last executing test programs: 23.607321217s ago: executing program 4 (id=35): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 23.50938011s ago: executing program 4 (id=39): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711026000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x5b}, 0x8) 23.440070831s ago: executing program 4 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) close(r0) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r0, &(0x7f0000001740)="7773f9f0", 0x4) 23.384029753s ago: executing program 4 (id=45): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 22.983606802s ago: executing program 4 (id=51): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000004c0)={r3}, &(0x7f0000000580)=0x8) keyctl$setperm(0x5, r0, 0x300127) keyctl$KEYCTL_MOVE(0x11, r0, 0x0, r0, 0x1) 22.416427496s ago: executing program 4 (id=60): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x0, 0x9, 0x44, 0x0, 0xd, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0xe}, 0x2090, 0xa4, 0xffffffff, 0x7, 0x7e, 0x9b98, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x7fffffff, 0x0, 0x32}, 0x9c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1f9b, &(0x7f0000000340)={0x0, 0xffffff7c, 0x82, 0x0, 0x345}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) read(r0, &(0x7f0000000400)=""/198, 0xc6) 22.415354676s ago: executing program 32 (id=60): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x0, 0x9, 0x44, 0x0, 0xd, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0xe}, 0x2090, 0xa4, 0xffffffff, 0x7, 0x7e, 0x9b98, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x7fffffff, 0x0, 0x32}, 0x9c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1f9b, &(0x7f0000000340)={0x0, 0xffffff7c, 0x82, 0x0, 0x345}, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) read(r0, &(0x7f0000000400)=""/198, 0xc6) 20.290807098s ago: executing program 3 (id=77): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtaction={0x4d0, 0x30, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{0x4bc, 0x1, [@m_skbedit={0x84, 0x1b, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xd}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x2, 0x3, 0x3, 0xfff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x1d, 0x6, "6cbc0be399313f4862f2515a09a917bc7d87e474f1fa546fba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6b31a6586b121e0b, 0x2}}}}, @m_police={0x434, 0x19, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9880, 0xfffffc00, 0xfffffff8, 0x6, 0x800, 0x80000000, 0x7d, 0xfffffffd, 0x3ff, 0xfffffe01, 0x7, 0x1, 0x0, 0x5, 0x3, 0x3, 0x4, 0x8, 0x200, 0x0, 0xfffffffe, 0x8000, 0x2, 0x92, 0x4, 0x3, 0x6, 0x2, 0xe, 0x2b8, 0x50, 0x5, 0x9, 0x3, 0x6, 0x10000, 0x7fff, 0x0, 0xb, 0x8, 0x5, 0xf, 0x1, 0x9, 0x99b, 0x4, 0x6, 0x0, 0x3, 0x6, 0x4, 0x5, 0x2, 0x7, 0x7, 0x5, 0x3, 0x5, 0x29, 0x0, 0x8, 0x2, 0x80000000, 0xaf9d, 0x6, 0x9, 0x80000001, 0x7, 0x5, 0xfffffffb, 0xd00000, 0x9e, 0x8, 0x2, 0x3, 0x6, 0x8, 0x3, 0x3, 0x2, 0x100, 0xfffffc01, 0x6, 0x545, 0x0, 0x9, 0x200, 0xd3, 0x0, 0x5, 0x7, 0x2, 0x8, 0x9, 0x451f, 0x1, 0xaffc, 0xfffffffd, 0x9294, 0x3, 0x1, 0x71b, 0x2, 0x9, 0x80, 0x6, 0x401, 0x9, 0x8001, 0x4, 0x10, 0x200, 0x91e, 0x80000001, 0x793bd975, 0x71f, 0x9, 0x8, 0x6, 0x5, 0x9f6, 0xf, 0x4, 0x6, 0x7f, 0x2, 0xb, 0x2eb, 0x4, 0x0, 0xdd65, 0x80000000, 0x6, 0x8, 0x0, 0xff800000, 0xfffffff2, 0x4, 0x1000, 0x0, 0x7, 0xa882, 0x7, 0x9, 0x881, 0x4, 0x8, 0x2, 0x80, 0x0, 0x8000, 0xfffffffb, 0x10001, 0x4, 0x5, 0x8, 0x0, 0x0, 0x7ff, 0xfff, 0x40, 0x0, 0x9, 0xe, 0xc, 0x1, 0x5, 0x81, 0x6, 0x7ff, 0x86, 0x2, 0xcd, 0x0, 0x8, 0x8, 0xd9bd, 0xcc3c, 0x92, 0xa, 0x9, 0x2, 0x26, 0x4, 0x80000000, 0xb, 0x4, 0x80, 0xe5, 0x1026, 0x3, 0xffffffe1, 0xfffffff3, 0x4, 0x7fff, 0x1, 0x1, 0x0, 0xd7ec, 0xd, 0xfffffffb, 0x0, 0x915, 0x3, 0x5, 0x6, 0x7, 0x10, 0x3, 0x6, 0x0, 0xb017, 0x8, 0x1, 0x8, 0x3, 0x3ff, 0xd37, 0x3ff, 0xe54, 0x9191, 0xff, 0x3, 0xff, 0xc0000000, 0x0, 0x5, 0x87, 0x5, 0x0, 0xef0, 0x8, 0xd, 0x6, 0x3, 0x4, 0xfffffff0, 0x200, 0x0, 0xbc, 0x7, 0x3ff, 0x1, 0xffffff6f, 0x40, 0x9, 0x5, 0x7, 0x8000, 0x6, 0x774, 0x10001, 0x5af, 0xc, 0x7, 0x80000000]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x6fe4b901c62758b}}}}]}]}, 0x4d0}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0x20) 19.887695687s ago: executing program 3 (id=79): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x25a5, 0x4) vmsplice(r2, &(0x7f0000000600)=[{&(0x7f00000000c0)='*', 0x1}, {0x0}], 0x2, 0xd) socket(0x5, 0x3, 0x4) 19.709686922s ago: executing program 3 (id=82): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 19.567005945s ago: executing program 3 (id=83): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000100)={[{@nobarrier}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x60042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 19.140570026s ago: executing program 3 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 18.665293947s ago: executing program 3 (id=91): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) read(r0, &(0x7f0000000500)=""/167, 0xa7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080c0) readv(0xffffffffffffffff, 0x0, 0x0) 18.665128367s ago: executing program 33 (id=91): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) read(r0, &(0x7f0000000500)=""/167, 0xa7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080c0) readv(0xffffffffffffffff, 0x0, 0x0) 4.897284641s ago: executing program 1 (id=264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.489303351s ago: executing program 0 (id=258): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x3, 0x4}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x1, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}}, 0x20000010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 4.335574545s ago: executing program 0 (id=261): socket(0x8, 0x3, 0xfffffffc) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xfb, 0xa0000000000000}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x40) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f00000000c0)) 4.225294848s ago: executing program 5 (id=263): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.224966878s ago: executing program 0 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x1, 0x0, 0x5, 0x7}, {0x5, 0x2, 0x4}, {0x7, 0x8, 0xf, 0x8}, {0x16, 0x3, 0x7, 0x9}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="0000000000000000000000e3ffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 3.709206881s ago: executing program 1 (id=267): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@dioread_lock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@usrquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@nodioread_nolock}]}, 0xff, 0x756, &(0x7f0000001e40)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r2 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) capset(0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) copy_file_range(r2, 0x0, r1, 0x0, 0x3df1, 0x0) 3.677463581s ago: executing program 6 (id=268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x30a}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="80", 0x1, 0x8080, &(0x7f00000001c0)={0x11, 0x806, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.484723376s ago: executing program 1 (id=269): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.213397073s ago: executing program 2 (id=271): socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.176747943s ago: executing program 2 (id=272): setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) syz_clone(0x289a2400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r0, 0x0, 0xfffffc55) socket(0x840000000002, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 3.107314975s ago: executing program 2 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd24, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x22044028}, 0x20004000) 1.184198242s ago: executing program 1 (id=274): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x16ab, &(0x7f0000000040)={0x0, 0x36a, 0xc000, 0x10, 0xa0002f5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$usbfs(0x0, 0xffffffffffffffff, 0x1781) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x0, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x18, 0x1}, 0x8, 0x0, 0x1000000, 0x0, 0x1, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x2000884c) writev(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0'}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.175529962s ago: executing program 6 (id=275): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = timerfd_create(0x8, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0x412, 0x52, {}, 0x4}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) preadv(0xffffffffffffffff, &(0x7f0000010440)=[{&(0x7f00000102c0)=""/161, 0xa1}], 0x1, 0xc03, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000280), 0x0) read(r1, &(0x7f00000001c0)=""/85, 0x55) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.089350714s ago: executing program 0 (id=276): socket$inet(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10045, 0x7, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 1.089075254s ago: executing program 5 (id=277): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffc, 0x10}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x2, 0x5, 0x2, 0x5}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x4, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000180)=0x7f, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 1.080583774s ago: executing program 2 (id=278): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003200)={0xffffffffffffffff, 0x2f00020b, 0x3, 0x0, &(0x7f0000000200)="63eced", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000064c0)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f0000000100)={0x14, 0x19, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@generic='-']}, 0x14}], 0x1, 0x0, 0x0, 0x4004}, 0x20000044) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x48}}, 0x2000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3268}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xf00}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.067604565s ago: executing program 5 (id=279): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001100)={'nr0\x00', &(0x7f0000001080)=@ethtool_test={0x1a, 0x80000001, 0x3afc}}) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) io_uring_setup(0x647e, &(0x7f0000000000)={0x0, 0x12fca0, 0x1, 0x3, 0x4}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x2861, 0x0) capset(&(0x7f0000000040)={0x20071026}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) ioctl$SG_IO(r1, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x0, 0x5, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x5393, &(0x7f00000001c0)=ANY=[]) 