last executing test programs: 2.2400813s ago: executing program 1 (id=79): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.104386278s ago: executing program 0 (id=82): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0xa500401}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x200201, 0x110) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000cab000)=0x5f) setresuid(0xee01, r3, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r4, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) pidfd_getfd(r2, r0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.957182286s ago: executing program 1 (id=85): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1.864622692s ago: executing program 0 (id=86): pipe(&(0x7f0000000100)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 1.749777018s ago: executing program 2 (id=87): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, &(0x7f0000000500)=""/93, 0x0, 0x5d, 0x0, 0x9}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000130d00"/20, @ANYRES32=0x0, @ANYBLOB="d11101000000000008000500", @ANYRES32=r2, @ANYBLOB="140012800c0001006d6163766c616e"], 0x3c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x301}, {0xfffffffd}]}}) 1.679966232s ago: executing program 0 (id=89): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x5, 0x7, 0x40}]}) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r1, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) recvfrom$inet(r1, 0x0, 0x0, 0x2042, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f"], 0x18) syz_open_dev$vcsa(0x0, 0x3, 0x5c5980) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c697000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.589498107s ago: executing program 4 (id=90): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x3800204, &(0x7f0000003240)=ANY=[], 0x3, 0x33c, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x20202, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000340)="d1", 0x1}], 0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x88604, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x20000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$inet(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1.474503824s ago: executing program 1 (id=92): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file1\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000640)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) brk(0x689d80000003) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x6e, "ce005455762d7834b905f80994c79ab9850ce666f935d421e46a4952e8e99f830a2e77e9eff2b2cafa6492665d84c18e3905f0326cb3db64a8450733bbffba96b5283c20148e07bcbad38e41484bb83da9b5060946434031b15a4c94696cab86ad6683cda1d6370919dbd69f6303"}, &(0x7f0000000040)=0x76) r1 = socket$inet_udp(0x2, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, 0x0, 0x0) symlink(0x0, &(0x7f0000000280)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.473722304s ago: executing program 2 (id=93): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0xfff}, 0x400, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe27}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) 1.438687526s ago: executing program 3 (id=94): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x0, 0x0, 0xf, 0x0, "0c9e8100000001860b479037073d223b3c1b324debec40e57a050000007eb48821996aff367154e746be4d76062e2700c425a7519cc275d04e6205abd307a0c4fa381300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x31, 0x0, "a1c1dd75a68473ba07d945c3b03e10951cd4b347113e55eb499419be4f7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d27efd5f2fdf98328de9441031348589b763d46d14810acc5f7"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.406033588s ago: executing program 4 (id=95): socket$netlink(0x10, 0x3, 0xf) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="00dfffffff78000008"], 0x28}}, 0x4008003) sendmsg$tipc(r1, &(0x7f0000000040)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/sysvipc/shm\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x6b396000) r3 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f00000000c0), 0x0, 0x0, 0x0) 1.37440449s ago: executing program 3 (id=96): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x20000, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.313932963s ago: executing program 4 (id=97): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r2, 0x5607, 0x2c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000040)) 1.273499106s ago: executing program 2 (id=98): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x4c044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) ioctl$TCFLSH(0xffffffffffffffff, 0x8925, 0xfffffffdfffffffb) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffc000/0x3000)=nil) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.263718426s ago: executing program 4 (id=99): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf301}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x9db155b4338cbebb, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 1.227879089s ago: executing program 1 (id=100): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101842, 0x11) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x8, 0x1, 0x8, 0x2020005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev2(r1, 0x0, 0x0, 0xfff, 0xc, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0x1, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x801008, 0x0) request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000340)='fn/3\n\xbb\xf2\x01\x10\xb3y\xf2\x1a\x03\xdcC\xa2\xbb\xb4\xb0\xbec\xee\xf9m\xf3u\xb77B\x982\xbc\xb5\xca\xf3\xa1\x8e\xef\x7f\xcb\xe1\xb3\x91\x01Q\xed\xeb-\xdd~d\x99m\x845\x90_\x92\xe2g\xdc\x00=\x99\xf8n\vp\x0f\xf3\x01\xd7\x00\xd8i\xf0Zx\xa7)\xdc\x7fu\r\xd9\xd3J\xd7\xee\x06\x05L\xcf\x94k\x806g\x8c`2\x0f\xd6\x93\x00\x97\xe0\xa9\"\xf4\xf9k1\xf4\x1e&\xc0\xd2\xadr|va\xbc\xa5v\xe8\xa4\xb6;\r\xc1\x1b\xb9;\x7f\xbb\xa6E\x89\xb7\xbf\r\x92g\x14\xed=2\x17\xadE\xb4\x8co~\xc3\xfb\xd6\xdbN\x03', 