last executing test programs: 1m2.094606849s ago: executing program 1 (id=3286): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)}}], 0x2, 0x40448c0) shutdown(r0, 0x1) 1m2.013532975s ago: executing program 1 (id=3288): sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x1}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2bc, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2a8, 0x1, [@m_ife={0xa0, 0xb, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x5}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x3f, 0x10000000, 0x10, 0x6}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xcc, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x9c, 0x5, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f7, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0xd, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x11, 0x6, "a09e88b2fa7e2ad0dddad3cdaa"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x9c, 0x1a, 0x0, 0x0, {{0x7}, {0x4}, {0x71, 0x6, "8850292e248ac4bb2ecd95dd3a5619db7af347b0687f0683db3cd63dedd7f9c3a5bb3167ac124dd18979a62419a29316d507e2a0abf181e4f9d6dc416b94912a7bf866cd425975578de62756ee0750f95d36d65a7455ad211b57c0a58834d2a3f82c1047a48f1819b6518a7546"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf, 0xc3}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 57.710660741s ago: executing program 4 (id=3311): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 57.632225047s ago: executing program 4 (id=3312): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000110005000000000000000000070000", @ANYRES32=r2, @ANYBLOB="001001000000000014001a80100004800c000a8008"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x60040050) 57.536716635s ago: executing program 4 (id=3315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x8, 0x0, @tid=r0}, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 56.701626402s ago: executing program 1 (id=3290): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0xffe0, 0xb}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 56.495982919s ago: executing program 1 (id=3318): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_submit(r4, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x100000}]) 55.317757403s ago: executing program 4 (id=3331): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 55.192849843s ago: executing program 1 (id=3332): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x100000}]) 54.797858265s ago: executing program 4 (id=3339): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 54.544024776s ago: executing program 4 (id=3342): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) inotify_init1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1000f) 54.543819725s ago: executing program 32 (id=3342): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) inotify_init1(0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1000f) 53.019490018s ago: executing program 1 (id=3348): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600004000000000805db18fd822e3f0e1e15ac708693eb6a76ee23c580d48a1", 0x5f}, {&(0x7f0000000380)="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", 0xefc}], 0x2}, 0x20008010) 53.019145818s ago: executing program 33 (id=3348): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27050200340f14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600004000000000805db18fd822e3f0e1e15ac708693eb6a76ee23c580d48a1", 0x5f}, {&(0x7f0000000380)="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", 0xefc}], 0x2}, 0x20008010) 49.800289887s ago: executing program 3 (id=3377): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00"/14], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='net_dev_start_xmit\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) sendmmsg$inet(r2, &(0x7f0000000500)=[{{&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) 49.683441266s ago: executing program 3 (id=3380): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010101, 0x4e20, 0x4, 0xa, 0x80012d58, 0x12d5c}}, 0x44) 49.63082505s ago: executing program 3 (id=3383): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x224, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x1ec, 0x2, [@TCA_ROUTE4_ACT={0x1e8, 0x6, [@m_vlan={0x88, 0x6, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x49, 0x6, "657c8f856bb2bb5d377d3e798375b1d28aa9ff79c5750c001846426a94e358dab26224b357e0bd9c9b84cfee21ec99f48cf585ab10ae01a9ffc67e6ad19b4103524e4f4a3b"}, {0xc}, {0xc}}}, @m_bpf={0x15c, 0xa, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x0, 0x1, 0x9}]}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x3, 0x3, 0x5, 0x7f}, {0x4, 0x0, 0xe7}, {0x3373, 0x7, 0x5, 0xe786f6ae}, {0x2, 0x1c, 0xb0, 0x20000000}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x7, 0x3, 0x9, 0x8}]}]}, {0xde, 0x6, "8eb55930760aaf0b59772c5971036fba8994239acc2d66a896c98c740ca7d203000000000000002a326cef7c8ba136d0bce7d5be2f44c0f7df2af8b58cd15301925bdef87ac2e982db6d48439b06b9d7e9e88cb4d0262a5d0900461c33b2f76470602416519436d7f6f3d3dec1bf02a5ce6e83f8664d689fd77f1519cfac04b8ebd7ea20e82977ee8d8e46d44e8f8c8485af903929b1f3288322548d9e6a92389a03899eaaba97faeef8863180bc96804713e41b3d6d0032dc6414d0626a176725767c2a42131583a64bf3c2e43f64d02f9be090aa44978db670"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x4004}, 0x20008885) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 49.580515685s ago: executing program 3 (id=3385): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) socket(0x8000000010, 0x2, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 49.119967371s ago: executing program 3 (id=3395): chdir(&(0x7f0000000440)='./file0\x00') unshare(0x26020480) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 48.967543424s ago: executing program 3 (id=3399): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 48.921385538s ago: executing program 34 (id=3399): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 11.381988566s ago: executing program 5 (id=3627): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x906, 0x0, @perf_config_ext={0x68a, 0x4}, 0xe8, 0x0, 0xfffffffc}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu G'], 0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 10.368137807s ago: executing program 5 (id=3633): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) 10.246459727s ago: executing program 5 (id=3634): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x4, 0xdb, &(0x7f00000002c0)=""/219}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0}, 0x90) 7.951137021s ago: executing program 5 (id=3645): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x16, 0x0) 7.865554308s ago: executing program 5 (id=3647): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 7.551956093s ago: executing program 5 (id=3651): sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b702000020000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 7.447046562s ago: executing program 35 (id=3651): sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b702000020000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 4.671846485s ago: executing program 0 (id=3665): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000100200000000200000000000000", @ANYRES32, @ANYBLOB="408f01000a200200200012800e0001006970366772657461700000080c00028006000e00014600"], 0x40}}, 0x20000000) 4.630363998s ago: executing program 0 (id=3666): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.621969339s ago: executing program 6 (id=3667): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4.548554605s ago: executing program 6 (id=3668): socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005000000", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) syz_open_procfs(0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) 2.477483671s ago: executing program 0 (id=3676): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x96fa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2.424844406s ago: executing program 0 (id=3677): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 2.388546169s ago: executing program 2 (id=3678): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x906, 0x0, @perf_config_ext={0x68a, 0x4}, 0xe8, 0x0, 0xfffffffc}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.384516059s ago: executing program 0 (id=3679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2.382499369s ago: executing program 7 (id=3680): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e00)={{r0}, 0x0, &(0x7f0000001dc0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.305398215s ago: executing program 0 (id=3681): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.006296399s ago: executing program 2 (id=3682): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) write(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 1.909385407s ago: executing program 2 (id=3683): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.905161507s ago: executing program 2 (id=3684): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.406940808s ago: executing program 7 (id=3685): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008810}, 0x4000854) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@private0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.3796281s ago: executing program 7 (id=3686): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c5", 0xc2}, {&(0x7f0000000400)="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", 0x62c}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.282412067s ago: executing program 7 (id=3687): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 918.875857ms ago: executing program 6 (id=3688): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYRES16=r0], 0x40c}}, 0x0) 849.432852ms ago: executing program 6 (id=3689): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 795.043967ms ago: executing program 6 (id=3690): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300"], 0x84}}, 0x20008040) 763.540879ms ago: executing program 6 (id=3691): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 761.404069ms ago: executing program 7 (id=3692): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 655.785678ms ago: executing program 7 (id=3693): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, 0x0, 0x24000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) ioctl$TCSETAW(r3, 0x5407, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 500.80206ms ago: executing program 8 (id=3652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0xffffff14) 29.003998ms ago: executing program 2 (id=3694): getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) syz_open_dev$usbfs(&(0x7f0000000180), 0x1, 0x1) open(&(0x7f00000005c0)='./bus\x00', 0x64a42, 0x389b0d52417bb348) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[], 0x118) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe2(&(0x7f0000000100), 0x800) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f00000000c0)) 0s ago: executing program 2 (id=3695): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='hugetlbfs\x00', 0x16, 0x0) kernel console output (not intermixed with test programs): 0000-0000-0000-0000-000000000000. [ 497.942231][ T3479] bridge_slave_0: left allmulticast mode [ 497.947964][ T3479] bridge_slave_0: left promiscuous mode [ 