884.471639ms ago: executing program 2 (id=280): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000900)={@remote, @random="2bfd8b10d603", @void, {@generic={0x809b}}}, 0x0) 772.815302ms ago: executing program 1 (id=281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0xb, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x4, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0x0, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x87d0, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x1, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x1, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x8001, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0xf4, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x8b, 0x0, 0x7, 0x196, 0x2, 0x8, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x4, 0x2000db3a, 0x800, 0x13, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0x6aed, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x400045, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x2, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x1, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x4, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0xcae5, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x2, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0x80c, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x8, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000000)="d9", 0x1, 0xc000, &(0x7f00000001c0)={0x11, 0x4, r4, 0x1, 0x9, 0x6, @local}, 0x14) 715.380293ms ago: executing program 2 (id=282): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[], 0x0}, 0x94) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x1, 0x12) 624.161886ms ago: executing program 1 (id=283): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x8, 0x2, 0x0, 0x7fffffff}, 0x0, 0x0) 254.261964ms ago: executing program 6 (id=284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000140)="800000800000210ee7decd7a000340008100bccaf36b", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 174.813297ms ago: executing program 5 (id=285): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xaa012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x1fd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xcc09}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xc8, 0x0, 0x7, 0x4000000000, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200fc00000000000000000000000000007f"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 160.286567ms ago: executing program 0 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac14140182"], 0xee8a) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[], 0xee8a) 134.048278ms ago: executing program 5 (id=287): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10}}], 0x10}, 0x20002800) listen(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:07.0/subsystem_vendor\x00', 0x41, 0x40) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file2\x00'}) read(r1, 0x0, 0x0) socket(0x8, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000}, 0x94) syz_emit_ethernet(0xf5, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)={0x0, 0x3, [0x6b2, 0xfa8, 0x6de, 0x782]}) 94.720558ms ago: executing program 6 (id=288): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x2, 0x10ffff, 0xfffffffd}) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000180)={[{@noinit_itable}, {@noblock_validity}, {@max_batch_time}, {@errors_remount}, {@noquota}, {@discard, 0x2e}, {@init_itable}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@journal_path={'journal_path', 0x3d, './file1/file0'}}, {@grpid}], [], 0x2c}, 0x1, 0x4c2, &(0x7f00000005c0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x50) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) 94.275089ms ago: executing program 5 (id=289): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2ca, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x2b) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) connect$inet(r1, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 66.189319ms ago: executing program 6 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='f:read_msr msr:read_msr\n\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/fprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='t read_msr\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/events/tracepoints/read_msr/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1', 0x1) r4 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/1000, 0x100) 40.191139ms ago: executing program 6 (id=291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 0s ago: executing program 0 (id=292): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x8000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x900, 0x0, 0x0}, 0x408c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 28.658298][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 28.658311][ T28] audit: type=1400 audit(1785447039.407:117): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.687672][ T28] audit: type=1400 audit(1785447039.437:118): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.688442][ T3283] cgroup: Unknown subsys name 'net' [ 28.715433][ T28] audit: type=1400 audit(1785447039.467:119): avc: denied { unmount } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.813774][ T3283] cgroup: Unknown subsys name 'cpuset' [ 28.819843][ T3283] cgroup: Unknown subsys name 'rlimit' [ 28.929206][ T28] audit: type=1400 audit(1785447039.677:120): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.954521][ T28] audit: type=1400 audit(1785447039.677:121): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.962167][ T3285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.981856][ T28] audit: type=1400 audit(1785447039.677:122): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.004801][ T28] audit: type=1400 audit(1785447039.677:123): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.025428][ T28] audit: type=1400 audit(1785447039.677:124): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.043165][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.050707][ T28] audit: type=1400 audit(1785447039.677:125): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.082524][ T28] audit: type=1400 audit(1785447039.707:126): avc: denied { read } for pid=3018 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.361811][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.369038][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.376262][ T3302] bridge_slave_0: entered allmulticast mode [ 30.382614][ T3302] bridge_slave_0: entered promiscuous mode [ 30.403406][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.410487][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.417702][ T3302] bridge_slave_1: entered allmulticast mode [ 30.424009][ T3302] bridge_slave_1: entered promiscuous mode [ 30.440070][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.447163][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.454344][ T3295] bridge_slave_0: entered allmulticast mode [ 30.460645][ T3295] bridge_slave_0: entered promiscuous mode [ 30.475833][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.482934][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.490132][ T3294] bridge_slave_0: entered allmulticast mode [ 30.496548][ T3294] bridge_slave_0: entered promiscuous mode [ 30.503165][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.510285][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.517513][ T3295] bridge_slave_1: entered allmulticast mode [ 30.523944][ T3295] bridge_slave_1: entered promiscuous mode [ 30.541994][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.549111][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.556214][ T3294] bridge_slave_1: entered allmulticast mode [ 30.562756][ T3294] bridge_slave_1: entered promiscuous mode [ 30.574225][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.601010][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.610252][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.617589][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.625103][ T3301] bridge_slave_0: entered allmulticast mode [ 30.631379][ T3301] bridge_slave_0: entered promiscuous mode [ 30.646971][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.660134][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.667287][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.674466][ T3301] bridge_slave_1: entered allmulticast mode [ 30.680859][ T3301] bridge_slave_1: entered promiscuous mode [ 30.687402][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.694634][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.701798][ T3298] bridge_slave_0: entered allmulticast mode [ 30.708207][ T3298] bridge_slave_0: entered promiscuous mode [ 30.715531][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.725522][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.742513][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.749660][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.756770][ T3298] bridge_slave_1: entered allmulticast mode [ 30.763060][ T3298] bridge_slave_1: entered promiscuous mode [ 30.770170][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.787282][ T3302] team0: Port device team_slave_0 added [ 30.808910][ T3302] team0: Port device team_slave_1 added [ 30.815596][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.829852][ T3294] team0: Port device team_slave_0 added [ 30.836254][ T3295] team0: Port device team_slave_0 added [ 30.846617][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.860560][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.870630][ T3294] team0: Port device team_slave_1 added [ 30.877125][ T3295] team0: Port device team_slave_1 added [ 30.895983][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.912723][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.919708][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.945684][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.957069][ T3301] team0: Port device team_slave_0 added [ 30.970708][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.977879][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.004069][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.014906][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.021934][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.047943][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.059572][ T3301] team0: Port device team_slave_1 added [ 31.074070][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.081052][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.107032][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.118082][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.125036][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.150974][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.168952][ T3298] team0: Port device team_slave_0 added [ 31.174797][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.181746][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.208090][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.224590][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.231554][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.257491][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.268899][ T3298] team0: Port device team_slave_1 added [ 31.286133][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.293138][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.319053][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.346779][ T3294] hsr_slave_0: entered promiscuous mode [ 31.352904][ T3294] hsr_slave_1: entered promiscuous mode [ 31.381945][ T3295] hsr_slave_0: entered promiscuous mode [ 31.388003][ T3295] hsr_slave_1: entered promiscuous mode [ 31.393836][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 31.399543][ T3295] Cannot create hsr debugfs directory [ 31.405351][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.412363][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.438303][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.455594][ T3302] hsr_slave_0: entered promiscuous mode [ 31.462132][ T3302] hsr_slave_1: entered promiscuous mode [ 31.468054][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 31.473858][ T3302] Cannot create hsr debugfs directory [ 31.487500][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.494528][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.520451][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.538025][ T3301] hsr_slave_0: entered promiscuous mode [ 31.544135][ T3301] hsr_slave_1: entered promiscuous mode [ 31.550036][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 31.555775][ T3301] Cannot create hsr debugfs directory [ 31.614217][ T3298] hsr_slave_0: entered promiscuous mode [ 31.620234][ T3298] hsr_slave_1: entered promiscuous mode [ 31.626333][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 31.632055][ T3298] Cannot create hsr debugfs directory [ 31.771991][ T3294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.780106][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.787869][ T3294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.796152][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.808556][ T3294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.817259][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.824998][ T3294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.833566][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.854359][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.862650][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.871331][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.879913][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.887637][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.896558][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.904308][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.912795][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.939827][ T3295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.948358][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.956421][ T3295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.965176][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.980966][ T3295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.989517][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.997391][ T3295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.005972][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.028964][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.037606][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.045443][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.054155][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.069881][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.078284][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.086708][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.095505][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.117579][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.126356][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.134332][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.142718][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.151331][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.159778][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.167610][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.176180][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.216930][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.246476][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.258853][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.268001][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.275070][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.292678][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.299744][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.314201][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.330344][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.339458][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.348695][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.358016][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.373801][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.382456][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.389554][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.406050][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.413169][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.421585][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.428672][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.438062][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.445358][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.455949][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.468104][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.475190][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.484963][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.492041][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.503965][ T3294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.517640][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.524796][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.534528][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.541592][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.766779][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.790144][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.805001][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.868404][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.879235][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.950148][ T3294] veth0_vlan: entered promiscuous mode [ 32.967389][ T3294] veth1_vlan: entered promiscuous mode [ 32.995570][ T3301] veth0_vlan: entered promiscuous mode [ 33.009756][ T3294] veth0_macvtap: entered promiscuous mode [ 33.020934][ T3294] veth1_macvtap: entered promiscuous mode [ 33.030053][ T3301] veth1_vlan: entered promiscuous mode [ 33.041022][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.056087][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.087830][ T3298] veth0_vlan: entered promiscuous mode [ 33.093811][ T3301] veth0_macvtap: entered promiscuous mode [ 33.101453][ T3301] veth1_macvtap: entered promiscuous mode [ 33.113693][ T3302] veth0_vlan: entered promiscuous mode [ 33.120025][ T3295] veth0_vlan: entered promiscuous mode [ 33.139329][ T3298] veth1_vlan: entered promiscuous mode [ 33.147194][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.155932][ T3295] veth1_vlan: entered promiscuous mode [ 33.163493][ T3302] veth1_vlan: entered promiscuous mode [ 33.170003][ T3294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.183883][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.197877][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.211290][ T3302] veth0_macvtap: entered promiscuous mode [ 33.226293][ T3302] veth1_macvtap: entered promiscuous mode [ 33.243332][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.247539][ T3501] tipc: Failed to remove unknown binding: 66,0,0/0:3303523878/3303523879 [ 33.257688][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.269178][ T3501] tipc: Failed to remove unknown binding: 66,0,0/0:3303523878/3303523879 [ 33.272828][ T3295] veth0_macvtap: entered promiscuous mode [ 33.285137][ T3295] veth1_macvtap: entered promiscuous mode [ 33.298004][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.313568][ T289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.326049][ T3298] veth0_macvtap: entered promiscuous mode [ 33.343296][ T54] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.355752][ T54] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.370069][ T3298] veth1_macvtap: entered promiscuous mode [ 33.378985][ T3504] syzkaller0: entered promiscuous mode [ 33.384538][ T3504] syzkaller0: entered allmulticast mode [ 33.397341][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.416030][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.429221][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.458500][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.483131][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.493954][ T289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.530272][ T3506] loop1: detected capacity change from 0 to 512 [ 33.544672][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.565480][ T3517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 33.566928][ T3506] ======================================================= [ 33.566928][ T3506] WARNING: The mand mount option has been deprecated and [ 33.566928][ T3506] and is ignored by this kernel. Remove the mand [ 33.566928][ T3506] option from the mount to silence this warning. [ 33.566928][ T3506] ======================================================= [ 33.614026][ T3506] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 33.633300][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.645161][ T3506] EXT4-fs (loop1): 1 truncate cleaned up [ 33.653398][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.668106][ T39] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.675368][ T3506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.703634][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.704165][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 33.704191][ T28] audit: type=1400 audit(1785447044.457:179): avc: denied { read write } for pid=3516 comm="syz.0.8" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.713045][ T3524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.741654][ T28] audit: type=1400 audit(1785447044.457:180): avc: denied { open } for pid=3516 comm="syz.0.8" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.753906][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.775564][ T28] audit: type=1400 audit(1785447044.457:181): avc: denied { ioctl } for pid=3516 comm="syz.0.8" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.813233][ T54] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.826621][ T54] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.839894][ T3524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.863138][ T54] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.873969][ T28] audit: type=1400 audit(1785447044.477:182): avc: denied { mount } for pid=3505 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.884098][ T3517] Zero length message leads to an empty skb [ 33.897464][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.905452][ T28] audit: type=1400 audit(1785447044.577:183): avc: denied { create } for pid=3525 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.953509][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.971180][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.989624][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.003849][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.010399][ T28] audit: type=1400 audit(1785447044.597:184): avc: denied { bind } for pid=3525 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.036571][ T28] audit: type=1400 audit(1785447044.607:185): avc: denied { create } for pid=3526 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.056585][ T28] audit: type=1400 audit(1785447044.607:186): avc: denied { listen } for pid=3525 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.081869][ T28] audit: type=1400 audit(1785447044.617:187): avc: denied { setopt } for pid=3526 comm="syz.2.3" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.103347][ T28] audit: type=1400 audit(1785447044.617:188): avc: denied { connect } for pid=3525 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 34.536544][ T3517] syz.0.8 (3517) used greatest stack depth: 10800 bytes left [ 34.556936][ T3549] bridge0: port 3(syz_tun) entered blocking state [ 34.577589][ T3549] bridge0: port 3(syz_tun) entered disabled state [ 34.597893][ T3549] syz_tun: entered allmulticast mode [ 34.614517][ T3549] syz_tun: entered promiscuous mode [ 34.633415][ T3549] bridge0: port 3(syz_tun) entered blocking state [ 34.639904][ T3549] bridge0: port 3(syz_tun) entered forwarding state [ 34.693618][ T3549] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 34.804866][ T3546] syz.4.15 (3546) used greatest stack depth: 9736 bytes left [ 34.921737][ T3559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 34.928399][ T3558] loop4: detected capacity change from 0 to 512 [ 34.972699][ T3558] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.027359][ T3558] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.20: Allocating blocks 41-42 which overlap fs metadata [ 35.056004][ T3558] loop4: lost filesystem error report for type 5 error -117 [ 35.058987][ T3558] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.20: Failed to acquire dquot type 1 [ 35.059020][ T3564] ALSA: seq fatal error: cannot create timer (-19) [ 35.066432][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 35.066454][ C1] EXT4-fs (loop4): initial error at time 1785447045: ext4_mb_mark_diskspace_used:4222 [ 35.066477][ C1] EXT4-fs (loop4): last error at time 1785447045: ext4_mb_mark_diskspace_used:4222 [ 35.125164][ T3558] loop4: lost filesystem error report for type 5 error -117 [ 35.139687][ T3558] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 35.161998][ T3558] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.20: corrupted inode contents [ 35.174396][ T3558] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 35.198798][ T3558] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #12: comm syz.4.20: mark_inode_dirty error [ 35.221070][ T3558] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 35.234512][ T3558] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.20: corrupted inode contents [ 35.256998][ T3558] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 35.258527][ T3558] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.20: mark_inode_dirty error [ 35.297391][ T3558] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 35.298851][ T3558] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.20: corrupted inode contents [ 35.332238][ T3558] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 35.334332][ T3558] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 35.356642][ T3558] loop4: lost filesystem error report for type 5 error -117 [ 35.356856][ T3558] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.20: corrupted inode contents [ 35.389953][ T3558] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 35.392788][ T3558] EXT4-fs error (device loop4): ext4_truncate:4691: inode #12: comm syz.4.20: mark_inode_dirty error [ 35.414693][ T3582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.29'. [ 35.422083][ T3558] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 35.428211][ T3558] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 35.479835][ T3558] loop4: lost filesystem error report for type 5 error -117 [ 35.484278][ T3558] EXT4-fs (loop4): 1 truncate cleaned up [ 35.517922][ T3558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.633233][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.781788][ T3609] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 35.801046][ T3611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.42'. [ 35.888273][ T3617] loop4: detected capacity change from 0 to 512 [ 35.916164][ T3617] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 35.936178][ T3617] EXT4-fs (loop4): orphan cleanup on readonly fs [ 35.946952][ T3608] loop2: detected capacity change from 0 to 1024 [ 35.953886][ T3617] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.45: bad orphan inode 15 [ 35.967564][ T3608] EXT4-fs: Ignoring removed bh option [ 35.974204][ T3617] loop4: lost filesystem error report for type 5 error -117 [ 35.974544][ T3617] ext4_test_bit(bit=14, block=18) = 1 [ 35.987321][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 35.987338][ C1] EXT4-fs (loop4): initial error at time 1785447046: ext4_orphan_get:1425 [ 35.987361][ C1] EXT4-fs (loop4): last error at time 1785447046: ext4_orphan_get:1425 [ 36.034374][ T3617] is_bad_inode(inode)=0 [ 36.037575][ T3608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.042214][ T3623] loop3: detected capacity change from 0 to 1024 [ 36.057500][ T3617] NEXT_ORPHAN(inode)=1023 [ 36.061849][ T3617] max_ino=32 [ 36.065203][ T3617] i_nlink=0 [ 36.074617][ T3617] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.45: bg 0: block 161: padding at end of block bitmap is not set [ 36.094333][ T3617] loop4: lost filesystem error report for type 5 error -117 [ 36.098301][ T3617] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 36.151773][ T3617] loop4: lost filesystem error report for type 5 error -117 [ 36.162508][ T3617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 36.256209][ T3302] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz-executor: path /8/éq‰Y’3aK: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=4096, size=4096 fake=0 [ 36.312810][ T3302] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 36.369932][ T3302] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 36.466741][ T3641] bond1: option ad_actor_sys_prio: invalid value (0) [ 36.473699][ T3641] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 36.485071][ T3641] bond1 (unregistering): Released all slaves [ 36.539897][ T3644] loop1: detected capacity change from 0 to 1024 [ 36.558904][ T3644] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 36.567669][ T3644] System zones: 0-1, 3-36 [ 36.577077][ T3644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.628738][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.649855][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.722055][ T289] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.751212][ T3631] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.812974][ T289] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.829850][ T3652] loop3: detected capacity change from 0 to 512 [ 36.917519][ T3652] EXT4-fs warning (device loop3): ext4_xattr_inode_get:546: inode #11: comm syz.3.59: ea_inode file size=458758 entry size=16777216 [ 36.933001][ T289] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.952383][ T3652] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.972301][ T3652] ------------[ cut here ]------------ [ 36.979459][ T3652] EA inode 11 i_nlink=2 [ 36.979499][ T3652] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.3.59/3652 [ 36.994880][ T3652] Modules linked in: [ 36.999360][ T3652] CPU: 0 UID: 0 PID: 3652 Comm: syz.3.59 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.008760][ T3652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.019432][ T3652] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 37.027710][ T3652] Code: 96 ba 96 ff 49 8d 7e 40 4c 8d 2d db 9a 5a 05 e8 26 a0 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a 9b b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 e1 41 da 03 90 90 90 90 90 90 90 [ 37.036392][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'. [ 37.048130][ T3652] RSP: 0000:ffffc9000176f7f8 EFLAGS: 00010246 [ 37.067988][ T3652] RAX: ffff888103a92db0 RBX: ffff888106f65220 RCX: ffffffff81c29d66 [ 37.076482][ T3652] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3830 [ 37.084961][ T3652] RBP: 000000000000000b R08: 0001888106f651d3 R09: 0000000000000000 [ 37.093456][ T3652] R10: ffffc9000176f728 R11: 0001c9000176f728 R12: ffff888106f651d0 [ 37.101688][ T3652] R13: ffffffff871d3830 R14: ffff888106f65188 R15: 0000000000000001 [ 37.112020][ T3652] FS: 00007f6a95aa76c0(0000) GS:ffff8882ae8cb000(0000) knlGS:0000000000000000 [ 37.121450][ T3652] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.128270][ T3652] CR2: 00007f93c4b74ff8 CR3: 000000011c86c000 CR4: 00000000003506f0 [ 37.137109][ T3652] Call Trace: [ 37.140629][ T3652] [ 37.143770][ T3652] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 37.149999][ T3652] ext4_xattr_delete_inode+0x6b5/0x790 [ 37.155830][ T3652] ext4_evict_inode+0xb18/0xdf0 [ 37.160968][ T3652] ? __pfx_ext4_evict_inode+0x10/0x10 [ 37.166710][ T3652] evict+0x2a5/0x510 [ 37.170848][ T3652] iput+0x430/0x5a0 [ 37.174950][ T3652] ext4_process_orphan+0x1a4/0x1c0 [ 37.180229][ T3652] ext4_orphan_cleanup+0x6a6/0xa10 [ 37.187689][ T3652] ? ext4_register_li_request+0x14c/0x440 [ 37.193959][ T3652] ext4_fill_super+0x33ab/0x3760 [ 37.199209][ T3652] ? __pfx_ext4_fill_super+0x10/0x10 [ 37.204880][ T3652] ? __pfx_ext4_fill_super+0x10/0x10 [ 37.210930][ T3652] get_tree_bdev_flags+0x291/0x300 [ 37.216902][ T3652] ? __pfx_ext4_fill_super+0x10/0x10 [ 37.222478][ T3652] get_tree_bdev+0x1f/0x30 [ 37.227612][ T3652] ext4_get_tree+0x1c/0x30 [ 37.232520][ T3652] vfs_get_tree+0x57/0x1d0 [ 37.237770][ T3652] do_new_mount+0x288/0x8d0 [ 37.242589][ T3652] path_mount+0x4ad/0xb90 [ 37.247500][ T3652] __se_sys_mount+0x28c/0x2e0 [ 37.252639][ T3652] ? __hrtimer_rearm_deferred+0x571/0x650 [ 37.258748][ T3652] __x64_sys_mount+0x67/0x80 [ 37.264959][ T3652] x64_sys_call+0x2d61/0x3020 [ 37.269986][ T3652] do_syscall_64+0x136/0x3c0 [ 37.274930][ T3652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.281758][ T3652] RIP: 0033:0x7f6a9704f28a [ 37.286596][ T3652] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.306449][ T3652] RSP: 002b:00007f6a95aa6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.315158][ T3652] RAX: ffffffffffffffda RBX: 00007f6a95aa6ee0 RCX: 00007f6a9704f28a [ 37.323572][ T3652] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f6a95aa6ea0 [ 37.331729][ T3652] RBP: 00002000000009c0 R08: 00007f6a95aa6ee0 R09: 0000000000800718 [ 37.340200][ T3652] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 37.349570][ T3652] R13: 00007f6a95aa6ea0 R14: 000000000000048d R15: 0000200000000200 [ 37.358280][ T3652] [ 37.361559][ T3652] ---[ end trace 0000000000000000 ]--- [ 37.374708][ T3652] EXT4-fs (loop3): 1 orphan inode deleted [ 37.412017][ T3652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.426038][ T3689] loop0: detected capacity change from 0 to 512 [ 37.436160][ T289] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.448435][ T3689] EXT4-fs (loop0): 1 truncate cleaned up [ 37.454711][ T3689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.503162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 37.544063][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.615556][ T289] bridge_slave_1: left allmulticast mode [ 37.621281][ T289] bridge_slave_1: left promiscuous mode [ 37.630638][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.646344][ T289] bridge_slave_0: left allmulticast mode [ 37.659089][ T289] bridge_slave_0: left promiscuous mode [ 37.668812][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.728770][ T3710] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 37.757147][ T289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.769417][ T289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.792770][ T289] bond0 (unregistering): Released all slaves [ 37.801485][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.809002][ T3664] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.816605][ T3664] bridge_slave_0: entered allmulticast mode [ 37.823869][ T3664] bridge_slave_0: entered promiscuous mode [ 37.844004][ T289] hsr_slave_0: left promiscuous mode [ 37.850242][ T289] hsr_slave_1: left promiscuous mode [ 37.856604][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.857060][ T289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.874077][ T289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.889799][ T289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.907186][ T289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.918013][ T289] veth1_macvtap: left promiscuous mode [ 37.923583][ T289] veth0_macvtap: left promiscuous mode [ 37.929174][ T289] veth1_vlan: left promiscuous mode [ 37.934745][ T289] veth0_vlan: left promiscuous mode [ 37.952414][ T3717] loop2: detected capacity change from 0 to 1024 [ 37.978824][ T3717] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 37.990228][ T3717] System zones: 0-1, 3-36 [ 38.014637][ T3717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.047696][ T289] team0 (unregistering): Port device team_slave_1 removed [ 38.064202][ T289] team0 (unregistering): Port device team_slave_0 removed [ 38.112381][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.125552][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 38.134624][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.146285][ T3727] syz.0.70 uses obsolete (PF_INET,SOCK_PACKET) [ 38.165854][ T3664] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.180430][ T3664] bridge_slave_1: entered allmulticast mode [ 38.187170][ T3664] bridge_slave_1: entered promiscuous mode [ 38.221737][ T3664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.234260][ T3664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.254302][ T3664] team0: Port device team_slave_0 added [ 38.261230][ T3664] team0: Port device team_slave_1 added [ 38.288299][ T3664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.290078][ T3737] loop2: detected capacity change from 0 to 512 [ 38.302008][ T3664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.351984][ T3737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.352932][ T3664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.379729][ T3737] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.392767][ T3664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.402906][ T3664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.490431][ T3664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.513053][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 38.678762][ T3751] netlink: 'syz.1.74': attribute type 4 has an invalid length. [ 38.890464][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.916586][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 38.916601][ T28] audit: type=1326 audit(1785447049.667:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.75" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93c615e019 code=0x0 [ 38.956621][ T3664] hsr_slave_0: entered promiscuous mode [ 38.964759][ T3664] hsr_slave_1: entered promiscuous mode [ 38.971443][ T3664] debugfs: 'hsr0' already exists in 'hsr' [ 38.977602][ T3664] Cannot create hsr debugfs directory [ 39.031926][ T3760] loop2: detected capacity change from 0 to 4096 [ 39.045326][ T28] audit: type=1326 audit(1785447049.797:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.75" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c615e019 code=0x7ffc0000 [ 39.074647][ T28] audit: type=1326 audit(1785447049.797:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.75" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c615e019 code=0x7ffc0000 [ 39.101029][ T28] audit: type=1326 audit(1785447049.817:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.75" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c615e019 code=0x7ffc0000 [ 39.103124][ T3760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.127309][ T28] audit: type=1326 audit(1785447049.817:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.75" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c615e019 code=0x7ffc0000 [ 39.166700][ T28] audit: type=1326 audit(1785447049.817:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.75" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f93c615e019 code=0x7ffc0000 [ 39.193043][ T28] audit: type=1326 audit(1785447049.917:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.75" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93c611e84e code=0x7ffc0000 [ 39.225937][ T28] audit: type=1326 audit(1785447049.917:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.75" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93c611e84e code=0x7ffc0000 [ 39.255979][ T28] audit: type=1326 audit(1785447049.947:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.75" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93c611e84e code=0x7ffc0000 [ 39.294646][ T28] audit: type=1326 audit(1785447049.947:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.0.75" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93c611e84e code=0x7ffc0000 [ 39.326260][ T3760] EXT4-fs (loop2): shut down requested (2) [ 39.362374][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.387336][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 39.463970][ T3664] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.493397][ T3664] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.519975][ T3664] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.536047][ T3664] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.571773][ T3664] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.587445][ T3664] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.607313][ T3664] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.621948][ T3664] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.649567][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 39.660547][ T3773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 39.692500][ T3820] loop3: detected capacity change from 0 to 512 [ 39.735544][ T3820] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.766404][ T3664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.779451][ T3820] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.798090][ T3820] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01cc019, mo2=0002] [ 39.807513][ T3820] System zones: 1-12 [ 39.813764][ T3820] EXT4-fs (loop3): 1 truncate cleaned up [ 39.823993][ T3820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.824129][ T3664] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.847588][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.854742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.877924][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.885041][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.943479][ T3820] loop3: detected capacity change from 512 to 64 [ 39.954364][ T3832] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop3 ino=15 [ 39.975016][ T3832] SELinux: inode_doinit_use_xattr: getxattr returned 12 for dev=loop3 ino=15 [ 40.016947][ T3832] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -12) [ 40.065441][ T3820] syz.3.83: attempt to access beyond end of device [ 40.065441][ T3820] loop3: rw=8388608, sector=68, nr_sectors = 2 limit=64 [ 40.100018][ T3295] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block [ 40.118396][ T3295] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block [ 40.138912][ T3295] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block [ 40.153786][ T3295] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block [ 40.163536][ T3664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.169679][ T3295] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block [ 40.191286][ T3295] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block [ 40.206364][ T3295] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block [ 40.220871][ T3295] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block [ 40.235433][ T3295] EXT4-fs warning (device loop3): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -ENOMEM reading directory block [ 40.352438][ T3664] veth0_vlan: entered promiscuous mode [ 40.370331][ T3664] veth1_vlan: entered promiscuous mode [ 40.384197][ T3664] veth0_macvtap: entered promiscuous mode [ 40.391649][ T3664] veth1_macvtap: entered promiscuous mode [ 40.407349][ T3664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.427923][ T3664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.463312][ T289] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.472149][ T289] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.481662][ T289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.493269][ T289] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.515697][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.535922][ T289] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.568792][ T3869] xt_hashlimit: size too large, truncated to 1048576 [ 40.589291][ T289] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.645784][ T289] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.732247][ T289] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.871137][ T289] bridge_slave_1: left allmulticast mode [ 40.892333][ T289] bridge_slave_1: left promiscuous mode [ 40.908916][ T3891] loop5: detected capacity change from 0 to 128 [ 40.918844][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.932563][ T3891] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.946755][ T289] bridge_slave_0: left allmulticast mode [ 40.952524][ T289] bridge_slave_0: left promiscuous mode [ 40.960085][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.969885][ T3891] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.019473][ T12] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.033536][ T3891] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.081208][ T289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.111597][ T289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.128425][ T289] bond0 (unregistering): Released all slaves [ 41.150098][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 41.187245][ T289] hsr_slave_0: left promiscuous mode [ 41.196735][ T289] hsr_slave_1: left promiscuous mode [ 41.221518][ T289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.243647][ T289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.254247][ T289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.261671][ T289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.275072][ T289] veth1_macvtap: left promiscuous mode [ 41.280603][ T289] veth0_macvtap: left promiscuous mode [ 41.286290][ T289] veth1_vlan: left promiscuous mode [ 41.291677][ T289] veth0_vlan: left promiscuous mode [ 41.395405][ T289] team0 (unregistering): Port device team_slave_1 removed [ 41.406364][ T289] team0 (unregistering): Port device team_slave_0 removed [ 41.464034][ T3931] netlink: 24 bytes leftover after parsing attributes in process `syz.5.102'. [ 41.488375][ T3931] netlink: 24 bytes leftover after parsing attributes in process `syz.5.102'. [ 41.507032][ T3924] loop1: detected capacity change from 0 to 2048 [ 41.516258][ T3871] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.523414][ T3871] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.530767][ T3871] bridge_slave_0: entered allmulticast mode [ 41.537544][ T3871] bridge_slave_0: entered promiscuous mode [ 41.546095][ T3871] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.553503][ T3871] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.565388][ T3871] bridge_slave_1: entered allmulticast mode [ 41.572108][ T3871] bridge_slave_1: entered promiscuous mode [ 41.581424][ T3924] loop1: p1 < > p3 [ 41.596598][ T3924] loop1: p3 size 134217728 extends beyond EOD, truncated [ 41.619234][ T3871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.651319][ T3871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.708041][ T3871] team0: Port device team_slave_0 added [ 41.721653][ T3871] team0: Port device team_slave_1 added [ 41.728658][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 41.738841][ T3871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.750966][ T3871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.794191][ T3871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.813921][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 41.855289][ T3871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.866228][ T3871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.893444][ T3871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.947889][ T3871] hsr_slave_0: entered promiscuous mode [ 41.958322][ T3871] hsr_slave_1: entered promiscuous mode [ 41.970608][ T3871] debugfs: 'hsr0' already exists in 'hsr' [ 41.980249][ T3871] Cannot create hsr debugfs directory [ 42.129322][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 42.152825][ T3987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.112'. [ 42.228865][ T3871] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 42.270303][ T3871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.300580][ T3871] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 42.314238][ T3871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.374563][ T3871] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 42.846407][ T3871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.869484][ T3871] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 42.891970][ T3871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.928049][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 43.039732][ T3871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.076586][ T3871] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.148075][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.155357][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.188392][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.195483][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.213165][ T4050] netlink: 'syz.5.121': attribute type 4 has an invalid length. [ 43.473361][ T3871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.519376][ T4071] ohci-platform serial8250: error -ENXIO: IRQ index 0 not found [ 43.585173][ T4079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'. [ 43.920307][ T3871] veth0_vlan: entered promiscuous mode [ 43.931824][ T3871] veth1_vlan: entered promiscuous mode [ 43.970502][ T3871] veth0_macvtap: entered promiscuous mode [ 43.986945][ T3871] veth1_macvtap: entered promiscuous mode [ 44.003803][ T3871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.019565][ T3871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.083245][ T39] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.101931][ T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.126364][ T39] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.135349][ T39] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.170236][ T4101] option changes via remount are deprecated (pid=4100 comm=syz.2.141) [ 44.212907][ T4099] loop6: detected capacity change from 0 to 4096 [ 44.245009][ T4099] EXT4-fs error (device loop6): ext4_init_orphan_info:583: comm syz.6.92: inode #0: comm syz.6.92: iget: illegal inode # [ 44.285974][ T4099] loop6: lost filesystem error report for type 5 error -117 [ 44.286169][ T4099] EXT4-fs (loop6): get orphan inode failed [ 44.293602][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 44.293627][ C1] EXT4-fs (loop6): initial error at time 1785447055: ext4_init_orphan_info:583 [ 44.293647][ C1] EXT4-fs (loop6): last error at time 1785447055: ext4_init_orphan_info:583 [ 44.333845][ T4099] EXT4-fs (loop6): mount failed [ 44.481682][ T4116] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 44.510799][ T4121] loop0: detected capacity change from 0 to 1024 [ 44.511875][ T4116] syzkaller0: entered promiscuous mode [ 44.529590][ T4116] syzkaller0: entered allmulticast mode [ 44.566155][ T4121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.588994][ T4123] netlink: 28 bytes leftover after parsing attributes in process `syz.6.134'. [ 44.618743][ T4121] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.667426][ T28] kauditd_printk_skb: 410 callbacks suppressed [ 44.667447][ T28] audit: type=1400 audit(1785447055.417:741): avc: denied { write } for pid=4120 comm="syz.0.133" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.761513][ T4128] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.133: lblock 0 mapped to illegal pblock 0 (length 6) [ 44.764574][ T28] audit: type=1400 audit(1785447055.417:742): avc: denied { add_name } for pid=4120 comm="syz.0.133" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.801896][ T4128] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 44.832488][ T4130] tipc: Failed to remove unknown binding: 66,0,0/0:917555766/917555768 [ 44.850907][ T28] audit: type=1400 audit(1785447055.477:743): avc: denied { setopt } for pid=4126 comm="syz.2.