0x0) 1.182652411s ago: executing program 3 (id=101): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES16=r1], 0x21c}, 0x1, 0x0, 0x0, 0x44001}, 0x8000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x2000, 0x0, 0x6398b, 0x3424f}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d848}, 0x8080) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x48, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbc1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x841) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@ipv6_newroute={0x44, 0x18, 0xa01, 0x70bd2c, 0x25dfdbfb, {0xa, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xc8, 0x0, 0x2000}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x8, 0x8}}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PRIORITY={0x8, 0x6, 0x100}]}, 0x44}, 0x1, 0x2}, 0x10) fchmod(r0, 0x106) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x80c402, &(0x7f0000000180)={[{@noblock_validity}, {@inlinecrypt}, {@init_itable}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@oldalloc}, {@jqfmt_vfsv0}, {@noload}, {@errors_continue}, {@noload}], [], 0x2c}, 0x81, 0x475, &(0x7f0000000900)="$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") chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) 1.174885311s ago: executing program 4 (id=102): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@empty, @rand_addr=0x64010101}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x10) socket(0x10, 0x3, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) io_uring_setup(0x5c76, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 1.137152354s ago: executing program 2 (id=103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.01860285s ago: executing program 3 (id=104): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f00003c1000/0x3000)=nil) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'team_slave_0\x00', @random="2b0100004ec6"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) 988.270942ms ago: executing program 2 (id=105): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x4, @perf_config_ext={0x80000001}, 0x10134e}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000080) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 979.098823ms ago: executing program 1 (id=106): mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd697a402d00383afefc010000000000000000000000000601ff020000000000000000000000000001010390780500000064bbcf090009ff0000000000000000000000ffff6401010100000000000000000000ffffac1e01018ff940c9431ec2cc"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xf}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) 886.726748ms ago: executing program 2 (id=107): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f1", 0x1) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 765.808065ms ago: executing program 0 (id=108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 765.327765ms ago: executing program 3 (id=109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x80000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x400, 0x1000, 0x4, 0xd6, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0x4, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 414.201226ms ago: executing program 0 (id=110): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 386.000847ms ago: executing program 3 (id=111): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x77}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x2, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000300)="80", 0x1, 0x4048016, &(0x7f00000003c0)={0xa, 0x4e21, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000540)=0x140, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x3de8e7ea, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) 199.685868ms ago: executing program 4 (id=112): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x10) 184.454079ms ago: executing program 0 (id=113): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000001c0)={0x7, 0x0, 0x4, 0x1200000, 0x4}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x228701, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) unshare(0x26020480) creat(&(0x7f0000000000)='./file0\x00', 0x60) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) ppoll(&(0x7f0000000740)=[{r3, 0x104}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xb}]}}]}, 0x4c}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f0000000480)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 35.485819][ T29] audit: type=1400 audit(1769731391.186:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.508954][ T29] audit: type=1400 audit(1769731391.206:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.511395][ T3305] cgroup: Unknown subsys name 'net' [ 35.536948][ T29] audit: type=1400 audit(1769731391.236:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.736285][ T3305] cgroup: Unknown subsys name 'cpuset' [ 35.742544][ T3305] cgroup: Unknown subsys name 'rlimit' [ 35.914837][ T29] audit: type=1400 audit(1769731391.606:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.949717][ T29] audit: type=1400 audit(1769731391.616:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.970268][ T29] audit: type=1400 audit(1769731391.616:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.990745][ T29] audit: type=1400 audit(1769731391.616:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.011251][ T29] audit: type=1400 audit(1769731391.636:69): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 