497.953902][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.142760][ T3479] dvmrp1 (unregistering): left allmulticast mode [ 498.603516][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.635397][ T3479] bond_slave_0: left promiscuous mode [ 498.641057][ T3479] bond_slave_0: left allmulticast mode [ 498.658839][ T3479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.676065][ T3479] bond_slave_1: left promiscuous mode [ 498.681636][ T3479] bond_slave_1: left allmulticast mode [ 498.696130][ T3479] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 498.714159][ T3479] macvlan1: left promiscuous mode [ 498.719447][ T3479] macvlan1: left allmulticast mode [ 498.725190][ T3479] bond0 (unregistering): Released all slaves [ 498.785772][ T3479] tipc: Left network mode [ 498.876575][ T3479] hsr_slave_0: left promiscuous mode [ 498.893598][ T3479] hsr_slave_1: left promiscuous mode [ 498.908414][ T3479] veth1_macvtap: left allmulticast mode [ 499.017421][ T3479] team_slave_1 (unregistering): left promiscuous mode [ 499.024341][ T3479] team_slave_1 (unregistering): left allmulticast mode [ 499.034067][ T3479] team0 (unregistering): Port device team_slave_1 removed [ 499.045116][ T3479] team_slave_0 (unregistering): left promiscuous mode [ 499.051991][ T3479] team_slave_0 (unregistering): left allmulticast mode [ 499.060547][ T3479] team0 (unregistering): Port device team_slave_0 removed [ 499.122954][T11858] chnl_net:caif_netlink_parms(): no params data found [ 499.174382][T11941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=11941 comm=syz.1.2891 [ 499.272114][T11948] loop3: detected capacity change from 0 to 512 [ 499.355662][T11948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.368270][T11948] ext4 filesystem being mounted at /569/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.619427][T11858] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.626560][T11858] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.380986][T11858] bridge_slave_0: entered allmulticast mode [ 500.402322][T11858] bridge_slave_0: entered promiscuous mode [ 500.419140][T11858] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.426306][T11858] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.532530][T11858] bridge_slave_1: entered allmulticast mode [ 500.538906][T11858] bridge_slave_1: entered promiscuous mode [ 500.693032][ T3479] ------------[ cut here ]------------ [ 500.698544][ T3479] WARNING: CPU: 1 PID: 3479 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x91/0x100 [ 500.708771][ T3479] Modules linked in: [ 500.712794][ T3479] CPU: 1 UID: 0 PID: 3479 Comm: kworker/u8:9 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 500.725416][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.735499][ T3479] Workqueue: netns cleanup_net [ 500.740300][ T3479] RIP: 0010:xfrm6_tunnel_net_exit+0x91/0x100 [ 500.746337][ T3479] Code: e5 5d ab fc 4b 83 3c 3e 00 75 19 e8 99 8c 90 fc 49 81 ff f8 07 00 00 74 1d e8 8b 8c 90 fc 49 83 c7 08 eb d7 e8 80 8c 90 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 500.766048][ T3479] RSP: 0018:ffffc9000197fc78 EFLAGS: 00010293 [ 500.772153][ T3479] RAX: ffffffff84c76d30 RBX: ffff8881189397c0 RCX: ffff8881036b9080 [ 500.780163][ T3479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811895e000 [ 500.788183][ T3479] RBP: ffffffff86c93920 R08: 0001ffff86847f7f R09: 0000000000000000 [ 500.796272][ T3479] R10: ffffc900017a7cf0 R11: ffffffffa02016d8 R12: ffffffff86c93940 [ 500.804387][ T3479] R13: ffff8881189397e8 R14: ffff88811895e000 R15: 0000000000000000 [ 500.812384][ T3479] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 500.821349][ T3479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.827944][ T3479] CR2: 0000200000010000 CR3: 000000011a646000 CR4: 00000000003506f0 [ 500.836026][ T3479] Call Trace: [ 500.839308][ T3479] [ 500.842264][ T3479] ops_undo_list+0x27b/0x410 [ 500.846916][ T3479] cleanup_net+0x2de/0x4d0 [ 500.851379][ T3479] process_scheduled_works+0x4cb/0x9d0 [ 500.856869][ T3479] worker_thread+0x582/0x770 [ 500.861642][ T3479] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 500.867555][ T3479] kthread+0x489/0x510 [ 500.871726][ T3479] ? finish_task_switch+0xad/0x2b0 [ 500.876870][ T3479] ? __pfx_worker_thread+0x10/0x10 [ 500.882267][ T3479] ? __pfx_kthread+0x10/0x10 [ 500.886879][ T3479] ret_from_fork+0xda/0x150 [ 500.891411][ T3479] ? __pfx_kthread+0x10/0x10 [ 500.896044][ T3479] ret_from_fork_asm+0x1a/0x30 [ 500.900865][ T3479] [ 500.903894][ T3479] ---[ end trace 0000000000000000 ]--- [ 500.910243][ T3479] ------------[ cut here ]------------ [ 500.915784][ T3479] WARNING: CPU: 1 PID: 3479 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd5/0x100 [ 500.925954][ T3479] Modules linked in: [ 500.930116][ T3479] CPU: 1 UID: 0 PID: 3479 Comm: kworker/u8:9 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 500.944319][ T3479] Tainted: [W]=WARN [ 500.948132][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 500.958220][ T3479] Workqueue: netns cleanup_net [ 500.963041][ T3479] RIP: 0010:xfrm6_tunnel_net_exit+0xd5/0x100 [ 500.969048][ T3479] Code: a1 5d ab fc 49 83 3c 1e 00 75 19 e8 55 8c 90 fc 48 81 fb f8 07 00 00 74 1d e8 47 8c 90 fc 48 83 c3 08 eb d7 e8 3c 8c 90 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 2a 8c 90 fc 5b 41 5e 41 5f [ 500.988697][ T3479] RSP: 0018:ffffc9000197fc78 EFLAGS: 00010293 [ 500.994888][ T3479] RAX: ffffffff84c76d74 RBX: 0000000000000008 RCX: ffff8881036b9080 [ 501.002880][ T3479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811895e808 [ 501.010969][ T3479] RBP: ffffffff86c93920 R08: 0001ffff86847f7f R09: 0000000000000000 [ 501.018959][ T3479] R10: ffffc900017a7cf0 R11: ffffffffa02016d8 R12: ffffffff86c93940 [ 501.026973][ T3479] R13: ffff8881189397e8 R14: ffff88811895e800 R15: 00000000000007f8 [ 501.035036][ T3479] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 501.044020][ T3479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 501.050703][ T3479] CR2: 0000200000010000 CR3: 000000011a646000 CR4: 00000000003506f0 [ 501.058742][ T3479] Call Trace: [ 501.062055][ T3479] [ 501.064999][ T3479] ops_undo_list+0x27b/0x410 [ 501.069712][ T3479] cleanup_net+0x2de/0x4d0 [ 501.074169][ T3479] process_scheduled_works+0x4cb/0x9d0 [ 501.079658][ T3479] worker_thread+0x582/0x770 [ 501.084291][ T3479] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 501.090121][ T3479] kthread+0x489/0x510 [ 501.094228][ T3479] ? finish_task_switch+0xad/0x2b0 [ 501.099357][ T3479] ? __pfx_worker_thread+0x10/0x10 [ 501.104529][ T3479] ? __pfx_kthread+0x10/0x10 [ 501.109131][ T3479] ret_from_fork+0xda/0x150 [ 501.113662][ T3479] ? __pfx_kthread+0x10/0x10 [ 501.118275][ T3479] ret_from_fork_asm+0x1a/0x30 [ 501.123114][ T3479] [ 501.126153][ T3479] ---[ end trace 0000000000000000 ]--- [ 501.293948][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.646318][ T3479] IPVS: stop unused estimator thread 0... [ 501.700434][T11986] tipc: Enabled bearer , priority 0 [ 501.710611][T11858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.741449][T11986] syzkaller0: entered promiscuous mode [ 501.746975][T11986] syzkaller0: entered allmulticast mode [ 501.784842][T11986] tipc: Resetting bearer [ 501.791425][T11985] tipc: Resetting bearer [ 501.802585][T11985] tipc: Disabling bearer [ 501.961214][T11858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.061170][ T3479] ------------[ cut here ]------------ [ 502.066755][ T3479] WARNING: CPU: 1 PID: 3479 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 502.076374][ T3479] Modules linked in: [ 502.080304][ T3479] CPU: 1 UID: 0 PID: 3479 Comm: kworker/u8:9 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 502.094618][ T3479] Tainted: [W]=WARN [ 502.098448][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.108626][ T3479] Workqueue: netns cleanup_net [ 502.113460][ T3479] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 502.119038][ T3479] Code: 48 8d bb 30 0e 00 00 e8 05 0a bd fc 48 8b bb 30 0e 00 00 e8 c9 8a c9 fc 5b 41 5e 41 5f 5d e9 0e 8d b3 00 cc e8 58 4c a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 4a 4c a2 fc 90 0f 0b 90 4c 89 f7 e8 ce [ 502.138809][ T3479] RSP: 0018:ffffc9000197fc60 EFLAGS: 00010293 [ 502.144911][ T3479] RAX: ffffffff84b5ad58 RBX: ffff8881189397c0 RCX: ffff8881036b9080 [ 502.152919][ T3479] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811893a5c0 [ 502.161083][ T3479] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 502.169119][ T3479] R10: ffffc9000197fbe8 R11: 0001c9000197fbe8 R12: ffffffff86c8b7c0 [ 502.177118][ T3479] R13: ffff8881189397e8 R14: ffff88811893a5c0 R15: ffff8881189397c0 [ 502.185219][ T3479] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 502.194357][ T3479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 502.201035][ T3479] CR2: 00007f4f025c85b0 CR3: 000000011a646000 CR4: 00000000003506f0 [ 502.209113][ T3479] Call Trace: [ 502.212550][ T3479] [ 502.215491][ T3479] xfrm_net_exit+0x2d/0x60 [ 502.219940][ T3479] ops_undo_list+0x27b/0x410 [ 502.224607][ T3479] cleanup_net+0x2de/0x4d0 [ 502.229059][ T3479] process_scheduled_works+0x4cb/0x9d0 [ 502.234590][ T3479] worker_thread+0x582/0x770 [ 502.239269][ T3479] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 502.245148][ T3479] kthread+0x489/0x510 [ 502.249266][ T3479] ? finish_task_switch+0xad/0x2b0 [ 502.254457][ T3479] ? __pfx_worker_thread+0x10/0x10 [ 502.259607][ T3479] ? __pfx_kthread+0x10/0x10 [ 502.264256][ T3479] ret_from_fork+0xda/0x150 [ 502.268832][ T3479] ? __pfx_kthread+0x10/0x10 [ 502.273635][ T3479] ret_from_fork_asm+0x1a/0x30 [ 502.278637][ T3479] [ 502.281708][ T3479] ---[ end trace 0000000000000000 ]--- [ 502.312298][T11858] team0: Port device team_slave_0 added [ 502.434363][T11858] team0: Port device team_slave_1 added [ 502.574889][T11858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.581916][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.607938][T11858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.954919][T11858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.961947][T11858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.988103][T11858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.184034][ T3382] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 503.193971][ T3382] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 503.230976][T11858] hsr_slave_0: entered promiscuous mode [ 503.253008][T11858] hsr_slave_1: entered promiscuous mode [ 503.273456][T11858] debugfs: 'hsr0' already exists in 'hsr' [ 503.279238][T11858] Cannot create hsr debugfs directory [ 503.580608][T12044] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2909'. [ 504.012548][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2910'. [ 504.075624][T12051] vlan2: entered promiscuous mode [ 504.110454][T11858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 504.170992][T11858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 504.188333][T11858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 504.205931][T11858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 