3623] ? __pfx_xsk_setsockopt+0x10/0x10 [ 43.394955][ T3623] __sys_setsockopt+0x184/0x200 [ 43.394990][ T3623] __x64_sys_setsockopt+0x64/0x80 [ 43.395091][ T3623] x64_sys_call+0x2327/0x3020 [ 43.395191][ T3623] do_syscall_64+0x12c/0x3b0 [ 43.395238][ T3623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.395266][ T3623] RIP: 0033:0x7f6b3d3cce59 [ 43.395288][ T3623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.395313][ T3623] RSP: 002b:00007f6b3be1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 43.395372][ T3623] RAX: ffffffffffffffda RBX: 00007f6b3d645fa0 RCX: 00007f6b3d3cce59 [ 43.395392][ T3623] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 43.395409][ T3623] RBP: 00007f6b3d462d6f R08: 0000000000000004 R09: 0000000000000000 [ 43.395473][ T3623] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 43.395486][ T3623] R13: 00007f6b3d646038 R14: 00007f6b3d645fa0 R15: 00007ffff2c9d3d8 [ 43.395506][ T3623] [ 43.402917][ T3623] Mem-Info: [ 43.417919][ T28] audit: type=1400 audit(1781217932.705:357): avc: denied { create } for pid=3622 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.480218][ T3623] active_anon:9503 inactive_anon:0 isolated_anon:0 [ 43.480218][ T3623] active_file:8157 inactive_file:2299 isolated_file:0 [ 43.480218][ T3623] unevictable:0 dirty:1541 writeback:0 [ 43.480218][ T3623] slab_reclaimable:3012 slab_unreclaimable:15254 [ 43.480218][ T3623] mapped:33055 shmem:3198 pagetables:1059 [ 43.480218][ T3623] sec_pagetables:0 bounce:0 [ 43.480218][ T3623] kernel_misc_reclaimable:0 [ 43.480218][ T3623] free:1895697 free_pcp:10065 free_cma:0 [ 43.491105][ T28] audit: type=1400 audit(1781217932.715:358): avc: denied { setopt } for pid=3622 comm="syz.2.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 43.524447][ T3623] Node 0 active_anon:38012kB inactive_anon:0kB active_file:32628kB inactive_file:9196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132220kB dirty:6164kB writeback:0kB shmem:12792kB kernel_stack:3296kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 43.572391][ T3630] netlink: 'syz.4.34': attribute type 1 has an invalid length. [ 43.605716][ T3623] Node 0 [ 43.647673][ T28] audit: type=1400 audit(1781217932.785:359): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 43.668689][ T3623] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 43.815235][ T3623] lowmem_reserve[]: 0 2878 7857 7857 [ 43.820937][ T3623] Node 0 DMA32 free:2944352kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947980kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 43.853006][ T3623] lowmem_reserve[]: 0 0 4978 4978 [ 43.853638][ T3630] veth3: entered allmulticast mode [ 43.858318][ T3623] Node 0 Normal free:4623052kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37772kB inactive_anon:0kB active_file:32628kB inactive_file:9232kB unevictable:8kB writepending:6164kB zspages:0kB present:5242880kB managed:5098236kB mlocked:8kB bounce:0kB free_pcp:36796kB local_pcp:15272kB free_cma:0kB [ 43.869576][ T3630] batman_adv: batadv0: Adding interface: veth3 [ 43.897882][ T3623] lowmem_reserve[]: 0 0 0 0 [ 43.908755][ T3630] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.935041][ T3623] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 43.948573][ T3630] batman_adv: batadv0: Not using interface veth3 (retrying later): interface not active [ 43.962823][ T3633] macvlan2: entered promiscuous mode [ 43.968503][ T3623] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944352kB [ 43.985688][ T3633] macvlan2: entered allmulticast mode [ 43.991631][ T3623] Node 0 Normal: 0*4kB 2*8kB (UM) 3*16kB (UME) 3*32kB (UME) 2*64kB (ME) 1*128kB (E) 3*256kB (UME) 1*512kB (U) 3*1024kB (UME) 1*2048kB (E) 1127*4096kB (M) = 4623008kB [ 44.015844][ T3632] batman_adv: batadv0: Adding interface: veth0_to_bond [ 44.022947][ T3623] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 44.042021][ T3623] 13516 total pagecache pages [ 44.048104][ T3632] batman_adv: batadv0: The MTU of interface veth0_to_bond is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.074810][ T3623] 0 pages in swap cache [ 44.085870][ T3623] Free swap = 124996kB [ 44.091667][ T3623] Total swap = 124996kB [ 44.098157][ T3623] 2097051 pages RAM [ 44.102604][ T3623] 0 pages HighMem/MovableOnly [ 44.108558][ T3632] batman_adv: batadv0: Not using interface veth0_to_bond (retrying later): interface not active [ 44.119737][ T3623] 81657 pages reserved [ 44.290240][ T28] audit: type=1400 audit(1781217933.655:360): avc: denied { cpu } for pid=3638 comm="syz.2.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.570365][ T28] audit: type=1400 audit(1781217933.935:361): avc: denied { connect } for pid=3637 comm="syz.4.36" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.284340][ T28] audit: type=1400 audit(1781217934.645:362): avc: denied { read } for pid=3645 comm="syz.4.38" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.428102][ T28] audit: type=1400 audit(1781217934.645:363): avc: denied { open } for pid=3645 comm="syz.4.38" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 45.564224][ T28] audit: type=1400 audit(1781217934.735:364): avc: denied { execute } for pid=3645 comm="syz.4.38" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 45.672288][ T3656] syz.4.42 uses obsolete (PF_INET,SOCK_PACKET) [ 45.751572][ T3658] loop4: detected capacity change from 0 to 2048 [ 45.779569][ T3658] EXT4-fs: quotafile must be on filesystem root [ 46.027251][ T3656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.093326][ T3656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.204114][ T3650] loop3: detected capacity change from 0 to 512 [ 46.329952][ T3650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.364088][ T3650] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.179407][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.355658][ T3678] bridge_slave_0: left allmulticast mode [ 47.365983][ T3678] bridge_slave_0: left promiscuous mode [ 47.377699][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.385961][ T3677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 47.399988][ T3678] bridge_slave_1: left allmulticast mode [ 47.408288][ T3678] bridge_slave_1: left promiscuous mode [ 47.419121][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.444241][ T3678] bond0: (slave bond_slave_0): Releasing backup interface [ 47.466629][ T3678] bond0: (slave bond_slave_1): Releasing backup interface [ 47.486266][ T3678] team0: Port device team_slave_0 removed [ 47.499230][ T3678] team0: Port device team_slave_1 removed [ 47.510252][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.519701][ T3678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.530959][ T3678] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.558265][ T3680] team0: Port device xfrm0 added [ 47.574361][ T3690] tipc: Started in network mode [ 47.587724][ T3690] tipc: Node identity 560f111a563a, cluster identity 4711 [ 47.596820][ T3690] tipc: Enabled bearer , priority 0 [ 47.852444][ T3701] loop1: detected capacity change from 0 to 512 [ 48.078298][ T3701] FAT-fs (loop1): FAT read failed (blocknr 128) [ 48.081135][ T3705] loop0: detected capacity change from 0 to 164 [ 48.165631][ T3695] loop3: detected capacity change from 0 to 512 [ 48.412625][ T3695] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 48.560589][ T3705] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 48.836468][ T3380] tipc: Node number set to 3477786 [ 48.943600][ T3695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.265193][ T3695] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.515419][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.527159][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 49.527178][ T28] audit: type=1400 audit(1781217938.875:382): avc: denied { create } for pid=3720 comm="syz.1.