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.858734][ T4130] tipc: Failed to remove unknown binding: 66,0,0/0:917555766/917555767 [ 44.871189][ T4128] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.871189][ T4128] [ 44.890841][ T4132] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.911588][ T28] audit: type=1400 audit(1785447055.577:744): avc: denied { bind } for pid=4129 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.929166][ T4130] tipc: Failed to remove unknown binding: 66,0,0/0:917555766/917555768 [ 44.947891][ T4132] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.967050][ T4130] tipc: Failed to remove unknown binding: 66,0,0/0:917555766/917555767 [ 44.969974][ T28] audit: type=1400 audit(1785447055.577:745): avc: denied { setopt } for pid=4129 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.028202][ T28] audit: type=1400 audit(1785447055.697:746): avc: denied { append } for pid=4120 comm="syz.0.133" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.055316][ T4132] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.083121][ T4132] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: comm syz.0.133: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.131900][ T4132] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.133: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 45.202418][ T4134] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #15: block 3: comm syz.0.133: lblock 3 mapped to illegal pblock 3 (length 2) [ 45.477152][ T4136] loop6: detected capacity change from 0 to 2048 [ 45.536621][ T4136] loop6: p1 < > p3 [ 45.543337][ T4136] loop6: p3 size 134217728 extends beyond EOD, truncated [ 45.555873][ T3429] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 45.615859][ T3429] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 45.644252][ T3429] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.644252][ T3429] [ 45.683881][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 45.685268][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 45.697083][ T3429] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 45.739626][ T4153] loop6: detected capacity change from 0 to 1024 [ 45.740464][ T28] audit: type=1400 audit(1785447056.487:747): avc: denied { execute } for pid=4154 comm="syz.2.149" path="/37/file0" dev="tmpfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.747828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 45.792743][ T3429] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 45.808566][ T3429] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.808566][ T3429] [ 45.819068][ T3429] EXT4-fs (loop0): Total free blocks count 0 [ 45.825636][ T3429] EXT4-fs (loop0): Free/Dirty block details [ 45.844399][ T4153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.878611][ T28] audit: type=1400 audit(1785447056.627:748): avc: denied { write } for pid=4152 comm="syz.6.148" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.889638][ T3429] EXT4-fs (loop0): free_blocks=0 [ 45.950010][ T4165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.153'. [ 45.995804][ T3294] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 46.068446][ T4170] loop2: detected capacity change from 0 to 512 [ 46.085695][ T4170] EXT4-fs: inline encryption not supported [ 46.109560][ T4170] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 46.152125][ T4170] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.154: invalid indirect mapped block 2683928664 (level 1) [ 46.167192][ T4118] loop1: detected capacity change from 0 to 8192 [ 46.181432][ T4118] msdos: Unknown parameter 'dos1Ífloppy' [ 46.188269][ T4170] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 46.192866][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 46.208642][ C0] EXT4-fs (loop2): initial error at time 1785447056: ext4_free_branches:1023: inode 13 [ 46.218361][ C0] EXT4-fs (loop2): last error at time 1785447056: ext4_free_branches:1023: inode 13 [ 46.228668][ T4118] x_tables: duplicate underflow at hook 2 [ 46.238652][ T4118] netlink: 'syz.1.144': attribute type 9 has an invalid length. [ 46.247579][ T4118] netlink: 'syz.1.144': attribute type 7 has an invalid length. [ 46.250656][ T4170] EXT4-fs (loop2): 1 truncate cleaned up [ 46.261950][ T4170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.275299][ T4118] netlink: 'syz.1.144': attribute type 8 has an invalid length. [ 46.333530][ T28] audit: type=1400 audit(1785447057.077:749): avc: denied { read write } for pid=4176 comm="syz.0.155" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.394480][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 46.410596][ T28] audit: type=1400 audit(1785447057.077:750): avc: denied { open } for pid=4176 comm="syz.0.155" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.551792][ T3871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.668623][ T4192] loop1: detected capacity change from 0 to 256 [ 46.811099][ T4196] loop6: detected capacity change from 0 to 1024 [ 46.821558][ T4196] EXT4-fs: inline encryption not supported [ 46.856278][ T4196] EXT4-fs: Ignoring removed bh option [ 46.871042][ T4196] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 46.897418][ T4196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.956029][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.001441][ T3871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.081907][ T4209] loop6: detected capacity change from 0 to 512 [ 47.165823][ T4209] EXT4-fs warning (device loop6): ext4_xattr_inode_get:546: inode #11: comm syz.6.166: ea_inode file size=458758 entry size=16777216 [ 47.194722][ T4209] EXT4-fs (loop6): 1 orphan inode deleted [ 47.206001][ T4209] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.256032][ T3871] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.314050][ T4223] loop1: detected capacity change from 0 to 256 [ 47.324157][ T4215] netlink: 'syz.0.165': attribute type 4 has an invalid length. [ 47.470990][ T4224] infiniband syz1: set active [ 47.476194][ T4224] infiniband syz1: added syz_tun [ 47.490160][ T4224] RDS/IB: syz1: added [ 47.495383][ T4224] smc: adding ib device syz1 with port count 1 [ 47.501732][ T4224] smc: ib device syz1 port 1 has no pnetid [ 47.604893][ T4242] tipc: Started in network mode [ 47.609874][ T4242] tipc: Node identity , cluster identity 4711 [ 47.637006][ T4242] tipc: Failed to set node id, please configure manually [ 47.654952][ T4242] tipc: Enabling of bearer rejected, failed to enable media [ 47.800434][ T4253] tipc: Failed to remove unknown binding: 66,0,0/0:3157140152/3157140154 [ 47.850157][ T4253] tipc: Failed to remove unknown binding: 66,0,0/0:3157140152/3157140153 [ 47.862622][ T4248] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.181: ea_inode file size=458758 entry size=16777216 [ 47.902476][ T4256] tipc: Failed to remove unknown binding: 66,0,0/0:3157140152/3157140154 [ 47.914575][ T4256] tipc: Failed to remove unknown binding: 66,0,0/0:3157140152/3157140153 [ 47.940035][ T4248] EXT4-fs (loop1): 1 orphan inode deleted [ 47.986698][ T4248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.086333][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.217093][ T4255] loop2: p1 < > p3 [ 48.225091][ T4255] loop2: p3 size 134217728 extends beyond EOD, truncated [ 48.285466][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 48.286422][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 48.447553][ T4267] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.197: ea_inode file size=458758 entry size=16777216 [ 48.490969][ T4267] EXT4-fs (loop0): 1 orphan inode deleted [ 48.511990][ T4267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.530073][ T4269] netlink: 'syz.2.187': attribute type 4 has an invalid length. [ 48.591618][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.650586][ T4277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.191'. [ 48.662465][ T4277] netlink: 'syz.0.191': attribute type 10 has an invalid length. [ 48.691124][ T4281] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.707152][ T4281] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.744016][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.403821][ T4307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 49.497924][ T4322] syzkaller0: entered promiscuous mode [ 49.506509][ T4322] syzkaller0: entered allmulticast mode [ 49.628150][ T4334] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 49.643980][ T4334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.665563][ T4334] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 49.684022][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 49.684034][ T28] audit: type=1400 audit(1785447060.437:771): avc: denied { write } for pid=4331 comm="syz.0.214" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.722759][ T4333] set_capacity_and_notify: 5 callbacks suppressed [ 49.722782][ T4333] loop2: detected capacity change from 0 to 512 [ 49.799829][ T4333] EXT4-fs warning (device loop2): ext4_xattr_inode_get:546: inode #11: comm syz.2.203: ea_inode file size=458758 entry size=16777216 [ 49.824554][ T4333] EXT4-fs (loop2): 1 orphan inode deleted [ 49.832444][ T4333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.048914][ T4339] netlink: 'syz.6.204': attribute type 4 has an invalid length. [ 50.198660][ T4357] bridge0: port 3(vlan2) entered blocking state [ 50.205150][ T4357] bridge0: port 3(vlan2) entered disabled state [ 50.217992][ T4357] vlan2: entered allmulticast mode [ 50.238683][ T4357] dummy0: entered allmulticast mode [ 50.247852][ T4357] vlan2: entered promiscuous mode [ 50.256111][ T4357] dummy0: entered promiscuous mode [ 50.305286][ T28] audit: type=1400 audit(1785447061.047:772): avc: denied { read append } for pid=4361 comm="syz.6.215" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.372258][ T28] audit: type=1400 audit(1785447061.057:773): avc: denied { open } for pid=4361 comm="syz.6.215" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 50.395633][ T28] audit: type=1326 audit(1785447061.057:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4361 comm="syz.6.215" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2eefc8e019 code=0x0 [ 50.467138][ T28] audit: type=1400 audit(1785447061.177:775): avc: denied { allowed } for pid=4358 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.732890][ T28] audit: type=1400 audit(1785447061.477:776): avc: denied { ioctl } for pid=4365 comm="syz.0.217" path="socket:[8601]" dev="sockfs" ino=8601 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.787898][ T28] audit: type=1400 audit(1785447061.477:777): avc: denied { bind } for pid=4365 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.826833][ T28] audit: type=1400 audit(1785447061.477:778): avc: denied { write } for pid=4365 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.653688][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.711476][ T4366] bridge0: port 3(syz_tun) entered disabled state [ 51.720192][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.727982][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.782523][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.807836][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.903155][ T3429] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.903306][ T3429] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.903588][ T3429] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.903712][ T3429] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.327926][ T4392] loop6: detected capacity change from 0 to 128 [ 52.352265][ T4390] syzkaller0: entered promiscuous mode [ 52.358082][ T4390] syzkaller0: entered allmulticast mode [ 52.413241][ T28] audit: type=1400 audit(1785447063.167:779): avc: denied { write } for pid=4382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.447297][ T28] audit: type=1400 audit(1785447063.197:780): avc: denied { write } for pid=4400 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.665389][ T4410] loop1: detected capacity change from 0 to 8192 [ 52.684618][ T4410] syz.1.225: attempt to access beyond end of device [ 52.684618][ T4410] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 52.722494][ T4410] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 52.752624][ T4410] FAT-fs (loop1): Filesystem has been set read-only [ 52.856891][ T4410] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 52.877115][ T4410] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 52.889021][ T4444] syz.1.225: attempt to access beyond end of device [ 52.889021][ T4444] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.152500][ T4467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.236'. [ 53.170954][ T30] smc: removing ib device syz1 [ 53.182403][ T3382] syz1: Port: 1 Link DOWN [ 53.271241][ T4480] loop1: detected capacity change from 0 to 512 [ 53.289199][ T4480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.302267][ T4480] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.341879][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.432403][ T4487] UDC core: g1: couldn't find an available UDC or it's busy [ 53.478623][ T4493] loop6: detected capacity change from 0 to 256 [ 53.485816][ T4493] vfat: Unknown parameter 'uni_xlat' [ 53.951477][ T4506] loop6: detected capacity change from 0 to 8192 [ 53.959257][ T4506] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 54.113131][ T4509] syzkaller0: entered promiscuous mode [ 54.118775][ T4509] syzkaller0: entered allmulticast mode [ 54.191396][ T4507] syz.6.251 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 54.208127][ T4507] CPU: 0 UID: 0 PID: 4507 Comm: syz.6.251 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 54.208155][ T4507] Tainted: [W]=WARN [ 54.208163][ T4507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.208175][ T4507] Call Trace: [ 54.208186][ T4507] [ 54.208194][ T4507] __dump_stack+0x1d/0x30 [ 54.208254][ T4507] dump_stack_lvl+0x95/0xd0 [ 54.208270][ T4507] dump_stack+0x15/0x1b [ 54.208287][ T4507] dump_header+0x80/0x240 [ 54.208305][ T4507] oom_kill_process+0x295/0x350 [ 54.208416][ T4507] out_of_memory+0x981/0xbc0 [ 54.208445][ T4507] try_charge_memcg+0x621/0xa00 [ 54.208464][ T4507] ? __rcu_read_unlock+0x4e/0x70 [ 54.208490][ T4507] __memcg_kmem_charge_page+0x199/0x3a0 [ 54.208623][ T4507] __alloc_frozen_pages_noprof+0x18a/0x350 [ 54.208649][ T4507] alloc_pages_mpol+0xa9/0x1d0 [ 54.208735][ T4507] alloc_pages_noprof+0x8f/0x140 [ 54.208764][ T4507] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 54.208797][ T4507] __kvmalloc_node_noprof+0x3a0/0x590 [ 54.208892][ T4507] ? futex_hash_allocate+0x192/0x920 [ 54.208910][ T4507] ? futex_hash_allocate+0x192/0x920 [ 54.208930][ T4507] ? futex_hash_allocate+0x192/0x920 [ 54.208952][ T4507] futex_hash_allocate+0x192/0x920 [ 54.209040][ T4507] ? cap_task_prctl+0x13f/0x6b0 [ 54.209074][ T4507] futex_hash_prctl+0xd8/0xf0 [ 54.209096][ T4507] __se_sys_prctl+0x4f4/0x13b0 [ 54.209121][ T4507] __x64_sys_prctl+0x67/0x80 [ 54.209140][ T4507] x64_sys_call+0x2533/0x3020 [ 54.209162][ T4507] do_syscall_64+0x136/0x3c0 [ 54.209188][ T4507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.209206][ T4507] RIP: 0033:0x7f2eefc8e019 [ 54.209270][ T4507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.209288][ T4507] RSP: 002b:00007f2eee6c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 54.209304][ T4507] RAX: ffffffffffffffda RBX: 00007f2eeff16090 RCX: 00007f2eefc8e019 [ 54.209330][ T4507] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 54.209342][ T4507] RBP: 00007f2eefd2500c R08: 0000000000000000 R09: 0000000000000000 [ 54.209354][ T4507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.209364][ T4507] R13: 00007f2eeff16128 R14: 00007f2eeff16090 R15: 00007ffe32d94c38 [ 54.209381][ T4507] [ 54.209407][ T4507] memory: usage 307200kB, limit 307200kB, failcnt 131 [ 54.452453][ T4520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'. [ 54.468288][ T4507] memory+swap: usage 72648kB, limit 9007199254740988kB, failcnt 0 [ 54.608346][ T4537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.626176][ T4507] kmem: usage 508kB, limit 9007199254740988kB, failcnt 0 [ 54.633268][ T4537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.641701][ T4507] Memory cgroup stats for /syz6: [ 54.641936][ T4507] cache 9170944 [ 54.650444][ T4507] rss 29237248 [ 54.653916][ T4507] shmem 0 [ 54.656897][ T4507] mapped_file 9170944 [ 54.660884][ T4507] dirty 4096 [ 54.672419][ T4507] writeback 0 [ 54.676195][ T4507] workingset_refault_anon 1304 [ 54.694414][ T4507] workingset_refault_file 0 [ 54.725026][ T4507] swap 0 [ 54.745090][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 54.745102][ T28] audit: type=1400 audit(1785447065.497:802): avc: denied { write } for pid=4530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.793711][ T4507] swapcached 5353472 [ 54.805992][ T4507] pgpgin 20684 [ 54.809468][ T4507] pgpgout 11306 [ 54.827056][ T4507] pgfault 19949 [ 54.834992][ T4507] pgmajfault 216 [ 54.840061][ T28] audit: type=1400 audit(1785447065.587:803): avc: denied { write } for pid=4554 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.862957][ T4507] inactive_anon 0 [ 54.866694][ T4507] active_anon 45056 [ 54.870594][ T4507] inactive_file 0 [ 54.880600][ T4507] active_file 0 [ 54.886429][ T4507] unevictable 38191104 [ 54.910645][ T4507] hierarchical_memory_limit 314572800 [ 54.912982][ T28] audit: type=1400 audit(1785447065.657:804): avc: denied { create } for pid=4560 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 54.922134][ T4507] hierarchical_memsw_limit 9223372036854771712 [ 54.959289][ T28] audit: type=1400 audit(1785447065.697:805): avc: denied { connect } for pid=4560 comm="syz.0.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.968772][ T4507] total_cache 9170944 [ 55.008564][ T4507] total_rss 29237248 [ 55.014527][ T4507] total_shmem 0 [ 55.018001][ T4507] total_mapped_file 9170944 [ 55.022575][ T4507] total_dirty 4096 [ 55.034365][ T4507] total_writeback 0 [ 55.038343][ T4507] total_workingset_refault_anon 1304 [ 55.043671][ T4507] total_workingset_refault_file 0 [ 55.048687][ T4507] total_swap 0 [ 55.052056][ T4507] total_swapcached 5353472 [ 55.056544][ T4507] total_pgpgin 20684 [ 55.060442][ T4507] total_pgpgout 11306 [ 55.064440][ T4507] total_pgfault 19949 [ 55.070318][ T4507] total_pgmajfault 216 [ 55.072993][ T28] audit: type=1400 audit(1785447065.817:806): avc: denied { write } for pid=4559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.074422][ T4507] total_inactive_anon 0 [ 55.074430][ T4507] total_active_anon 45056 [ 55.074436][ T4507] total_inactive_file 0 [ 55.119890][ T4507] total_active_file 0 [ 55.128066][ T4507] total_unevictable 38191104 [ 55.137033][ T4507] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.251,pid=4505,uid=0 [ 55.148022][ T28] audit: type=1400 audit(1785447065.887:807): avc: denied { write } for pid=4577 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.152911][ T4507] Memory cgroup out of memory: Killed process 4507 (syz.6.251) total-vm:96236kB, anon-rss:29868kB, file-rss:66300kB, shmem-rss:0kB, UID:0 pgtables:260kB oom_score_adj:1000 [ 55.317387][ T28] audit: type=1400 audit(1785447066.067:808): avc: denied { write } for pid=4580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.377285][ T28] audit: type=1400 audit(1785447066.117:809): avc: denied { write } for pid=4594 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.551310][ T4599] loop1: detected capacity change from 0 to 2048 [ 55.590784][ T4601] syzkaller0: entered promiscuous mode [ 55.603798][ T4601] syzkaller0: entered allmulticast mode [ 55.618179][ T4599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.656670][ T28] audit: type=1400 audit(1785447066.407:810): avc: denied { write } for pid=4598 comm="syz.1.267" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.718503][ T28] audit: type=1400 audit(1785447066.437:811): avc: denied { write } for pid=4598 comm="syz.1.267" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.002153][ T4608] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.990700][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.246746][ T4656] capability: warning: `syz.5.279' uses deprecated v2 capabilities in a way that may be insecure [ 58.500843][ T4664] syzkaller0: entered promiscuous mode [ 58.510137][ T4664] syzkaller0: entered allmulticast mode [ 59.023497][ T4671] syzkaller0: entered promiscuous mode [ 59.034367][ T4671] syzkaller0: entered allmulticast mode [ 59.107689][ T4675] syzkaller0: entered promiscuous mode [ 59.113638][ T4675] syzkaller0: entered allmulticast mode [ 59.151640][ T4679] loop6: detected capacity change from 0 to 512 [ 59.242305][ T4685] syzkaller0: entered promiscuous mode [ 59.250385][ T4685] syzkaller0: entered allmulticast mode [ 59.332848][ T4686] ================================================================== [ 59.340962][ T4686] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 59.349566][ T4686] [ 59.351887][ T4686] write to 0xffff88810d23d0a0 of 8 bytes by task 4681 on cpu 0: [ 59.359512][ T4686] shmem_file_splice_read+0x401/0x590 [ 59.364889][ T4686] splice_direct_to_actor+0x261/0x680 [ 59.370266][ T4686] do_splice_direct+0x119/0x1a0 [ 59.375124][ T4686] do_sendfile+0x37d/0x640 [ 59.379574][ T4686] __x64_sys_sendfile64+0x105/0x150 [ 59.384784][ T4686] x64_sys_call+0x2dc4/0x3020 [ 59.389473][ T4686] do_syscall_64+0x136/0x3c0 [ 59.394102][ T4686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.400005][ T4686] [ 59.402322][ T4686] write to 0xffff88810d23d0a0 of 8 bytes by task 4686 on cpu 1: [ 59.409945][ T4686] shmem_file_splice_read+0x401/0x590 [ 59.415324][ T4686] splice_direct_to_actor+0x261/0x680 [ 59.420690][ T4686] do_splice_direct+0x119/0x1a0 [ 59.425557][ T4686] do_sendfile+0x37d/0x640 [ 59.429973][ T4686] __x64_sys_sendfile64+0x105/0x150 [ 59.435168][ T4686] x64_sys_call+0x2dc4/0x3020 [ 59.439844][ T4686] do_syscall_64+0x136/0x3c0 [ 59.444430][ T4686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.450318][ T4686] [ 59.452626][ T4686] value changed: 0x000000000000263c -> 0x0000000000002640 [ 59.459723][ T4686] [ 59.462041][ T4686] Reported by Kernel Concurrency Sanitizer on: [ 59.468193][ T4686] CPU: 1 UID: 0 PID: 4686 Comm: syz.5.289 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 59.479037][ T4686] Tainted: [W]=WARN [ 59.482829][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.492973][ T4686] ================================================================== [ 61.113377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 63.023601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)