504.360684][T11858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.391862][T11858] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.413616][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.420730][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.447334][T11858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 504.457753][T11858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 504.472828][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.479951][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.633749][T11858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.901503][T11858] veth0_vlan: entered promiscuous mode [ 504.984579][T11858] veth1_vlan: entered promiscuous mode [ 505.022557][T11858] veth0_macvtap: entered promiscuous mode [ 505.035869][T11858] veth1_macvtap: entered promiscuous mode [ 505.091191][T11858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.109361][T11858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.140086][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.159534][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.168785][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.209790][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 505.209806][ T29] audit: type=1400 audit(1755238949.729:534): avc: denied { mount } for pid=11858 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 505.238320][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.367809][ T29] audit: type=1400 audit(1755238949.769:535): avc: denied { mounton } for pid=11858 comm="syz-executor" path="/root/syzkaller.vunVrU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 506.087892][T12196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.103771][T12196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.136746][T12196] 8021q: VLANs not supported on caif0 [ 506.323389][ T41] gretap0: left allmulticast mode [ 506.328474][ T41] gretap0: left promiscuous mode [ 506.333759][ T41] bridge0: port 3(gretap0) entered disabled state [ 506.360975][ T41] bridge_slave_1: left allmulticast mode [ 506.366816][ T41] bridge_slave_1: left promiscuous mode [ 506.372640][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.391070][ T41] bridge_slave_0: left allmulticast mode [ 506.396742][ T41] bridge_slave_0: left promiscuous mode [ 506.402565][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.575531][ T29] audit: type=1400 audit(1755238951.099:536): avc: denied { execute } for pid=12239 comm="syz.3.2933" path="/583/cpu.stat" dev="tmpfs" ino=2979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 506.603725][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.613729][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.623098][ T41] bond0 (unregistering): Released all slaves [ 506.859242][ T41] tipc: Left network mode [ 506.873540][T12244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2934'. [ 506.947563][ T41] hsr_slave_0: left promiscuous mode [ 507.012454][T12249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=12249 comm=syz.1.2935 [ 507.016357][ T41] hsr_slave_1: left promiscuous mode [ 507.031462][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.042444][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.184022][ T41] team0 (unregistering): Port device team_slave_1 removed [ 507.195515][ T41] team0 (unregistering): Port device team_slave_0 removed [ 507.229387][T12193] chnl_net:caif_netlink_parms(): no params data found [ 507.468716][T12277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2940'. [ 507.673978][T12277] vlan2: entered promiscuous mode [ 507.679061][T12277] gretap0: entered promiscuous mode [ 507.718565][T12193] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.725756][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.739185][T12285] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2942'. [ 507.756130][T12193] bridge_slave_0: entered allmulticast mode [ 507.780253][T12193] bridge_slave_0: entered promiscuous mode [ 507.804187][T12193] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.811319][T12193] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.840505][T12193] bridge_slave_1: entered allmulticast mode [ 508.264315][T12193] bridge_slave_1: entered promiscuous mode [ 508.353527][T12193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.426136][ T41] ------------[ cut here ]------------ [ 508.429241][T12193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.431694][ T41] WARNING: CPU: 0 PID: 41 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 508.431731][ T41] Modules linked in: [ 508.431747][ T41] CPU: 0 UID: 0 PID: 41 Comm: kworker/u8:2 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 508.468144][ T41] Tainted: [W]=WARN [ 508.472076][ T41] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 508.482278][ T41] Workqueue: netns cleanup_net [ 508.487101][ T41] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 508.492861][ T41] Code: 48 8d bb 30 0e 00 00 e8 05 0a bd fc 48 8b bb 30 0e 00 00 e8 c9 8a c9 fc 5b 41 5e 41 5f 5d e9 0e 8d b3 00 cc e8 58 4c a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 4a 4c a2 fc 90 0f 0b 90 4c 89 f7 e8 ce [ 508.512626][ T41] RSP: 0000:ffffc90000163c60 EFLAGS: 00010293 [ 508.518728][ T41] RAX: ffffffff84b5ad58 RBX: ffff88810a3a17c0 RCX: ffff888101555280 [ 508.526967][ T41] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a3a25c0 [ 508.535147][ T41] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 508.543243][ T41] R10: ffffc90000163be8 R11: 0001c90000163be8 R12: ffffffff86c8b7c0 [ 508.551332][ T41] R13: ffff88810a3a17e8 R14: ffff88810a3a25c0 R15: ffff88810a3a17c0 [ 508.559327][ T41] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 508.568398][ T41] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 508.575057][ T41] CR2: 0000563c26b69c10 CR3: 0000000006834000 CR4: 00000000003506f0 [ 508.583145][ T41] Call Trace: [ 508.586494][ T41] [ 508.589485][ T41] xfrm_net_exit+0x2d/0x60 [ 508.593981][ T41] ops_undo_list+0x27b/0x410 [ 508.598706][ T41] cleanup_net+0x2de/0x4d0 [ 508.603265][ T41] process_scheduled_works+0x4cb/0x9d0 [ 508.608821][ T41] worker_thread+0x582/0x770 [ 508.613497][ T41] kthread+0x489/0x510 [ 508.617600][ T41] ? finish_task_switch+0xad/0x2b0 [ 508.622810][ T41] ? __pfx_worker_thread+0x10/0x10 [ 508.628054][ T41] ? __pfx_kthread+0x10/0x10 [ 508.632743][ T41] ret_from_fork+0xda/0x150 [ 508.634151][T12324] loop2: detected capacity change from 0 to 1024 [ 508.637319][ T41] ? __pfx_kthread+0x10/0x10 [ 508.637347][ T41] ret_from_fork_asm+0x1a/0x30 [ 508.653128][ T41] [ 508.656155][ T41] ---[ end trace 0000000000000000 ]--- [ 508.677709][T12324] EXT4-fs: Ignoring removed i_version option [ 508.692203][T12324] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 508.713719][T12193] team0: Port device team_slave_0 added [ 508.730509][T12193] team0: Port device team_slave_1 added [ 508.814642][T12193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.821701][T12193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.847701][T12193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.875175][T12324] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2949: Invalid block bitmap block 0 in block_group 0 [ 508.879553][T12193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.895700][T12193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.921802][T12193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.269449][T12324] Quota error (device loop2): write_blk: dquota write failed [ 509.276998][T12324] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 509.878480][T12324] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2949: Failed to acquire dquot type 0 [ 510.068883][T12324] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2949: Freeing blocks not in datazone - block = 0, count = 4096 [ 510.088078][T12193] hsr_slave_0: entered promiscuous mode [ 510.098490][T12193] hsr_slave_1: entered promiscuous mode [ 510.115502][T12193] debugfs: 'hsr0' already exists in 'hsr' [ 510.121396][T12193] Cannot create hsr debugfs directory [ 510.906942][T12324] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2949: Invalid inode bitmap blk 0 in block_group 0 [ 510.928633][T12324] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 510.937911][ T50] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 510.947000][ T50] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 511.165528][T12324] EXT4-fs (loop2): 1 orphan inode deleted [ 511.200104][T12368] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2959'. [ 511.244030][T12324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.353003][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2962'. [ 511.509918][T12396] lo: left promiscuous mode [ 511.514530][T12396] lo: left allmulticast mode [ 511.519869][T12396] tunl0: left promiscuous mode [ 511.524835][T12396] tunl0: left allmulticast mode [ 511.530474][T12396] gre0: left promiscuous mode [ 511.535199][T12396] gre0: left allmulticast mode [ 511.540921][T12396] gretap0: left allmulticast mode [ 511.547154][T12396] erspan0: left promiscuous mode [ 511.552185][T12396] erspan0: left allmulticast mode [ 511.558038][T12396] ip_vti0: left promiscuous mode [ 511.563149][T12396] ip_vti0: left allmulticast mode [ 511.568736][T12396] ip6_vti0: left promiscuous mode [ 511.573810][T12396] ip6_vti0: left allmulticast mode [ 511.579738][T12396] sit0: left promiscuous mode [ 511.584478][T12396] sit0: left allmulticast mode [ 511.590403][T12396] ip6tnl0: left promiscuous mode [ 511.595399][T12396] ip6tnl0: left allmulticast mode [ 511.601142][T12396] ip6gre0: left promiscuous mode [ 511.606092][T12396] ip6gre0: left allmulticast mode [ 511.611896][T12396] syz_tun: left promiscuous mode [ 511.616907][T12396] syz_tun: left allmulticast mode [ 511.623367][T12396] ip6gretap0: left promiscuous mode [ 511.628607][T12396] ip6gretap0: left allmulticast mode [ 511.634866][T12396] bridge0: left promiscuous mode [ 511.639972][T12396] bridge0: left allmulticast mode [ 511.645779][T12396] vcan0: left promiscuous mode [ 511.650569][T12396] vcan0: left allmulticast mode [ 511.655901][T12396] bond0: left promiscuous mode [ 511.660692][T12396] bond_slave_0: left promiscuous mode [ 511.666267][T12396] bond_slave_1: left promiscuous mode [ 511.671862][T12396] macvlan1: left promiscuous mode [ 511.676977][T12396] bond0: left allmulticast mode [ 511.681962][T12396] bond_slave_0: left allmulticast mode [ 511.687445][T12396] bond_slave_1: left allmulticast mode [ 511.693007][T12396] macvlan1: left allmulticast mode [ 511.698952][T12396] team0: left promiscuous mode [ 511.703802][T12396] team_slave_0: left promiscuous mode [ 511.709421][T12396] team_slave_1: left promiscuous mode [ 511.714928][T12396] team0: left allmulticast mode [ 511.719808][T12396] team_slave_0: left allmulticast mode [ 511.725332][T12396] team_slave_1: left allmulticast mode [ 511.731292][T12396] dummy0: left promiscuous mode [ 511.736168][T12396] dummy0: left allmulticast mode [ 511.780949][T12396] nlmon0: left promiscuous mode [ 511.785864][T12396] nlmon0: left allmulticast mode [ 511.791442][T12396] caif0: left promiscuous mode [ 511.796226][T12396] caif0: left allmulticast mode [ 512.106361][T12193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 512.190452][T12193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 