last executing test programs: 1.947243883s ago: executing program 1 (id=2): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r2, 0x1000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001a00)={[0x8]}, 0x8}) 1.920609528s ago: executing program 2 (id=6): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0xfffc, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0xfffffffd}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) close(0x3) 1.861873679s ago: executing program 3 (id=4): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='vers\x00', &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.847472181s ago: executing program 2 (id=7): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f00000003c0)="0dd2", 0x2}], 0x1, 0x0) tee(r0, r5, 0x8f5, 0x8) write$cgroup_devices(r5, 0x0, 0x8) write(r2, 0x0, 0x0) 1.650386237s ago: executing program 0 (id=1): dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x306580}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000700)=@ethtool_rxnfc={0x2d, 0x9, 0x7fffffffffffffff, {0xd, @esp_ip4_spec={@remote, @rand_addr=0x64010102, 0x7fff, 0x9}, {0x0, @broadcast, 0x5, 0xfffa, [0x2, 0x1]}, @ether_spec={@local, @remote, 0x64}, {0x0, @local, 0x2, 0x5, [0xffff8cf6, 0x6]}, 0x5, 0xd09}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) syz_clone(0x944400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.603401805s ago: executing program 4 (id=5): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ef01010100000000000000000000000008000000"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 1.454229481s ago: executing program 4 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x66, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x933, 0x10000, 0x0, 0x7, 0x7, 0x3fd, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x9140, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x7fd, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0x68a5, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x40008, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0xffffffff, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x3, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x10004, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x0, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x9, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x4, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000002, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0x1, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x1, 0x3, 0x9, 0x8, 0x0, 0x40000040, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x2, 0x8, 0x6, 0x4, 0x3, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x4, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x1000, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0xaa, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x40, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0x2, 0x1, 0x9, 0xef, {0x2, 0x1, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000001600)={@val={0x0, 0x60}, @val={0x0, 0x0, 0xfffc, 0x1d, 0x465, 0xfdf5}, @mpls={[], @ipv6=@icmpv6={0x9, 0x6, "d87a61", 0x10, 0x3a, 0x1, @mcast1, @private1, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x81, 0x80, 0x80000000, 0x100}}}}}, 0x46) 1.454029121s ago: executing program 2 (id=9): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0xbb083000, 0x0, 0xdcbd779fe612d4ee, 0x0, 0x0, 0x0) 1.356130498s ago: executing program 4 (id=10): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x7, 0x83, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x39000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) 1.301735608s ago: executing program 0 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0xc040480) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000100)) 1.130414729s ago: executing program 0 (id=12): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x4, 0x4, 0x0, 0x8, 0x7ffd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 984.885955ms ago: executing program 1 (id=13): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0xb, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x8408, 0x2, 0x7, 0x4, 0xfffffffffffff800, 0x8001, 0x8002}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_open_dev$evdev(&(0x7f0000000380), 0x14a, 0x400) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 781.982951ms ago: executing program 2 (id=14): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x400e1, &(0x7f000005ffe4)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x0, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) 668.084411ms ago: executing program 2 (id=15): perf_event_open(&(0x7f0000001140)={0x2, 0x80, 0x47, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x1, @perf_config_ext={0x8, 0x7}, 0x1004, 0x1, 0xf2ec6ba1, 0x5, 0x2, 0x1, 0x9, 0x0, 0x0, 0x0, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='b', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 393.61241ms ago: executing program 2 (id=16): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000013c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3c9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezMQGl32y3dsqX7+SS7fW/mte99Z+Z13ryZbgPoWAPZWxLxQET8GRF9efbOAgP5lxvXLoz9e+3CWBLV6jv/JLVy169dGCuLlt+3Nc9Uq0V+U516L74fMTo1NXG2yA/Nnv5oaObc+ZcmT4+enDg5cWbk6NFDB/f0HBk53JI4s7iu7/p0evfOY+9demvs+KUPfknSyOOOBXG0ykC+det6ttWVtdm2eemkO3vvLXJ7fyuX993zVrGcrojIdlel1v/7ois231rXF2980dbGAWuqWq1W652fC3NVYANLot0tANqjPNFn17/l6x4NPdaFq6/mF0BZ3DeKV76mO9I8sbey4Pq2lQYi4vjczcvZK9ZoHgIAYL4fsvHPi/XGf2k8mid6srcHi/n7/oh4KCK2R8TDEbEjIh6JqJV9LCIeX2H9C++QLB7/pFfuOrgmZOO/V4p7W3eO/9KySH9XkdtWi7+SnJicmjhQbJP9Udl0YjKZGF6ijh9f/+OrRutq479yMD5383JWfzkWLNpxpXvBBN346OzoamKe7+rnEbu668Wf1O4LRHFfb2dE7LrLOiaf7264bv7493jd+JfQ+Mc2rfpNxHP5/p+LBfGXkob3J4dfPjJyeKg3piYODJVHxWK//n7x7Ub1ryr+Fsj2/5a6x/+t+PuT3oiZc+dP1e7Xzqy8jot/fdnwmmb5+O84/o9tK47/nuTd2oKeYsUno7OzZ4cjepI3Fy8fuf3TynxZPot//776/X973N4ST0TE7ojYExFPZheFRdufioinI2LfEvH//NozH648/vqz8pUl6rkbWfzjy+3/mL//V57oOvXT98vH3xsRjfb/oVpqf7Gkmd9/zTZwNdsOAAAA7hf5M/BJOng7nQwO5s/w74gt6dT0zOwLJ6Y/PjOePyvfH5W0nOnqmzcfOlzMDZf5kQX5g8W88dddm2v5wbHpqfF2Bw8dbuui/p+mWf/P/N3V7tYBa64F99GA+5T+D51L/4fOlCzb/1v9yBGwnjj/Q+eq1/8/a1h68Ls1bQxwTzn/Q+dqov/P5V8ajwqA+5PzP3Qu/R86UsO/jU9X9Sf/LU3s+TZv61Jl/is+QmW9tHnjJyJdF83Y+Inupj/MolGisrgvV4t/xpAt2VT3u9r6awkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBl/g8AAP//RrLleA==") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) 360.735816ms ago: executing program 1 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x4}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x1, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) unshare(0x22020400) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4008800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x3c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 359.663996ms ago: executing program 0 (id=27): perf_event_open(&(0x7f0000001140)={0x2, 0x80, 0x47, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x1, @perf_config_ext={0x8, 0x7}, 0x1004, 0x1, 0xf2ec6ba1, 0x5, 0x2, 0x1, 0x9, 0x0, 0x0, 0x0, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='b', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 323.304352ms ago: executing program 3 (id=18): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) sendfile(r0, r0, 0x0, 0x3) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000202be04020506050e1304095c0009003f0020480a0000000d0085a168d0bf46c92345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f5000000000c902000000004a3200040016000b000a0000000000e0ddf66ed538f25232529c28bf00", 0x78, 0x40, 0x0, 0x0) 197.619255ms ago: executing program 1 (id=19): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x5, &(0x7f0000000580)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 29.360915ms ago: executing program 3 (id=20): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x9, 0x8, 0xb, 0x180}, 0x50) sendto$inet6(r1, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e25, 0x10, @mcast2}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=@newqdisc={0xa0, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1000}]}}]}, 0xa0}}, 0x0) 0s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000002c0)=0xfffffeff) kernel console output (not intermixed with test programs): ="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.026272][ T29] audit: type=1400 audit(1790699869.187:110): avc: denied { write } for pid=3180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.026313][ T29] audit: type=1400 audit(1790699869.187:111): avc: denied { add_name } for pid=3180 comm="dhcpcd-run-hook" name="resolv.conf.lapb3.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.072940][ T29] audit: type=1400 audit(1790699869.237:112): avc: denied { write } for pid=3191 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 31.698903][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 31.698921][ T29] audit: type=1400 audit(1790699876.857:126): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.699215][ T29] audit: type=1400 audit(1790699876.857:127): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.699836][ T3287] cgroup: Unknown subsys name 'net' [ 31.700102][ T29] audit: type=1400 audit(1790699876.857:128): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.847083][ T3287] cgroup: Unknown subsys name 'cpuset' [ 31.847804][ T3287] cgroup: Unknown subsys name 'rlimit' [ 31.954737][ T29] audit: type=1400 audit(1790699877.107:129): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.955925][ T29] audit: type=1400 audit(1790699877.107:130): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.956038][ T29] audit: type=1400 audit(1790699877.107:131): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.956316][ T29] audit: type=1400 audit(1790699877.107:132): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.989256][ T29] audit: type=1400 audit(1790699877.147:133): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.989369][ T29] audit: type=1400 audit(1790699877.147:134): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.005474][ T29] audit: type=1400 audit(1790699877.167:135): avc: denied { read } for pid=3023 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.061382][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.139900][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.536987][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.537053][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.537139][ T3303] bridge_slave_0: entered allmulticast mode [ 33.537688][ T3303] bridge_slave_0: entered promiscuous mode [ 33.546537][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.546682][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.546910][ T3298] bridge_slave_0: entered allmulticast mode [ 33.548121][ T3298] bridge_slave_0: entered promiscuous mode [ 