36.032188][ T29] audit: type=1400 audit(1769731391.636:70): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.056999][ T29] audit: type=1400 audit(1769731391.636:71): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.078217][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 36.159517][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.374355][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 37.464967][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 37.478222][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 37.487493][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 37.509721][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.516851][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.524055][ T3315] bridge_slave_0: entered allmulticast mode [ 37.530580][ T3315] bridge_slave_0: entered promiscuous mode [ 37.557387][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.564544][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.571844][ T3315] bridge_slave_1: entered allmulticast mode [ 37.578394][ T3315] bridge_slave_1: entered promiscuous mode [ 37.591664][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 37.640659][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.673513][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.698060][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.705159][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.712404][ T3324] bridge_slave_0: entered allmulticast mode [ 37.718997][ T3324] bridge_slave_0: entered promiscuous mode [ 37.730350][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.737471][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.744599][ T3324] bridge_slave_1: entered allmulticast mode [ 37.751258][ T3324] bridge_slave_1: entered promiscuous mode [ 37.757574][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.764742][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.772015][ T3319] bridge_slave_0: entered allmulticast mode [ 37.778766][ T3319] bridge_slave_0: entered promiscuous mode [ 37.785516][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.792653][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.800070][ T3320] bridge_slave_0: entered allmulticast mode [ 37.806814][ T3320] bridge_slave_0: entered promiscuous mode [ 37.831824][ T3315] team0: Port device team_slave_0 added [ 37.837656][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.844729][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.851970][ T3319] bridge_slave_1: entered allmulticast mode [ 37.858469][ T3319] bridge_slave_1: entered promiscuous mode [ 37.864734][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.871848][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.879178][ T3320] bridge_slave_1: entered allmulticast mode [ 37.885741][ T3320] bridge_slave_1: entered promiscuous mode [ 37.905190][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.912412][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.919766][ T3316] bridge_slave_0: entered allmulticast mode [ 37.926356][ T3316] bridge_slave_0: entered promiscuous mode [ 37.933492][ T3315] team0: Port device team_slave_1 added [ 37.949762][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.960014][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.970291][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.979593][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.986694][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.993901][ T3316] bridge_slave_1: entered allmulticast mode [ 38.000444][ T3316] bridge_slave_1: entered promiscuous mode [ 38.026454][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.036464][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.046713][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.081285][ T3320] team0: Port device team_slave_0 added [ 38.087275][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.094265][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.120214][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.137474][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.152445][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.162356][ T3320] team0: Port device team_slave_1 added [ 38.172084][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.179077][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.205128][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.216721][ T3319] team0: Port device team_slave_0 added [ 38.225717][ T3324] team0: Port device team_slave_0 added [ 38.241510][ T3316] team0: Port device team_slave_0 added [ 38.248693][ T3324] team0: Port device team_slave_1 added [ 38.255108][ T3319] team0: Port device team_slave_1 added [ 38.270950][ T3316] team0: Port device team_slave_1 added [ 38.277005][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.283991][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.310062][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.321989][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.328972][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.354890][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.384178][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.391288][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.417321][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.433188][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.440248][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.466207][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.482371][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.489449][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.515462][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.546179][ T3315] hsr_slave_0: entered promiscuous mode [ 38.552321][ T3315] hsr_slave_1: entered promiscuous mode [ 38.576585][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.583570][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.609524][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.620904][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.627954][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.653927][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.665750][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.672723][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.698662][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.711877][ T3320] hsr_slave_0: entered promiscuous mode [ 38.717972][ T3320] hsr_slave_1: entered promiscuous mode [ 38.723852][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 38.729623][ T3320] Cannot create hsr debugfs directory [ 38.764756][ T3319] hsr_slave_0: entered promiscuous mode [ 38.770913][ T3319] hsr_slave_1: entered promiscuous mode [ 38.777143][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 38.782975][ T3319] Cannot create hsr debugfs directory [ 38.825106][ T3316] hsr_slave_0: entered promiscuous mode [ 38.831337][ T3316] hsr_slave_1: entered promiscuous mode [ 38.837528][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 38.843305][ T3316] Cannot create hsr debugfs directory [ 38.850730][ T3324] hsr_slave_0: entered promiscuous mode [ 38.856991][ T3324] hsr_slave_1: entered promiscuous mode [ 38.862903][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 38.868705][ T3324] Cannot create hsr debugfs directory [ 39.048372][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.059682][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.071429][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.082192][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.124589][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.134476][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.145321][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.154709][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.188415][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.209722][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.219148][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.227898][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.256338][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.271278][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.285953][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.297716][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.307267][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.325251][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.346712][ T1927] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.353844][ T1927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.372357][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.379514][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.401014][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.412755][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.423679][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.432773][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.456527][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.480505][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.501499][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.508679][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.520985][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.528070][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.555135][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.585933][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.606690][ T1927] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.613878][ T1927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.637150][ T1927] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.644422][ T1927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.658057][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.677897][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.690337][ T1747] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.697436][ T1747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.711842][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.727044][ T1927] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.734214][ T1927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.762658][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.780050][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.804717][ T1927] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.811935][ T1927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.822633][ T1927] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.829826][ T1927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.843804][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.893194][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.989627][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.006237][ T3315] veth0_vlan: entered promiscuous mode [ 40.051140][ T3315] veth1_vlan: entered promiscuous mode [ 40.064591][ T3320] veth0_vlan: entered promiscuous mode [ 40.087426][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.107110][ T3315] veth0_macvtap: entered promiscuous mode [ 40.114806][ T3315] veth1_macvtap: entered promiscuous mode [ 40.134547][ T3320] veth1_vlan: entered promiscuous mode [ 40.142899][ T3324] veth0_vlan: entered promiscuous mode [ 40.152378][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.174612][ T3324] veth1_vlan: entered promiscuous mode [ 40.202827][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.224401][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.246804][ T3324] veth0_macvtap: entered promiscuous mode [ 40.253842][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.272616][ T3320] veth0_macvtap: entered promiscuous mode [ 40.280234][ T3324] veth1_macvtap: entered promiscuous mode [ 40.288396][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.304297][ T3320] veth1_macvtap: entered promiscuous mode [ 40.321797][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.332577][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.351934][ T3316] veth0_vlan: entered promiscuous mode [ 40.363228][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.373831][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.383676][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.402702][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.421970][ T3316] veth1_vlan: entered promiscuous mode [ 40.435337][ T160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.455247][ T160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.480212][ T160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.500421][ T3484] loop3: detected capacity change from 0 to 1024 [ 40.505341][ T3319] veth0_vlan: entered promiscuous mode [ 40.513362][ T3484] ======================================================= [ 40.513362][ T3484] WARNING: The mand mount option has been deprecated and [ 40.513362][ T3484] and is ignored by this kernel. Remove the mand [ 40.513362][ T3484] option from the mount to silence this warning. [ 40.513362][ T3484] ======================================================= [ 40.529676][ T3316] veth0_macvtap: entered promiscuous mode [ 40.555498][ T3484] ext4: Unknown parameter 'nojournal_c' [ 40.571613][ T160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.581081][ T3319] veth1_vlan: entered promiscuous mode [ 40.595769][ T3316] veth1_macvtap: entered promiscuous mode [ 40.618863][ T160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.639791][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.658978][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.677120][ T160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.697737][ T3319] veth0_macvtap: entered promiscuous mode [ 40.706204][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 40.706220][ T29] audit: type=1400 audit(1769731396.406:105): avc: denied { create } for pid=3486 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.731916][ T29] audit: type=1400 audit(1769731396.416:106): avc: denied { open } for pid=3486 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.750939][ T29] audit: type=1400 audit(1769731396.416:107): avc: denied { kernel } for pid=3486 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.780612][ T160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.798544][ T3319] veth1_macvtap: entered promiscuous mode [ 40.814864][ T160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.828963][ T160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.839836][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.850011][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.926228][ T160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.938508][ T160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.029129][ T160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.038163][ T160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.054288][ T160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.063948][ T160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.073139][ T160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.105915][ T29] audit: type=1400 audit(1769731396.796:108): avc: denied { create } for pid=3497 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.125380][ T29] audit: type=1400 audit(1769731396.796:109): avc: denied { ioctl } for pid=3497 comm="syz.1.2" path="socket:[3854]" dev="sockfs" ino=3854 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.150951][ T29] audit: type=1400 audit(1769731396.796:110): avc: denied { bind } for pid=3497 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.184902][ T3501] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 41.230233][ T3501] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 41.294138][ T29] audit: type=1400 audit(1769731396.986:111): avc: denied { read write } for pid=3490 comm="syz.0.1" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.301764][ T3491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.318076][ T29] audit: type=1400 audit(1769731396.986:112): avc: denied { open } for pid=3490 comm="syz.0.1" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.340207][ T3506] netlink: 'syz.2.6': attribute type 1 has an invalid length. [ 41.349053][ T29] audit: type=1400 audit(1769731396.986:113): avc: denied { ioctl } for pid=3490 comm="syz.0.1" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.383400][ T3491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.435753][ T29] audit: type=1400 audit(1769731397.096:114): avc: denied { name_bind } for pid=3502 comm="syz.4.5" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 41.438923][ T3506] ip6erspan0: entered promiscuous mode [ 41.469290][ T3509] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.480962][ T3512] loop3: detected capacity change from 0 to 512 [ 41.490959][ T3512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.559561][ T3512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.627518][ T3512] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.342779][ T3529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.459351][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.487865][ T3529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.525388][ T3532] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 42.560104][ T3533] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 42.686287][ T3549] loop0: detected capacity change from 0 to 128 [ 42.988984][ T3564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 43.018788][ T3566] loop4: detected capacity change from 0 to 512 [ 43.034633][ T3564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 43.055907][ T3566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.168423][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.390308][ T3583] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 43.406660][ T3583] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 43.432277][ T3583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.452343][ T3583] bond_slave_0: entered promiscuous mode [ 43.458077][ T3583] bond_slave_1: entered promiscuous mode [ 43.463818][ T3583] syz_tun: entered promiscuous mode [ 43.470066][ T3583] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 43.477908][ T3583] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 43.487242][ T3583] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 43.500178][ T3583] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 43.615421][ T3559] syz.0.16: attempt to access beyond end of device [ 43.615421][ T3559] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 43.629179][ T3559] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 43.674420][ T3556] syz.0.16: attempt to access beyond end of device [ 43.674420][ T3556] loop0: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 43.688047][ T3556] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 43.730881][ T3594] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.782928][ T3597] netlink: 'syz.3.30': attribute type 13 has an invalid length. [ 43.805557][ C0] hrtimer: interrupt took 56350 ns [ 43.899572][ T3599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 43.988269][ T3597] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.995693][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.071869][ T3597] bond_slave_0: left promiscuous mode [ 44.077389][ T3597] bond_slave_1: left promiscuous mode [ 44.238157][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.275952][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.865884][ T160] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.874911][ T160] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.913118][ T160] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.924114][ T160] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.951930][ T3633] xt_hashlimit: size too large, truncated to 1048576 [ 45.054954][ T3634] bond1: option ad_user_port_key: invalid value (1136) [ 45.061964][ T3634] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 45.070658][ T3634] bond1 (unregistering): Released all slaves [ 45.706303][ T3642] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 45.812826][ T3645] veth3: entered promiscuous mode [ 46.535506][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 46.535527][ T29] audit: type=1400 audit(1769731659.184:179): avc: denied { mount } for pid=3656 comm="syz.4.46" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 46.632295][ T3662] netlink: 72 bytes leftover after parsing attributes in process `syz.2.48'. [ 46.700754][ T3668] loop4: detected capacity change from 0 to 128 [ 46.717324][ T3668] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.747408][ T3668] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.786132][ T29] audit: type=1400 audit(1769731659.474:180): avc: denied { ioctl } for pid=3672 comm="syz.2.52" path="socket:[4091]" dev="sockfs" ino=4091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.865139][ T29] audit: type=1400 audit(1769731659.514:181): avc: denied { bind } for pid=3667 comm="syz.4.51" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.885704][ T29] audit: type=1400 audit(1769731659.514:182): avc: denied { node_bind } for pid=3667 comm="syz.4.51" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 46.907699][ T29] audit: type=1400 audit(1769731659.514:183): avc: denied { connect } for pid=3667 comm="syz.4.51" laddr=172.20.20.170 lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.929902][ T29] audit: type=1400 audit(1769731659.514:184): avc: denied { write } for pid=3667 comm="syz.4.51" laddr=172.20.20.170 lport=256 faddr=255.255.255.255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.084641][ T29] audit: type=1400 audit(1769731659.774:185): avc: denied { create } for pid=3677 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.148025][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.281101][ T29] audit: type=1400 audit(1769731659.974:186): avc: denied { create } for pid=3687 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.309641][ T29] audit: type=1400 audit(1769731659.984:187): avc: denied { setopt } for pid=3687 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 47.411600][ T29] audit: type=1400 audit(1769731660.104:188): avc: denied { create } for pid=3687 comm="syz.4.