512.226363][T12193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 512.306220][T12193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 512.342358][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2968'. [ 512.457997][T12193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.468292][T12450] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2972'. [ 512.487659][T12193] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.520318][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.527508][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.563715][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.571084][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.593924][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2973'. [ 513.904301][T12193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.942673][T12488] tipc: Enabled bearer , priority 0 [ 513.966581][T12488] syzkaller0: entered promiscuous mode [ 513.972163][T12488] syzkaller0: entered allmulticast mode [ 513.996279][T12488] tipc: Resetting bearer [ 514.010495][T12487] tipc: Resetting bearer [ 514.027005][T12487] tipc: Disabling bearer [ 514.057202][T12506] loop3: detected capacity change from 0 to 1024 [ 514.114276][T12506] EXT4-fs: Ignoring removed i_version option [ 514.116428][T12193] veth0_vlan: entered promiscuous mode [ 514.144970][T12506] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 514.169949][T12193] veth1_vlan: entered promiscuous mode [ 514.211921][T12193] veth0_macvtap: entered promiscuous mode [ 514.232194][T12193] veth1_macvtap: entered promiscuous mode [ 514.232389][T12506] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2982: Invalid block bitmap block 0 in block_group 0 [ 514.253795][T12193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.269854][T12193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.293113][ T3479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.312920][ T3479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.319344][T12506] Quota error (device loop3): write_blk: dquota write failed [ 514.322973][ T3479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.329108][T12506] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 514.352713][T12506] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2982: Failed to acquire dquot type 0 [ 514.368901][ T3479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.445525][T12506] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.2982: Freeing blocks not in datazone - block = 0, count = 4096 [ 514.492926][T12506] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.2982: Invalid inode bitmap blk 0 in block_group 0 [ 514.550741][T12506] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 514.606011][ T3479] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 514.615140][ T3479] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 514.651208][T12506] EXT4-fs (loop3): 1 orphan inode deleted [ 514.672155][T12506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.743128][T12519] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2984'. [ 514.952871][T11886] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 514.960453][T11886] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 514.967999][T11886] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 515.024841][T11886] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 515.078735][T12526] fido_id[12526]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 515.368419][ T295] bridge_slave_1: left allmulticast mode [ 515.374352][ T295] bridge_slave_1: left promiscuous mode [ 515.380078][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.441805][ T295] bridge_slave_0: left allmulticast mode [ 515.447494][ T295] bridge_slave_0: left promiscuous mode [ 515.453274][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.867706][T12506] syz.3.2982 (12506) used greatest stack depth: 9432 bytes left [ 515.887839][ T295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.910359][ T295] bond_slave_0: left promiscuous mode [ 515.915907][ T295] bond_slave_0: left allmulticast mode [ 515.951056][ T295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.970910][ T295] bond_slave_1: left promiscuous mode [ 515.976387][ T295] bond_slave_1: left allmulticast mode [ 515.991538][ T295] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 516.021011][ T295] macvlan1: left promiscuous mode [ 516.026123][ T295] macvlan1: left allmulticast mode [ 516.044177][ T295] bond0 (unregistering): Released all slaves [ 516.072935][ T295] bond1 (unregistering): Released all slaves [ 516.131529][ T295] tipc: Left network mode [ 516.162744][ T295] hsr_slave_0: left promiscuous mode [ 516.192301][ T295] hsr_slave_1: left promiscuous mode [ 516.263099][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2992'. [ 516.275457][ T295] team_slave_1 (unregistering): left promiscuous mode [ 516.282302][ T295] team_slave_1 (unregistering): left allmulticast mode [ 516.301559][ T295] team0 (unregistering): Port device team_slave_1 removed [ 516.321255][ T295] team_slave_0 (unregistering): left promiscuous mode [ 516.328055][ T295] team_slave_0 (unregistering): left allmulticast mode [ 516.351482][ T295] team0 (unregistering): Port device team_slave_0 removed [ 516.409655][T12548] vlan2: entered promiscuous mode [ 516.414958][T12548] gretap0: entered promiscuous mode [ 516.697677][T11858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.743655][ T295] ------------[ cut here ]------------ [ 516.749159][ T295] WARNING: CPU: 1 PID: 295 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 516.759087][ T295] Modules linked in: [ 516.763305][ T295] CPU: 1 UID: 0 PID: 295 Comm: kworker/u8:5 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 516.765337][T12529] chnl_net:caif_netlink_parms(): no params data found [ 516.777425][ T295] Tainted: [W]=WARN [ 516.777434][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.777450][ T295] Workqueue: netns cleanup_net [ 516.803018][ T295] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 516.808604][ T295] Code: 48 8d bb 30 0e 00 00 e8 05 0a bd fc 48 8b bb 30 0e 00 00 e8 c9 8a c9 fc 5b 41 5e 41 5f 5d e9 0e 8d b3 00 cc e8 58 4c a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 4a 4c a2 fc 90 0f 0b 90 4c 89 f7 e8 ce [ 516.828486][ T295] RSP: 0018:ffffc9000126fc60 EFLAGS: 00010293 [ 516.834628][ T295] RAX: ffffffff84b5ad58 RBX: ffff88810a3a0000 RCX: ffff8881022fb180 [ 516.842674][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a3a0e00 [ 516.850705][ T295] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 516.858772][ T295] R10: ffffc9000126fbe8 R11: 0001c9000126fbe8 R12: ffffffff86c8b7c0 [ 516.866854][ T295] R13: ffff88810a3a0028 R14: ffff88810a3a0e00 R15: ffff88810a3a0000 [ 516.874937][ T295] FS: 0000000000000000(0000) GS:ffff8882aef44000(0000) knlGS:0000000000000000 [ 516.883943][ T295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.890704][ T295] CR2: 00007f303186a43c CR3: 0000000006834000 CR4: 00000000003506f0 [ 516.898732][ T295] Call Trace: [ 516.902085][ T295] [ 516.905034][ T295] xfrm_net_exit+0x2d/0x60 [ 516.909605][ T295] ops_undo_list+0x27b/0x410 [ 516.914297][ T295] cleanup_net+0x2de/0x4d0 [ 516.918785][ T295] process_scheduled_works+0x4cb/0x9d0 [ 516.924393][ T295] worker_thread+0x582/0x770 [ 516.929101][ T295] kthread+0x489/0x510 [ 516.933270][ T295] ? __pfx_worker_thread+0x10/0x10 [ 516.938508][ T295] ? __pfx_kthread+0x10/0x10 [ 516.943227][ T295] ret_from_fork+0xda/0x150 [ 516.947750][ T295] ? __pfx_kthread+0x10/0x10 [ 516.952508][ T295] ret_from_fork_asm+0x1a/0x30 [ 516.957367][ T295] [ 516.960393][ T295] ---[ end trace 0000000000000000 ]--- [ 517.199031][T12529] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.206297][T12529] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.355878][T12529] bridge_slave_0: entered allmulticast mode [ 517.400524][T12529] bridge_slave_0: entered promiscuous mode [ 517.407501][T12529] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.414699][T12529] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.421911][T12529] bridge_slave_1: entered allmulticast mode [ 517.428649][T12529] bridge_slave_1: entered promiscuous mode [ 517.533614][T12529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.563198][T12586] loop2: detected capacity change from 0 to 1024 [ 517.569998][T12586] EXT4-fs: Ignoring removed i_version option [ 517.582414][T12529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.662321][T12586] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 517.693171][T12529] team0: Port device team_slave_0 added [ 517.713694][T12586] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2997: Invalid block bitmap block 0 in block_group 0 [ 517.734099][T12529] team0: Port device team_slave_1 added [ 517.771685][T12529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.778711][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.804762][T12529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.839469][T12586] Quota error (device loop2): write_blk: dquota write failed [ 517.846978][T12586] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 517.890974][T12586] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2997: Failed to acquire dquot type 0 [ 518.370516][T12586] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.2997: Freeing blocks not in datazone - block = 0, count = 4096 [ 518.420947][T12529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.427960][T12529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.454031][T12529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.517437][T12586] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2997: Invalid inode bitmap blk 0 in block_group 0 [ 518.667746][T12586] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 518.767833][T12586] EXT4-fs (loop2): 1 orphan inode deleted [ 518.943894][T12529] hsr_slave_0: entered promiscuous mode [ 518.949968][T12529] hsr_slave_1: entered promiscuous mode [ 519.024865][ T1602] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 519.033962][ T1602] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 519.073969][T12586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.126455][T12529] debugfs: 'hsr0' already exists in 'hsr' [ 519.132320][T12529] Cannot create hsr debugfs directory [ 519.757010][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3007'. [ 519.852785][T12529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 519.883016][T12529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 519.990561][T12529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 520.012892][T12529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 520.133578][T12529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.206196][T12529] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.271279][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.278441][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.311944][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.319034][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.556887][T12529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.677570][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.012883][T12529] veth0_vlan: entered promiscuous mode [ 521.053472][T12529] veth1_vlan: entered promiscuous mode [ 521.162756][T12529] veth0_macvtap: entered promiscuous mode [ 521.182355][T12529] veth1_macvtap: entered promiscuous mode [ 521.225853][T12529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.262436][T12529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.296291][ T1602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.322444][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 521.335307][ T1602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.362868][ T23] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 521.362977][ T1602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.442668][ T1602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.905590][ T41] bridge_slave_1: left allmulticast mode [ 521.911332][ T41] bridge_slave_1: left promiscuous mode [ 521.917118][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.982222][ T41] bridge_slave_0: left allmulticast mode [ 521.987900][ T41] bridge_slave_0: left promiscuous mode [ 521.993649][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.032117][ T41] gretap1: left allmulticast mode [ 522.037198][ T41] gretap1: left promiscuous mode [ 522.042272][ T41] bridge1: port 2(gretap1) entered disabled state [ 522.064269][ T41] vlan2: left allmulticast mode [ 522.069221][ T41] bridge0: left allmulticast mode [ 522.074313][ T41] vlan2: left promiscuous mode [ 522.079094][ T41] bridge0: left promiscuous mode [ 522.084480][ T41] bridge1: port 1(vlan2) entered disabled state [ 522.372819][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.383390][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.401818][ T41] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 522.422094][ T41] bond0 (unregistering): Released all slaves [ 522.478503][ T41] tipc: Left network mode [ 522.543633][ T41] hsr_slave_0: left promiscuous mode [ 522.578087][ T41] hsr_slave_1: left promiscuous mode [ 522.634552][T12757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3019'. [ 522.965565][ T41] team0 (unregistering): Port device team_slave_1 removed [ 523.051952][ T41] team0 (unregistering): Port device team_slave_0 removed [ 523.297136][T12729] chnl_net:caif_netlink_parms(): no params data found [ 523.524741][T12729] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.531921][T12729] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.564272][T12729] bridge_slave_0: entered allmulticast mode [ 523.581350][T12729] bridge_slave_0: entered promiscuous mode [ 523.599060][T12729] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.606225][T12729] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.634099][T12729] bridge_slave_1: entered allmulticast mode [ 523.640932][T12729] bridge_slave_1: entered promiscuous mode [ 523.694311][T12729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.715011][T12729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.732267][ T41] IPVS: stop unused estimator thread 0... [ 523.842740][T12729] team0: Port device team_slave_0 added [ 523.849497][T12729] team0: Port device team_slave_1 added [ 523.857192][ T41] ------------[ cut here ]------------ [ 523.862787][ T41] WARNING: CPU: 0 PID: 41 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 523.872336][ T41] Modules linked in: [ 523.876309][ T41] CPU: 0 UID: 0 PID: 41 Comm: kworker/u8:2 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 523.890366][ T41] Tainted: [W]=WARN [ 523.894281][ T41] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 523.904403][ T41] Workqueue: netns cleanup_net [ 523.909208][ T41] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 523.914857][ T41] Code: 48 8d bb 30 0e 00 00 e8 05 0a bd fc 48 8b bb 30 0e 00 00 e8 c9 8a c9 fc 5b 41 5e 41 5f 5d e9 0e 8d b3 00 cc e8 58 4c a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 4a 4c a2 fc 90 0f 0b 90 4c 89 f7 e8 ce [ 523.934542][ T41] RSP: 0018:ffffc90000163c60 EFLAGS: 00010293 [ 523.940637][ T41] RAX: ffffffff84b5ad58 RBX: ffff888118938000 RCX: ffff888101555280 [ 523.948676][ T41] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888118938e00 [ 523.956681][ T41] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 523.964785][ T41] R10: ffffc90000163be8 R11: 0001c90000163be8 R12: ffffffff86c8b7c0 [ 523.972803][ T41] R13: ffff888118938028 R14: ffff888118938e00 R15: ffff888118938000 [ 523.980856][ T41] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 523.989831][ T41] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.996524][ T41] CR2: 0000200000fdc030 CR3: 0000000103c62000 CR4: 00000000003506f0 [ 524.004684][ T41] Call Trace: [ 524.008035][ T41] [ 524.011010][ T41] xfrm_net_exit+0x2d/0x60 [ 524.015537][ T41] ops_undo_list+0x27b/0x410 [ 524.020195][ T41] cleanup_net+0x2de/0x4d0 [ 524.024712][ T41] process_scheduled_works+0x4cb/0x9d0 [ 524.030210][ T41] worker_thread+0x582/0x770 [ 524.034955][ T41] kthread+0x489/0x510 [ 524.039061][ T41] ? finish_task_switch+0xad/0x2b0 [ 524.044274][ T41] ? __pfx_worker_thread+0x10/0x10 [ 524.049449][ T41] ? __pfx_kthread+0x10/0x10 [ 524.054095][ T41] ret_from_fork+0xda/0x150 [ 524.058694][ T41] ? __pfx_kthread+0x10/0x10 [ 524.063323][ T41] ret_from_fork_asm+0x1a/0x30 [ 524.068148][ T41] [ 524.071289][ T41] ---[ end trace 0000000000000000 ]--- [ 524.096233][T12729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.103252][T12729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.129298][T12729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.494001][T11858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.522852][T12729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.529893][T12729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.555903][T12729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.590196][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3026'. [ 524.754073][T12729] hsr_slave_0: entered promiscuous mode [ 524.771966][T12729] hsr_slave_1: entered promiscuous mode [ 525.144593][T12792] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3029'. [ 525.328072][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3031'. [ 525.358739][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.366092][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.466418][T12797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.476065][T12797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.516904][T12797] vlan2: left promiscuous mode [ 525.521801][T12797] gretap0: left promiscuous mode [ 525.536015][ T3480] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.545005][ T3480] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.933429][T12810] loop1: detected capacity change from 0 to 1024 [ 525.966017][ T3480] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.977088][T12810] EXT4-fs: Ignoring removed i_version option [ 525.983787][ T3480] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.996218][T12810] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 526.019375][T12810] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3035: Invalid block bitmap block 0 in block_group 0 [ 526.033996][T12810] Quota error (device loop1): write_blk: dquota write failed [ 526.041491][T12810] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 526.051859][T12810] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3035: Failed to acquire dquot type 0 [ 526.063624][T12810] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.3035: Freeing blocks not in datazone - block = 0, count = 4096 [ 526.081464][T12810] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3035: Invalid inode bitmap blk 0 in block_group 0 [ 526.101199][T12729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 526.109154][ T3480] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 526.118463][ T3480] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 526.120799][T12729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 526.138130][T12810] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 526.149417][T12729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 526.157285][T12810] EXT4-fs (loop1): 1 orphan inode deleted [ 526.158701][T12729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 526.190600][T12810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.276307][T12729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.290342][T12729] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.307162][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.314354][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.337533][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.344707][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.268695][T12838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.302827][T12839] tipc: Started in network mode [ 527.307728][T12839] tipc: Node identity f65e77e45247, cluster identity 4711 [ 527.315102][T12839] tipc: Enabled bearer , priority 0 [ 527.328784][T12838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.389007][T12840] syzkaller0: entered promiscuous mode [ 527.394717][T12840] syzkaller0: entered allmulticast mode [ 527.401660][T12838] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3041'. [ 527.491113][T12837] tipc: Resetting bearer [ 527.513900][T12837] tipc: Disabling bearer [ 527.637787][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3042'. [ 527.655847][T12729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.775705][T12729] veth0_vlan: entered promiscuous mode [ 527.793239][T12729] veth1_vlan: entered promiscuous mode [ 527.824811][T12729] veth0_macvtap: entered promiscuous mode [ 527.836948][T12729] veth1_macvtap: entered promiscuous mode [ 527.872695][T12729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.899047][T12729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.917331][T12860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3047'. [ 527.926746][ T3480] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.947708][ T3480] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.979612][ T3480] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.999049][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.204593][T12873] tipc: Started in network mode [ 528.209568][T12873] tipc: Node identity bad63ea92f2f, cluster identity 4711 [ 528.216923][T12873] tipc: Enabled bearer , priority 0 [ 528.257847][T12874] syzkaller0: entered promiscuous mode [ 528.263439][T12874] syzkaller0: entered allmulticast mode [ 528.420997][T12872] tipc: Resetting bearer [ 528.432180][T12872] tipc: Disabling bearer [ 528.675901][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3053'. [ 531.107317][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.247564][T12928] loop0: detected capacity change from 0 to 512 [ 531.623838][T12928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.636633][T12928] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 532.111241][T12942] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.118428][T12942] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.253226][T12942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.262602][T12942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.319159][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.338328][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.379865][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.440533][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.913402][T12193] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.127022][T12974] loop4: detected capacity change from 0 to 1024 [ 533.167016][T12974] EXT4-fs: Ignoring removed i_version option [ 533.199517][T12974] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 533.231254][T12974] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3082: Invalid block bitmap block 0 in block_group 0 [ 533.251255][T12974] Quota error (device loop4): write_blk: dquota write failed [ 533.258693][T12974] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 533.270106][T12974] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3082: Failed to acquire dquot type 0 [ 533.282937][T12974] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.3082: Freeing blocks not in datazone - block = 0, count = 4096 [ 533.297702][T12974] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3082: Invalid inode bitmap blk 0 in block_group 0 [ 533.310736][ T3480] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 533.312086][T12974] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 533.319811][ T3480] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 533.328714][T12974] EXT4-fs (loop4): 1 orphan inode deleted [ 533.346138][T12974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.395559][T12981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=12981 comm=syz.3.3087 [ 533.565150][T12988] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.572558][T12988] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.609204][T12988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 533.618982][T12988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 533.691269][T12988] vlan2: left promiscuous mode [ 533.696115][T12988] gretap0: left promiscuous mode [ 533.711080][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.721397][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.737898][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.755212][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.872698][T12994] loop0: detected capacity change from 0 to 512 [ 533.906137][T12994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.918837][T12994] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 534.717612][T13003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.798525][T13003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.983861][T13003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3095'. [ 535.473532][T12193] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.557926][T13014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=13014 comm=syz.0.3099 [ 537.179878][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3110'. [ 537.450616][T13063] tipc: Started in network mode [ 537.455646][T13063] tipc: Node identity be1e1c7166e9, cluster identity 4711 [ 537.462973][T13063] tipc: Enabled bearer , priority 0 [ 537.522997][T13063] tipc: Resetting bearer [ 537.530002][T13062] tipc: Disabling bearer [ 538.606363][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3123'. [ 538.769874][T13079] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3124'. [ 538.963568][T13090] loop1: detected capacity change from 0 to 1024 [ 538.970728][T13090] EXT4-fs: Ignoring removed i_version option [ 538.980575][T13090] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 539.024958][T13090] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3126: Invalid block bitmap block 0 in block_group 0 [ 539.061360][T13090] Quota error (device loop1): write_blk: dquota write failed [ 539.068775][T13090] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 539.177002][T13090] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3126: Failed to acquire dquot type 0 [ 539.264972][T13090] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.3126: Freeing blocks not in datazone - block = 0, count = 4096 [ 539.302070][T13100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4096 sclass=netlink_route_socket pid=13100 comm=syz.3.3133 [ 539.349803][T13090] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.3126: Invalid inode bitmap blk 0 in block_group 0 [ 539.362635][ T3479] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 539.371630][ T3479] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 539.373543][T13103] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3134'. [ 539.427169][T13105] tipc: Enabled bearer , priority 0 [ 539.450312][T13105] syzkaller0: entered promiscuous mode [ 539.455884][T13105] syzkaller0: entered allmulticast mode [ 539.462615][T13090] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 539.473193][T13105] tipc: Resetting bearer [ 539.479723][T13104] tipc: Resetting bearer [ 539.501887][T13104] tipc: Disabling bearer [ 539.522214][T13090] EXT4-fs (loop1): 1 orphan inode deleted [ 539.528299][T13090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.616582][T13112] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3138'. [ 540.685244][ T29] audit: type=1400 audit(1755238985.179:537): avc: denied { mount } for pid=13124 comm="syz.3.3142" name="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 540.708061][ T29] audit: type=1400 audit(1755238985.189:538): avc: denied { search } for pid=13124 comm="syz.3.3142" name="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 540.730365][ T29] audit: type=1400 audit(1755238985.189:539): avc: denied { setattr } for pid=13124 comm="syz.3.3142" name="/" dev="configfs" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 541.109322][T12529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.230063][T13134] loop0: detected capacity change from 0 to 1024 [ 541.291169][T13134] EXT4-fs: Ignoring removed i_version option [ 541.323543][T13134] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 541.394630][T13134] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.3145: Invalid block bitmap block 0 in block_group 0 [ 541.473196][T13134] Quota error (device loop0): write_blk: dquota write failed [ 541.480680][T13134] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 541.572382][T13134] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3145: Failed to acquire dquot type 0 [ 541.700104][T13134] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.3145: Freeing blocks not in datazone - block = 0, count = 4096 [ 541.718776][T13134] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.3145: Invalid inode bitmap blk 0 in block_group 0 [ 541.732128][ T50] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-8 [ 541.741120][ T50] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 541.887088][T13134] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 541.911420][T13134] EXT4-fs (loop0): 1 orphan inode deleted [ 542.722356][T13134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.952931][T13161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.014726][T13164] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3156'. [ 543.022874][T13161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.865883][T13209] hub 8-0:1.0: USB hub found [ 545.943470][T13209] hub 8-0:1.0: 8 ports detected [ 546.843673][T13220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3174'. [ 546.906122][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.046560][T13234] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.053795][T13234] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.091647][T13234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.101329][T13234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.137674][ T295] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.160661][ T295] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.184526][ T295] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.202943][ T295] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.858763][T12193] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.106709][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3186'. [ 549.251570][T13258] tipc: Started in network mode [ 549.256543][T13258] tipc: Node identity ae766f996233, cluster identity 4711 [ 549.263868][T13258] tipc: Enabled bearer , priority 0 [ 549.294771][T13257] tipc: Disabling bearer [ 549.562012][T13264] tipc: Enabled bearer , priority 0 [ 549.586447][T13264] syzkaller0: entered promiscuous mode [ 549.592077][T13264] syzkaller0: entered allmulticast mode [ 549.667108][T13264] tipc: Resetting bearer [ 549.688503][T13263] tipc: Resetting bearer [ 549.714684][T13263] tipc: Disabling bearer [ 549.883935][T13277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.892549][T13277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.718031][T13293] loop4: detected capacity change from 0 to 512 [ 550.749753][T13293] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.762549][T13293] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 551.501055][T12529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.819587][T13325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3210'. [ 551.840543][T13325] 8021q: VLANs not supported on vcan0 [ 552.537627][T13332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.551084][T13332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.589803][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3212'. [ 552.611164][T13332] vlan2: entered promiscuous mode [ 552.616228][T13332] batadv0: entered promiscuous mode [ 552.759685][T13338] hub 8-0:1.0: USB hub found [ 552.806320][T13338] hub 8-0:1.0: 8 ports detected [ 553.027434][T13348] loop0: detected capacity change from 0 to 512 [ 553.049338][T13348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.061912][T13348] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 553.433163][ T29] audit: type=1400 audit(1755238997.959:540): avc: denied { setopt } for pid=13353 comm="syz.1.3220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 553.812412][T12193] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.843702][T13366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3224'. [ 553.911022][T13368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3225'. [ 553.920038][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3225'. [ 554.181375][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 554.201738][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 555.300134][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3236'. [ 555.432219][T13404] syzkaller0: entered promiscuous mode [ 555.437746][T13404] syzkaller0: entered allmulticast mode [ 556.028823][T13423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.062338][T13424] hub 8-0:1.0: USB hub found [ 556.073411][T13424] hub 8-0:1.0: 8 ports detected [ 556.079487][T13423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.223030][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3246'. [ 556.255690][T13426] vlan3: entered promiscuous mode [ 556.260806][T13426] bond0: entered promiscuous mode [ 556.265976][T13426] bond_slave_0: entered promiscuous mode [ 556.271780][T13426] bond_slave_1: entered promiscuous mode [ 556.805648][T13433] loop3: detected capacity change from 0 to 512 [ 556.833594][T13433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 