33.550174][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.550280][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.550445][ T3298] bridge_slave_1: entered allmulticast mode [ 33.551650][ T3298] bridge_slave_1: entered promiscuous mode [ 33.574810][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.577430][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.599045][ T3298] team0: Port device team_slave_0 added [ 33.601529][ T3298] team0: Port device team_slave_1 added [ 33.668521][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.668617][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.668683][ T3303] bridge_slave_1: entered allmulticast mode [ 33.669197][ T3303] bridge_slave_1: entered promiscuous mode [ 33.703148][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.703183][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.703362][ T3302] bridge_slave_0: entered allmulticast mode [ 33.703835][ T3302] bridge_slave_0: entered promiscuous mode [ 33.713988][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.714108][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.714293][ T3305] bridge_slave_0: entered allmulticast mode [ 33.715433][ T3305] bridge_slave_0: entered promiscuous mode [ 33.717511][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.717605][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.717669][ T3305] bridge_slave_1: entered allmulticast mode [ 33.718900][ T3305] bridge_slave_1: entered promiscuous mode [ 33.741615][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.744122][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.766029][ T3305] team0: Port device team_slave_0 added [ 33.768144][ T3305] team0: Port device team_slave_1 added [ 33.788228][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.788276][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.788390][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.789718][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.789758][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.789880][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.831752][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.831802][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.831894][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.913563][ T3305] hsr_slave_0: entered promiscuous mode [ 33.914531][ T3305] hsr_slave_1: entered promiscuous mode [ 33.934689][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.934730][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.934791][ T3302] bridge_slave_1: entered allmulticast mode [ 33.935383][ T3302] bridge_slave_1: entered promiscuous mode [ 33.959215][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.959236][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.959315][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.979438][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.982222][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.034022][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.048750][ T3303] team0: Port device team_slave_0 added [ 34.050712][ T3303] team0: Port device team_slave_1 added [ 34.067972][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.078848][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.078950][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.079196][ T3297] bridge_slave_0: entered allmulticast mode [ 34.080418][ T3297] bridge_slave_0: entered promiscuous mode [ 34.102502][ T3298] hsr_slave_0: entered promiscuous mode [ 34.103556][ T3298] hsr_slave_1: entered promiscuous mode [ 34.104134][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 34.104185][ T3298] Cannot create hsr debugfs directory [ 34.134710][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.134745][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.134850][ T3297] bridge_slave_1: entered allmulticast mode [ 34.135406][ T3297] bridge_slave_1: entered promiscuous mode [ 34.136672][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.136712][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.136797][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.145607][ T3302] team0: Port device team_slave_0 added [ 34.148374][ T3302] team0: Port device team_slave_1 added [ 34.158582][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.158624][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.158718][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.228798][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.228850][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.228966][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.289874][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.289927][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.290106][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.295042][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.316797][ T3303] hsr_slave_0: entered promiscuous mode [ 34.318167][ T3303] hsr_slave_1: entered promiscuous mode [ 34.318716][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 34.318765][ T3303] Cannot create hsr debugfs directory [ 34.336040][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.394163][ T3297] team0: Port device team_slave_0 added [ 34.395273][ T3297] team0: Port device team_slave_1 added [ 34.439485][ T3302] hsr_slave_0: entered promiscuous mode [ 34.439869][ T3302] hsr_slave_1: entered