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.650259][ T3725] bridge0: port 3(macsec1) entered blocking state [ 49.693759][ T3725] bridge0: port 3(macsec1) entered disabled state [ 49.738230][ T3725] macsec1: entered allmulticast mode [ 49.746513][ T3707] kexec: Could not allocate control_code_buffer [ 49.777136][ T3725] bridge0: entered allmulticast mode [ 49.807962][ T3725] bridge0: entered promiscuous mode [ 49.851432][ T3725] macsec1: left allmulticast mode [ 49.882817][ T3725] bridge0: left allmulticast mode [ 49.913729][ T28] audit: type=1400 audit(1781217939.275:383): avc: denied { ioctl } for pid=3728 comm="syz.1.63" path="socket:[5298]" dev="sockfs" ino=5298 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.028334][ T28] audit: type=1400 audit(1781217939.385:384): avc: denied { write } for pid=3728 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.079538][ T281] bridge0: left promiscuous mode [ 50.121251][ T3741] syzkaller0: entered promiscuous mode [ 50.128571][ T3741] syzkaller0: entered allmulticast mode [ 50.144661][ T28] audit: type=1400 audit(1781217939.415:385): avc: denied { sqpoll } for pid=3726 comm="syz.0.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.249162][ T28] audit: type=1400 audit(1781217939.425:386): avc: denied { create } for pid=3726 comm="syz.0.62" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.299573][ T3727] netlink: 100 bytes leftover after parsing attributes in process `syz.0.62'. [ 50.410170][ T3760] netlink: 'syz.4.68': attribute type 39 has an invalid length. [ 50.527838][ T28] audit: type=1326 audit(1781217939.895:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4058fce59 code=0x7ffc0000 [ 50.555530][ T28] audit: type=1400 audit(1781217939.885:387): avc: denied { create } for pid=3756 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 50.575174][ T28] audit: type=1326 audit(1781217939.925:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4058fce59 code=0x7ffc0000 [ 50.602486][ T28] audit: type=1326 audit(1781217939.925:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4058fce59 code=0x7ffc0000 [ 50.649745][ T3763] loop0: detected capacity change from 0 to 512 [ 50.660158][ T3763] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 50.701481][ T3763] EXT4-fs (loop0): 1 truncate cleaned up [ 50.713996][ T28] audit: type=1326 audit(1781217939.925:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3762 comm="syz.0.69" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4058fce59 code=0x7ffc0000 [ 50.719204][ T3763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.936836][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.036326][ T3775] loop0: detected capacity change from 0 to 1756 [ 51.067388][ T3775] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 51.218665][ T813] IPVS: starting estimator thread 0... [ 51.232111][ T3787] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 51.238643][ T3788] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 51.303435][ T3768] loop4: detected capacity change from 0 to 256 [ 51.344768][ T3786] IPVS: using max 2256 ests per chain, 112800 per kthread [ 51.590467][ T3798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 51.608968][ T3798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 51.636730][ T3798] Zero length message leads to an empty skb [ 51.669654][ T3772] loop2: detected capacity change from 0 to 2368 [ 51.746058][ T3800] netlink: 48 bytes leftover after parsing attributes in process `syz.3.79'. [ 52.874879][ T3849] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.337781][ T3849] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.571523][ T3849] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.696535][ T3849] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.811311][ T362] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.833038][ T362] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.861589][ T362] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.895020][ T362] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.304004][ T28] kauditd_printk_skb: 123 callbacks suppressed [ 55.304032][ T28] audit: type=1400 audit(1781217944.665:515): avc: denied { execute } for pid=3958 comm="syz.4.92" dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 55.372983][ T3960] process 'syz.4.92' launched '/dev/fd/6' with NULL argv: empty string added [ 55.472561][ T28] audit: type=1400 audit(1781217944.805:516): avc: denied { execute_no_trans } for pid=3958 comm="syz.4.92" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=27 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.023029][ T3980] loop1: detected capacity change from 0 to 128 [ 56.417120][ T3980] ================================================================== [ 56.425303][ T3980] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 56.432573][ T3980] [ 56.435027][ T3980] write to 0xffff8881083d7f2c of 4 bytes by task 3988 on cpu 0: [ 56.442691][ T3980] xas_set_mark+0x12b/0x140 [ 56.447344][ T3980] __folio_start_writeback+0x17b/0x370 [ 56.453038][ T3980] __mpage_writepages+0xdbd/0x1390 [ 56.458197][ T3980] fat_writepages+0x26/0x30 [ 56.462741][ T3980] do_writepages+0x1c6/0x310 [ 56.467414][ T3980] file_write_and_wait_range+0x178/0x2f0 [ 56.473102][ T3980] mmb_fsync_noflush+0x48/0x140 [ 56.477998][ T3980] fat_file_fsync+0x98/0x110 [ 56.482626][ T3980] vfs_fsync_range+0xc5/0xe0 [ 56.487266][ T3980] generic_file_write_iter+0x1ba/0x310 [ 56.492812][ T3980] iter_file_splice_write+0x6c4/0xa80 [ 56.498257][ T3980] direct_splice_actor+0x156/0x2a0 [ 56.503517][ T3980] splice_direct_to_actor+0x311/0x670 [ 56.508952][ T3980] do_splice_direct+0x119/0x1a0 [ 56.513860][ T3980] do_sendfile+0x382/0x650 [ 56.518328][ T3980] __x64_sys_sendfile64+0x105/0x150 [ 56.523926][ T3980] x64_sys_call+0x2dc4/0x3020 [ 56.528739][ T3980] do_syscall_64+0x12c/0x3b0 [ 56.533384][ T3980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.539499][ T3980] [ 56.541849][ T3980] read to 0xffff8881083d7f2c of 4 bytes by task 3980 on cpu 1: [ 56.549430][ T3980] xas_find_marked+0x5d7/0x620 [ 56.554258][ T3980] filemap_get_folios_tag+0xfa/0x430 [ 56.559615][ T3980] filemap_fdatawait_range+0x88/0x1e0 [ 56.565035][ T3980] __writeback_single_inode+0xda/0x650 [ 56.570550][ T3980] writeback_single_inode+0x16d/0x3f0 [ 56.576102][ T3980] sync_inode_metadata+0x6e/0xa0 [ 56.581609][ T3980] mmb_fsync_noflush+0xfa/0x140 [ 56.586501][ T3980] fat_file_fsync+0x98/0x110 [ 56.591128][ T3980] vfs_fsync_range+0xc5/0xe0 [ 56.595926][ T3980] generic_file_write_iter+0x1ba/0x310 [ 56.601422][ T3980] iter_file_splice_write+0x6c4/0xa80 [ 56.606852][ T3980] direct_splice_actor+0x156/0x2a0 [ 56.612021][ T3980] splice_direct_to_actor+0x311/0x670 [ 56.617458][ T3980] do_splice_direct+0x119/0x1a0 [ 56.622493][ T3980] do_sendfile+0x382/0x650 [ 56.626967][ T3980] __x64_sys_sendfile64+0x105/0x150 [ 56.632237][ T3980] x64_sys_call+0x2dc4/0x3020 [ 56.636968][ T3980] do_syscall_64+0x12c/0x3b0 [ 56.641615][ T3980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.647554][ T3980] [ 56.649899][ T3980] value changed: 0x0a000021 -> 0x04000021 [ 56.655642][ T3980] [ 56.658004][ T3980] Reported by Kernel Concurrency Sanitizer on: [ 56.664182][ T3980] CPU: 1 UID: 0 PID: 3980 Comm: syz.1.97 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 56.674903][ T3980] Tainted: [W]=WARN [ 56.678732][ T3980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 56.688820][ T3980] ==================================================================