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 47.545191][ T3694] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 47.684493][ T3701] loop4: detected capacity change from 0 to 128 [ 47.797797][ T3701] syz.4.61: attempt to access beyond end of device [ 47.797797][ T3701] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 47.811237][ T3701] syz.4.61: attempt to access beyond end of device [ 47.811237][ T3701] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 47.824667][ T3701] syz.4.61: attempt to access beyond end of device [ 47.824667][ T3701] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 47.838718][ T3701] syz.4.61: attempt to access beyond end of device [ 47.838718][ T3701] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 47.852089][ T3701] syz.4.61: attempt to access beyond end of device [ 47.852089][ T3701] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 47.876653][ T3701] syz.4.61: attempt to access beyond end of device [ 47.876653][ T3701] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 47.890480][ T3701] syz.4.61: attempt to access beyond end of device [ 47.890480][ T3701] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 47.939517][ T3701] syz.4.61: attempt to access beyond end of device [ 47.939517][ T3701] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 48.030854][ T3715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.046654][ T3715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.080752][ T3701] Buffer I/O error on dev loop4, logical block 305, async page read [ 48.089696][ T3701] Buffer I/O error on dev loop4, logical block 306, async page read [ 48.098394][ T3701] Buffer I/O error on dev loop4, logical block 307, async page read [ 48.106944][ T3701] Buffer I/O error on dev loop4, logical block 308, async page read [ 48.116081][ T3715] cgroup: noprefix used incorrectly [ 48.122181][ T3701] Buffer I/O error on dev loop4, logical block 309, async page read [ 48.130288][ T3701] Buffer I/O error on dev loop4, logical block 310, async page read [ 48.138500][ T3701] Buffer I/O error on dev loop4, logical block 311, async page read [ 48.146834][ T3701] Buffer I/O error on dev loop4, logical block 312, async page read [ 48.617791][ T3701] bio_check_eod: 19950 callbacks suppressed [ 48.617813][ T3701] syz.4.61: attempt to access beyond end of device [ 48.617813][ T3701] loop4: rw=8388608, sector=305, nr_sectors = 1 limit=128 [ 48.637492][ T3701] buffer_io_error: 19584 callbacks suppressed [ 48.637514][ T3701] Buffer I/O error on dev loop4, logical block 305, async page read [ 49.063670][ T3701] syz.4.61: attempt to access beyond end of device [ 49.063670][ T3701] loop4: rw=8388608, sector=306, nr_sectors = 1 limit=128 [ 49.077231][ T3701] Buffer I/O error on dev loop4, logical block 306, async page read [ 49.161249][ T3701] syz.4.61: attempt to access beyond end of device [ 49.161249][ T3701] loop4: rw=8388608, sector=307, nr_sectors = 1 limit=128 [ 49.174841][ T3701] Buffer I/O error on dev loop4, logical block 307, async page read [ 49.281786][ T3701] syz.4.61: attempt to access beyond end of device [ 49.281786][ T3701] loop4: rw=8388608, sector=308, nr_sectors = 1 limit=128 [ 49.295491][ T3701] Buffer I/O error on dev loop4, logical block 308, async page read [ 49.324281][ T3701] syz.4.61: attempt to access beyond end of device [ 49.324281][ T3701] loop4: rw=8388608, sector=309, nr_sectors = 1 limit=128 [ 49.338225][ T3701] Buffer I/O error on dev loop4, logical block 309, async page read [ 49.367506][ T3701] syz.4.61: attempt to access beyond end of device [ 49.367506][ T3701] loop4: rw=8388608, sector=310, nr_sectors = 1 limit=128 [ 49.381326][ T3701] Buffer I/O error on dev loop4, logical block 310, async page read [ 49.485175][ T3753] syzkaller0: entered promiscuous mode [ 49.490741][ T3753] syzkaller0: entered allmulticast mode [ 49.535582][ T3701] syz.4.61: attempt to access beyond end of device [ 49.535582][ T3701] loop4: rw=8388608, sector=311, nr_sectors = 1 limit=128 [ 49.549622][ T3701] Buffer I/O error on dev loop4, logical block 311, async page read [ 49.622087][ T3701] syz.4.61: attempt to access beyond end of device [ 49.622087][ T3701] loop4: rw=8388608, sector=312, nr_sectors = 1 limit=128 [ 49.635737][ T3701] Buffer I/O error on dev loop4, logical block 312, async page read [ 50.020227][ T3778] loop4: detected capacity change from 0 to 1024 [ 50.050747][ T3778] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 50.069179][ T3778] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 50.087813][ T3778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.138559][ T3783] netlink: 'syz.0.86': attribute type 1 has an invalid length. [ 50.228803][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.266585][ T3785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 50.322336][ T3785] bond_slave_0: entered promiscuous mode [ 50.328117][ T3785] bond_slave_1: entered promiscuous mode [ 50.334418][ T3785] macvlan2: entered promiscuous mode [ 50.339823][ T3785] bond0: entered promiscuous mode [ 50.360121][ T3785] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 50.374953][ T3792] loop4: detected capacity change from 0 to 128 [ 50.384564][ T3792] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 50.398669][ T3792] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8) [ 50.406911][ T3792] FAT-fs (loop4): Filesystem has been set read-only [ 50.438675][ T3795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 50.448965][ T3795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 50.465357][ T3795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 50.475020][ T3795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'. [ 50.506544][ T3799] Zero length message leads to an empty skb [ 50.691103][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 50.699900][ T3811] netlink: 'syz.2.98': attribute type 30 has an invalid length. [ 50.728890][ T1927] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.742228][ T1927] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.763726][ T1927] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.772740][ T1927] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.797542][ T3823] syz_tun: Device is already in use. [ 50.803436][ T3823] IPv6: NLM_F_CREATE should be specified when creating new route [ 50.813943][ T3823] loop3: detected capacity change from 0 to 512 [ 50.820811][ T3823] EXT4-fs: inline encryption not supported [ 50.826734][ T3823] EXT4-fs: inline encryption not supported [ 50.832724][ T3823] EXT4-fs: Ignoring removed oldalloc option [ 50.841792][ T3823] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 50.851051][ T3823] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.101: invalid indirect mapped block 2683928664 (level 1) [ 50.865417][ T3823] EXT4-fs (loop3): 1 truncate cleaned up [ 50.871804][ T3823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.918212][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.018643][ T3831] Illegal XDP return value 4294967294 on prog (id 28) dev N/A, expect packet loss! [ 51.084887][ T3838] loop2: detected capacity change from 0 to 1024 [ 51.092847][ T3839] netlink: 'syz.1.106': attribute type 13 has an invalid length. [ 51.100846][ T3839] netlink: 'syz.1.106': attribute type 17 has an invalid length. [ 51.110487][ T3838] EXT4-fs: Ignoring removed oldalloc option [ 51.116740][ T3838] EXT4-fs: Ignoring removed bh option [ 51.168589][ T3838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.235394][ T3839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.284128][ T3846] tipc: Enabling of bearer rejected, failed to enable media [ 51.305755][ T3845] syzkaller0: entered promiscuous mode [ 51.311307][ T3845] syzkaller0: entered allmulticast mode [ 51.542378][ T3857] netlink: 'syz.0.110': attribute type 1 has an invalid length. [ 51.555257][ T3857] erspan1: entered allmulticast mode [ 51.587965][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 51.587985][ T29] audit: type=1400 audit(1769731664.284:219): avc: denied { write } for pid=3858 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.614425][ T3860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 51.625346][ T29] audit: type=1400 audit(1769731664.314:220): avc: denied { connect } for pid=3858 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.644851][ T29] audit: type=1400 audit(1769731664.314:221): avc: denied { name_connect } for pid=3858 comm="syz.3.111" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 51.766482][ T29] audit: type=1326 audit(1769731664.464:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3862 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c76caeb9 code=0x7ffc0000 [ 51.789889][ T29] audit: type=1326 audit(1769731664.464:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3862 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c76caeb9 code=0x7ffc0000 [ 51.816853][ T29] audit: type=1326 audit(1769731664.504:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3862 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c76caeb9 code=0x7ffc0000 [ 51.840183][ T29] audit: type=1326 audit(1769731664.504:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3862 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c76caeb9 code=0x7ffc0000 [ 51.863972][ T29] audit: type=1326 audit(1769731664.514:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3862 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21c76caeb9 code=0x7ffc0000 [ 51.887489][ T29] audit: type=1326 audit(1769731664.514:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3862 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c76caeb9 code=0x7ffc0000 [ 51.910818][ T29] audit: type=1326 audit(1769731664.514:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3862 comm="syz.0.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21c76caeb9 code=0x7ffc0000 [ 51.964423][ T1747] ================================================================== [ 51.972576][ T1747] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 51.982090][ T1747] [ 51.984443][ T1747] write to 0xffff888128c8f528 of 2 bytes by task 3838 on cpu 0: [ 51.992099][ T1747] copy_folio_from_iter_atomic+0x75f/0x1170 [ 51.998032][ T1747] generic_perform_write+0x2c1/0x490 [ 52.003357][ T1747] ext4_buffered_write_iter+0x1ee/0x3c0 [ 52.008958][ T1747] ext4_file_write_iter+0x380/0xf70 [ 52.014205][ T1747] iter_file_splice_write+0x6bc/0xa80 [ 52.019601][ T1747] direct_splice_actor+0x156/0x2a0 [ 52.024757][ T1747] splice_direct_to_actor+0x311/0x670 [ 52.030152][ T1747] do_splice_direct+0x119/0x1a0 [ 52.035038][ T1747] do_sendfile+0x382/0x650 [ 52.039526][ T1747] __x64_sys_sendfile64+0x105/0x150 [ 52.044766][ T1747] x64_sys_call+0x2db1/0x3000 [ 52.049524][ T1747] do_syscall_64+0xc0/0x2a0 [ 52.054070][ T1747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.059996][ T1747] [ 52.062345][ T1747] read to 0xffff888128c8f400 of 1024 bytes by task 1747 on cpu 1: [ 52.070212][ T1747] copy_folio_from_iter_atomic+0x75f/0x1170 [ 52.076241][ T1747] generic_perform_write+0x2c1/0x490 [ 52.081575][ T1747] shmem_file_write_iter+0xc5/0xf0 [ 52.086838][ T1747] lo_rw_aio+0x67d/0x730 [ 52.091145][ T1747] loop_process_work+0x56c/0xac0 [ 52.096137][ T1747] loop_workfn+0x31/0x40 [ 52.100416][ T1747] process_scheduled_works+0x4cd/0x9d0 [ 52.105901][ T1747] worker_thread+0x6bc/0x8b0 [ 52.110559][ T1747] kthread+0x488/0x510 [ 52.114664][ T1747] ret_from_fork+0x148/0x280 [ 52.119300][ T1747] ret_from_fork_asm+0x1a/0x30 [ 52.124099][ T1747] [ 52.126438][ T1747] Reported by Kernel Concurrency Sanitizer on: [ 52.132635][ T1747] CPU: 1 UID: 0 PID: 1747 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.142654][ T1747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.152736][ T1747] Workqueue: loop2 loop_workfn [ 52.157544][ T1747] ================================================================== [ 52.192448][ T3866] syzkaller0: entered promiscuous mode [ 52.198075][ T3866] syzkaller0: entered allmulticast mode [ 52.276093][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.