promiscuous mode [ 34.440144][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 34.440157][ T3302] Cannot create hsr debugfs directory [ 34.442780][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.442794][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.442825][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.476112][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.476165][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.476217][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.603951][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.605632][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.619728][ T3297] hsr_slave_0: entered promiscuous mode [ 34.620721][ T3297] hsr_slave_1: entered promiscuous mode [ 34.621428][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 34.621476][ T3297] Cannot create hsr debugfs directory [ 34.644665][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.647450][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.663997][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.665689][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.689211][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.691558][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.767267][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.769099][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.769822][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.771814][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.772344][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.773983][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.804483][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.811360][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.844550][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.847839][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.850289][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.858491][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.876841][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.878817][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.879457][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.881535][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.922482][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.924472][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.942660][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.944550][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.945153][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.949712][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.952514][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.957670][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.000966][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.002936][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.004696][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.018399][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.024071][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.041778][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.043558][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.044076][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.046119][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.082646][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.103091][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.103128][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.132980][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.133012][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.139136][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.164708][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.171573][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.181229][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.196034][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.196070][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.200679][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.200854][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.239019][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.253991][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.264549][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.264591][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.290249][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.290297][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.291898][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.291937][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.295785][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.295914][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.348252][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.358480][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.377940][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.409077][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.409153][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.435112][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.435146][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.620815][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.639120][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.707939][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.743514][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.785549][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.856073][ T3305] veth0_vlan: entered promiscuous mode [ 35.873443][ T3305] veth1_vlan: entered promiscuous mode [ 35.875331][ T3303] veth0_vlan: entered promiscuous mode [ 35.893650][ T3303] veth1_vlan: entered promiscuous mode [ 35.915457][ T3305] veth0_macvtap: entered promiscuous mode [ 35.923279][ T3305] veth1_macvtap: entered promiscuous mode [ 35.936080][ T3303] veth0_macvtap: entered promiscuous mode [ 35.943843][ T3303] veth1_macvtap: entered promiscuous mode [ 35.951076][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.962612][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.012716][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.014683][ T3302] veth0_vlan: entered promiscuous mode [ 36.029676][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.050789][ T3297] veth0_vlan: entered promiscuous mode [ 36.052036][ T3302] veth1_vlan: entered promiscuous mode [ 36.062991][ T3297] veth1_vlan: entered promiscuous mode [ 36.092250][ T3305] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.110070][ T3302] veth0_macvtap: entered promiscuous mode [ 36.113685][ T3302] veth1_macvtap: entered promiscuous mode [ 36.115741][ T3298] veth0_vlan: entered promiscuous mode [ 36.133525][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.138127][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.173254][ T3297] veth0_macvtap: entered promiscuous mode [ 36.189834][ T3298] veth1_vlan: entered promiscuous mode [ 36.191146][ T3297] veth1_macvtap: entered promiscuous mode [ 36.240878][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.261041][ T3503] syz.2.3 (3503) used greatest stack depth: 10704 bytes left [ 36.271299][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.283367][ T3298] veth0_macvtap: entered promiscuous mode [ 36.298380][ T3298] veth1_macvtap: entered promiscuous mode [ 36.338477][ T3471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.338537][ T3471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.338570][ T3471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.338605][ T3471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.338690][ T3471] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.338726][ T3471] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.338843][ T3471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.338893][ T3471] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.338937][ T3471] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.338975][ T3471] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.339006][ T3471] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.339045][ T3471] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.339137][ T3471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.339207][ T3471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.339275][ T3471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.339342][ T3471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.340537][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.370149][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.576777][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.576975][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.577161][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.577376][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.646231][ T3525] bridge_slave_0: left allmulticast mode [ 36.646271][ T3525] bridge_slave_0: left promiscuous mode [ 36.646490][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.776053][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 36.776074][ T29] audit: type=1400 audit(1790699881.927:172): avc: denied { create } for pid=3530 comm="syz.2.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 36.829084][ T29] audit: type=1400 audit(1790699881.987:173): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.829140][ T29] audit: type=1400 audit(1790699881.987:174): avc: denied { open } for pid=3298 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.829169][ T29] audit: type=1400 audit(1790699881.987:175): avc: denied { ioctl } for pid=3298 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.007660][ T29] audit: type=1400 audit(1790699882.157:176): avc: denied { sys_admin } for pid=3530 comm="syz.2.9" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 37.072490][ T29] audit: type=1400 audit(1790699882.227:177): avc: denied { mount } for pid=3538 comm="syz.0.12" name="/" dev="ramfs" ino=4094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 37.170414][ T29] audit: type=1400 audit(1790699882.327:178): avc: denied { read append } for pid=3540 comm="syz.1.13" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.170616][ T29] audit: type=1400 audit(1790699882.327:179): avc: denied { open } for pid=3540 comm="syz.1.13" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.310144][ T364] rpcbind: server 127.0.0.1 not responding, timed out [ 37.446071][ T29] audit: type=1400 audit(1790699882.597:180): avc: denied { shutdown } for pid=3542 comm="syz.2.14" lport=48916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.469563][ T29] audit: type=1400 audit(1790699882.627:181): avc: denied { read } for pid=3542 comm="syz.2.14" lport=48916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.883544][ T3554] FAULT_INJECTION: forcing a failure. [ 37.883544][ T3554] name failslab, interval 1, probability 0, space 0, times 1 [ 37.883613][ T3554] CPU: 1 UID: 0 PID: 3554 Comm: syz.3.18 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.883671][ T3554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.883696][ T3554] Call Trace: [ 37.883704][ T3554] [ 37.883711][ T3554] __dump_stack+0x1d/0x30 [ 37.883745][ T3554] dump_stack_lvl+0x95/0xd0 [ 37.883840][ T3554] dump_stack+0x15/0x1b [ 37.883869][ T3554] should_fail_ex+0x262/0x280 [ 37.883942][ T3554] ? fib_create_info+0xb84/0x18e0 [ 37.883984][ T3554] should_failslab+0x8c/0xb0 [ 37.884025][ T3554] __kmalloc_noprof+0xd0/0x4d0 [ 37.884080][ T3554] ? fib_create_info+0xb84/0x18e0 [ 37.884180][ T3554] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 37.884229][ T3554] fib_create_info+0xb84/0x18e0 [ 37.884354][ T3554] fib_table_insert+0x61/0xee0 [ 37.884482][ T3554] ? fib_trie_table+0xb3/0xf0 [ 37.884598][ T3554] ? _raw_spin_lock+0x53/0xa0 [ 37.884635][ T3554] ? _raw_spin_unlock+0x9/0x30 [ 37.884739][ T3554] inet_rtm_newroute+0xb5/0x160 [ 37.884830][ T3554] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 37.884886][ T3554] rtnetlink_rcv_msg+0x64b/0x720 [ 37.884992][ T3554] netlink_rcv_skb+0x11e/0x220 [ 37.885039][ T3554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 37.885131][ T3554] rtnetlink_rcv+0x1c/0x30 [ 37.885170][ T3554] netlink_unicast+0x5a9/0x680 [ 37.885221][ T3554] netlink_sendmsg+0x5be/0x6f0 [ 37.885252][ T3554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.885320][ T3554] __sys_sendto+0x411/0x470 [ 37.885423][ T3554] __x64_sys_sendto+0x76/0x90 [ 37.885452][ T3554] x64_sys_call+0x200c/0x2550 [ 37.885485][ T3554] do_syscall_64+0x112/0x360 [ 37.885558][ T3554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.885590][ T3554] RIP: 0033:0x7f515332e159 [ 37.885621][ T3554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.885646][ T3554] RSP: 002b:00007f5151d87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 37.885674][ T3554] RAX: ffffffffffffffda RBX: 00007f51535b5fa0 RCX: 00007f515332e159 [ 37.885707][ T3554] RDX: 0000000000000078 RSI: 0000200000000080 RDI: 0000000000000004 [ 37.885727][ T3554] RBP: 00007f51533c506b R08: 0000000000000000 R09: 0000000000000000 [ 37.885745][ T3554] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 37.885764][ T3554] R13: 00007f51535b6038 R14: 00007f51535b5fa0 R15: 00007fffc54840a8 [ 37.885790][ T3554] [ 38.115905][ T3548] loop2: detected capacity change from 0 to 512 [ 38.224035][ T3564] EXT4-fs (sda1): shut down requested (0) [ 38.250171][ T3548] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 38.251013][ T3548] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.16: inode #15: comm syz.2.16: iget: illegal inode # [ 38.251112][ T3548] loop2: lost filesystem error report for type 5 error -117 [ 38.251806][ T3548] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.16: couldn't read orphan inode 15 (err -117) [ 38.251917][ T3548] loop2: lost filesystem error report for type 5 error -117 [ 38.259225][ T3548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.407945][ T3564] ================================================================== [ 38.407983][ T3564] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 38.408027][ T3564] [ 38.408035][ T3564] read-write to 0xffff888107605b48 of 8 bytes by task 55 on cpu 1: [ 38.408053][ T3564] __xa_clear_mark+0xf5/0x1e0 [ 38.408079][ T3564] __folio_end_writeback+0xe7/0x530 [ 38.408125][ T3564] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 38.408155][ T3564] folio_end_writeback+0x1c/0x70 [ 38.408178][ T3564] ext4_finish_bio+0x454/0x770 [ 38.408207][ T3564] ext4_release_io_end+0x9f/0x1f0 [ 38.408235][ T3564] ext4_end_io_end+0x18d/0x240 [ 38.408257][ T3564] ext4_end_io_rsv_work+0x15b/0x1f0 [ 38.408279][ T3564] process_scheduled_works+0x56a/0xa50 [ 38.408319][ T3564] worker_thread+0x569/0x750 [ 38.408363][ T3564] kthread+0x223/0x270 [ 38.408389][ T3564] ret_from_fork+0x146/0x330 [ 38.408427][ T3564] ret_from_fork_asm+0x1a/0x30 [ 38.408462][ T3564] [ 38.408470][ T3564] read to 0xffff888107605b48 of 8 bytes by task 3564 on cpu 0: [ 38.408490][ T3564] xas_find_marked+0x211/0x650 [ 38.408512][ T3564] filemap_get_folios_tag+0xf7/0x400 [ 38.408542][ T3564] filemap_fdatawait_keep_errors+0x6c/0x190 [ 38.408571][ T3564] sync_inodes_sb+0x424/0x4d0 [ 38.408599][ T3564] sync_filesystem+0x108/0x190 [ 38.408621][ T3564] freeze_super+0x375/0xa50 [ 38.408659][ T3564] fs_bdev_freeze+0x149/0x2b0 [ 38.408675][ T3564] bdev_freeze+0xf3/0x1a0 [ 38.408709][ T3564] ext4_force_shutdown+0x190/0x2f0 [ 38.408732][ T3564] ext4_ioctl+0x16fd/0x3210 [ 38.408750][ T3564] __se_sys_ioctl+0xce/0x140 [ 38.408788][ T3564] __x64_sys_ioctl+0x43/0x50 [ 38.408835][ T3564] x64_sys_call+0x239d/0x2550 [ 38.408863][ T3564] do_syscall_64+0x112/0x360 [ 38.408885][ T3564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.408914][ T3564] [ 38.408919][ T3564] value changed: 0xffffff8000000000 -> 0xffe0000000000000 [ 38.408935][ T3564] [ 38.408940][ T3564] Reported by Kernel Concurrency Sanitizer on: [ 38.408951][ T3564] CPU: 0 UID: 0 PID: 3564 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(lazy) [ 38.408977][ T3564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 38.408992][ T3564] ================================================================== [ 38.625807][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.