556.866448][T13435] tipc: Enabled bearer , priority 0 [ 556.881543][T13433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.902105][T13435] syzkaller0: entered promiscuous mode [ 556.907656][T13435] syzkaller0: entered allmulticast mode [ 556.941016][T13433] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.954199][T13435] tipc: Resetting bearer [ 556.961832][T13434] tipc: Resetting bearer [ 556.971315][T13434] tipc: Disabling bearer [ 557.025520][ T29] audit: type=1400 audit(1755239001.549:541): avc: denied { read write } for pid=13432 comm="syz.3.3249" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 557.048293][ T29] audit: type=1400 audit(1755239001.549:542): avc: denied { open } for pid=13432 comm="syz.3.3249" path="/41/file1/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 557.241840][ T29] audit: type=1400 audit(1755239001.749:543): avc: denied { watch } for pid=13432 comm="syz.3.3249" path="/41/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 557.277142][T12729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.653184][T13465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3260'. [ 560.006847][T13485] tipc: Enabled bearer , priority 0 [ 560.030700][T13485] syzkaller0: entered promiscuous mode [ 560.036277][T13485] syzkaller0: entered allmulticast mode [ 560.045553][T13485] tipc: Resetting bearer [ 560.052267][T13483] tipc: Resetting bearer [ 560.058818][T13483] tipc: Disabling bearer [ 560.482540][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3268'. [ 560.675795][ T29] audit: type=1400 audit(1755239005.199:544): avc: denied { map } for pid=13497 comm="syz.1.3269" path="socket:[50317]" dev="sockfs" ino=50317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 560.699621][ T29] audit: type=1400 audit(1755239005.199:545): avc: denied { accept } for pid=13497 comm="syz.1.3269" path="socket:[50317]" dev="sockfs" ino=50317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 561.257304][ T29] audit: type=1400 audit(1755239005.779:546): avc: denied { read } for pid=13508 comm="syz.0.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 561.292833][T13511] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3273'. [ 561.840716][T13527] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3280'. [ 562.860931][T13529] hub 8-0:1.0: USB hub found [ 562.871830][T13529] hub 8-0:1.0: 8 ports detected [ 562.921476][T13541] loop4: detected capacity change from 0 to 512 [ 562.948288][T13541] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3284: corrupted in-inode xattr: invalid ea_ino [ 563.020503][T13541] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3284: couldn't read orphan inode 15 (err -117) [ 563.060527][T13541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.112786][T13541] netlink: 'syz.4.3284': attribute type 12 has an invalid length. [ 563.635162][ T41] bridge_slave_1: left allmulticast mode [ 563.640955][ T41] bridge_slave_1: left promiscuous mode [ 563.646756][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.764682][T12529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.812929][T13568] hub 8-0:1.0: USB hub found [ 563.831411][ T41] bridge_slave_0: left allmulticast mode [ 563.837204][ T41] bridge_slave_0: left promiscuous mode [ 563.841945][T13568] hub 8-0:1.0: 8 ports detected [ 563.842903][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.878021][T13575] loop4: detected capacity change from 0 to 512 [ 563.896212][T13575] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3291: corrupted in-inode xattr: invalid ea_ino [ 563.940283][T13575] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3291: couldn't read orphan inode 15 (err -117) [ 563.959535][T13575] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.273178][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.285569][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.303528][ T41] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 564.318685][ T41] bond0 (unregistering): Released all slaves [ 564.333997][T13577] netlink: 'syz.4.3291': attribute type 12 has an invalid length. [ 564.482224][T12529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.493946][ T41] tipc: Left network mode [ 564.503235][ T41] hsr_slave_0: left promiscuous mode [ 564.541750][ T41] hsr_slave_1: left promiscuous mode [ 564.561433][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.586864][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.700996][ T41] team0 (unregistering): Port device team_slave_1 removed [ 564.728720][ T41] team0 (unregistering): Port device team_slave_0 removed [ 565.098091][ T41] ------------[ cut here ]------------ [ 565.103709][ T41] WARNING: CPU: 0 PID: 41 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x179/0x1f0 [ 565.113264][ T41] Modules linked in: [ 565.117184][ T41] CPU: 0 UID: 0 PID: 41 Comm: kworker/u8:2 Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 565.131246][ T41] Tainted: [W]=WARN [ 565.135105][ T41] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.145204][ T41] Workqueue: netns cleanup_net [ 565.150075][ T41] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 565.155706][ T41] Code: 48 8d bb 30 0e 00 00 e8 05 0a bd fc 48 8b bb 30 0e 00 00 e8 c9 8a c9 fc 5b 41 5e 41 5f 5d e9 0e 8d b3 00 cc e8 58 4c a2 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 4a 4c a2 fc 90 0f 0b 90 4c 89 f7 e8 ce [ 565.176115][ T41] RSP: 0018:ffffc90000163c60 EFLAGS: 00010293 [ 565.182258][ T41] RAX: ffffffff84b5ad58 RBX: ffff88810a3a2f80 RCX: ffff888101555280 [ 565.190244][ T41] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a3a3d80 [ 565.198376][ T41] RBP: ffffffff86c8b7a0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 565.206423][ T41] R10: ffffc90000163be8 R11: 0001c90000163be8 R12: ffffffff86c8b7c0 [ 565.214464][ T41] R13: ffff88810a3a2fa8 R14: ffff88810a3a3d80 R15: ffff88810a3a2f80 [ 565.222649][ T41] FS: 0000000000000000(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 565.231629][ T41] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 565.238279][ T41] CR2: 000020000051c030 CR3: 0000000108a34000 CR4: 00000000003506f0 [ 565.246370][ T41] Call Trace: [ 565.249666][ T41] [ 565.252631][ T41] xfrm_net_exit+0x2d/0x60 [ 565.257075][ T41] ops_undo_list+0x27b/0x410 [ 565.261736][ T41] cleanup_net+0x2de/0x4d0 [ 565.266171][ T41] process_scheduled_works+0x4cb/0x9d0 [ 565.271711][ T41] worker_thread+0x582/0x770 [ 565.276387][ T41] kthread+0x489/0x510 [ 565.280515][ T41] ? finish_task_switch+0xad/0x2b0 [ 565.285745][ T41] ? __pfx_worker_thread+0x10/0x10 [ 565.290916][ T41] ? __pfx_kthread+0x10/0x10 [ 565.295569][ T41] ret_from_fork+0xda/0x150 [ 565.300113][ T41] ? __pfx_kthread+0x10/0x10 [ 565.304772][ T41] ret_from_fork_asm+0x1a/0x30 [ 565.309549][ T41] [ 565.312613][ T41] ---[ end trace 0000000000000000 ]--- [ 565.320709][T13569] chnl_net:caif_netlink_parms(): no params data found [ 565.357950][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.365106][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.372496][T13569] bridge_slave_0: entered allmulticast mode [ 565.379134][T13569] bridge_slave_0: entered promiscuous mode [ 565.386146][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.393274][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.400427][T13569] bridge_slave_1: entered allmulticast mode [ 565.407129][T13569] bridge_slave_1: entered promiscuous mode [ 565.437621][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.462173][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.492608][T13569] team0: Port device team_slave_0 added [ 565.499273][T13569] team0: Port device team_slave_1 added [ 565.536425][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.543432][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.569486][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.658225][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.665292][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.691228][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.742299][T13569] hsr_slave_0: entered promiscuous mode [ 565.751157][T13569] hsr_slave_1: entered promiscuous mode [ 565.774860][T13569] debugfs: 'hsr0' already exists in 'hsr' [ 565.780641][T13569] Cannot create hsr debugfs directory [ 566.096911][T13611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3298'. [ 566.271685][T13615] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3300'. [ 566.302480][T13615] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3300'. [ 567.046384][T13631] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3305'. [ 567.081771][T13631] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3305'. [ 567.156677][T13569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 567.181964][T13569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 567.207770][T13569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 567.235426][T13569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 567.255589][ T29] audit: type=1400 audit(1755239011.779:547): avc: denied { mounton } for pid=13634 comm="syz.4.3307" path="/47/bus" dev="tmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 567.327938][T13644] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3308'. [ 567.382775][ T29] audit: type=1400 audit(1755239011.909:548): avc: denied { unmount } for pid=12529 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 567.402168][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.451124][T13650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3311'. [ 567.453091][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.494737][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.501887][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.539155][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.546270][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.612733][T13569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 567.628643][T13657] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3314'. [ 567.712903][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.983996][T13569] veth0_vlan: entered promiscuous mode [ 568.042633][T13569] veth1_vlan: entered promiscuous mode [ 568.175424][T13569] veth0_macvtap: entered promiscuous mode [ 568.249071][T13569] veth1_macvtap: entered promiscuous mode [ 568.353725][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.372566][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.384699][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.413325][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.444666][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.465382][T13678] tipc: Started in network mode [ 568.470379][T13678] tipc: Node identity 468b66646c, cluster identity 4711 [ 568.477551][T13678] tipc: Enabled bearer , priority 0 [ 568.504324][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.522601][T13680] syzkaller0: entered promiscuous mode [ 568.528242][T13680] syzkaller0: entered allmulticast mode [ 568.558776][T13678] tipc: Resetting bearer [ 568.601600][T13677] tipc: Resetting bearer [ 568.608834][T13677] tipc: Disabling bearer [ 568.742212][T13682] loop1: detected capacity change from 0 to 512 [ 568.838712][T13682] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.3318: corrupted in-inode xattr: invalid ea_ino [ 568.972580][T13682] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3318: couldn't read orphan inode 15 (err -117) [ 569.092142][T13682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.348608][T13682] netlink: 'syz.1.3318': attribute type 12 has an invalid length. [ 569.507130][ T29] audit: type=1400 audit(1755239014.019:549): avc: denied { mounton } for pid=13681 comm="syz.1.3318" path="/1/file0/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 569.746297][T13716] loop0: detected capacity change from 0 to 512 [ 569.783377][T13716] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3330: corrupted in-inode xattr: invalid ea_ino [ 569.801201][T13716] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3330: couldn't read orphan inode 15 (err -117) [ 569.837532][T13720] loop4: detected capacity change from 0 to 512 [ 569.850180][T13716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.871647][T13716] netlink: 'syz.0.3330': attribute type 12 has an invalid length. [ 569.887439][T13720] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3331: corrupted in-inode xattr: invalid ea_ino [ 569.922055][T13720] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3331: couldn't read orphan inode 15 (err -117) [ 569.930123][T13569] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 569.935341][T13720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.983008][ T29] audit: type=1400 audit(1755239014.509:550): avc: denied { remove_name } for pid=13569 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 569.983173][T13569] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 570.018331][ T29] audit: type=1400 audit(1755239014.509:551): avc: denied { unlink } for pid=13569 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 570.043453][T13569] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 570.097044][T13720] netlink: 'syz.4.3331': attribute type 12 has an invalid length. [ 570.159982][T13725] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3334'. [ 570.210846][T13726] loop4: detected capacity change from 512 to 64 [ 570.228908][ T29] audit: type=1400 audit(1755239014.749:552): avc: denied { connect } for pid=13727 comm="syz.2.3335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 570.251209][T12193] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.290954][ T3390] IPVS: starting estimator thread 0... [ 570.349870][T12529] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 570.380932][T13731] IPVS: using max 2832 ests per chain, 141600 per kthread [ 570.410118][T13738] loop2: detected capacity change from 0 to 512 [ 570.423826][T13738] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3340: corrupted in-inode xattr: invalid ea_ino [ 570.424519][T12529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.460140][T13738] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3340: couldn't read orphan inode 15 (err -117) [ 570.477243][T13738] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.680518][T13745] loop3: detected capacity change from 0 to 512 [ 570.765275][T13745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.796078][T13745] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 570.806970][T11858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.882103][ T41] bridge_slave_1: left allmulticast mode [ 570.887959][ T41] bridge_slave_1: left promiscuous mode [ 570.893666][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.924015][ T41] bridge_slave_0: left allmulticast mode [ 570.929710][ T41] bridge_slave_0: left promiscuous mode [ 570.935468][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.153603][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.171203][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.190458][ T41] bond0 (unregistering): Released all slaves [ 571.242528][ T41] tipc: Left network mode [ 571.289860][ T41] hsr_slave_0: left promiscuous mode [ 571.296545][ T41] hsr_slave_1: left promiscuous mode [ 571.303694][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.311526][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.402754][ T41] team0 (unregistering): Port device team_slave_1 removed [ 571.437458][ T41] team0 (unregistering): Port device team_slave_0 removed [ 571.663462][T13746] chnl_net:caif_netlink_parms(): no params data found [ 571.765510][T13746] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.772697][T13746] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.811544][T13746] bridge_slave_0: entered allmulticast mode [ 571.828549][T13746] bridge_slave_0: entered promiscuous mode [ 571.852912][T13746] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.860026][T13746] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.873324][T13569] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.911876][T13746] bridge_slave_1: entered allmulticast mode [ 571.931315][T13746] bridge_slave_1: entered promiscuous mode [ 571.983044][T13746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.018191][T13746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.084887][T13746] team0: Port device team_slave_0 added [ 572.117036][T13746] team0: Port device team_slave_1 added [ 572.261848][T13746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.268950][T13746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.295037][T13746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.342762][T13746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.349819][T13746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.361767][T13780] loop0: detected capacity change from 0 to 512 [ 572.375807][T13746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.447597][T13780] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3350: corrupted in-inode xattr: invalid ea_ino [ 572.462601][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.469273][T13780] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3350: couldn't read orphan inode 15 (err -117) [ 572.485403][T13780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.523494][T13746] hsr_slave_0: entered promiscuous mode [ 572.540102][T13746] hsr_slave_1: entered promiscuous mode [ 572.552143][T13746] debugfs: 'hsr0' already exists in 'hsr' [ 572.557899][T13746] Cannot create hsr debugfs directory [ 572.590989][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.654725][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.670871][T13780] loop0: detected capacity change from 512 to 64 [ 572.705691][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.770344][T12193] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.894594][T13776] chnl_net:caif_netlink_parms(): no params data found [ 572.918745][ T41] bridge_slave_1: left allmulticast mode [ 572.924561][ T41] bridge_slave_1: left promiscuous mode [ 572.930362][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.952374][ T41] bridge_slave_0: left allmulticast mode [ 572.958149][ T41] bridge_slave_0: left promiscuous mode [ 572.963982][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.005765][T13798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3353'. [ 573.093322][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.104447][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.114833][ T41] bond0 (unregistering): Released all slaves [ 573.406572][ T41] tipc: Left network mode [ 573.414270][T13776] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.421535][T13776] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.465830][T13776] bridge_slave_0: entered allmulticast mode [ 573.481381][T13776] bridge_slave_0: entered promiscuous mode [ 573.500699][ T41] hsr_slave_0: left promiscuous mode [ 573.511527][ T41] hsr_slave_1: left promiscuous mode [ 573.533279][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.540850][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.578025][T13812] loop2: detected capacity change from 0 to 512 [ 573.591438][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.598880][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.618815][T13812] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3357: corrupted in-inode xattr: invalid ea_ino [ 573.660072][ T41] veth1_macvtap: left promiscuous mode [ 573.665797][T13812] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3357: couldn't read orphan inode 15 (err -117) [ 573.685008][ T41] veth0_macvtap: left promiscuous mode [ 573.696898][ T41] veth1_vlan: left promiscuous mode [ 573.706151][T13812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.752221][ T41] veth0_vlan: left promiscuous mode [ 573.938900][ T41] team0 (unregistering): Port device team_slave_1 removed [ 573.968824][ T41] team0 (unregistering): Port device team_slave_0 removed [ 574.021811][T13746] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 574.039472][T13746] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 574.053085][T13776] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.060171][T13776] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.076055][T13776] bridge_slave_1: entered allmulticast mode [ 574.083726][T13776] bridge_slave_1: entered promiscuous mode [ 574.090018][T13812] netlink: 'syz.2.3357': attribute type 12 has an invalid length. [ 574.109354][T13746] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 574.130788][T13776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.140232][T13746] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 574.166911][T13776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.205345][T11858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.216302][T12729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.236761][T13776] team0: Port device team_slave_0 added [ 574.243514][T13776] team0: Port device team_slave_1 added [ 574.270324][T13776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.277371][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.303442][T13776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.325828][T13776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.332873][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.336710][T13833] loop2: detected capacity change from 0 to 512 [ 574.358935][T13776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.393828][T13776] hsr_slave_0: entered promiscuous mode [ 574.400259][T13776] hsr_slave_1: entered promiscuous mode [ 574.436202][T13776] debugfs: 'hsr0' already exists in 'hsr' [ 574.442418][T13776] Cannot create hsr debugfs directory [ 574.535474][ T2993] udevd[2993]: worker [7236] terminated by signal 33 (Unknown signal 33) [ 574.571053][T13833] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3362: corrupted in-inode xattr: invalid ea_ino [ 574.586457][ T2993] udevd[2993]: worker [7236] failed while handling '/devices/virtual/block/loop2' [ 574.608369][T13746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.639928][T13833] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3362: couldn't read orphan inode 15 (err -117) [ 574.713437][T13746] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.753811][T13833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.763841][ T29] audit: type=1400 audit(1755239019.069:553): avc: denied { map } for pid=13834 comm="syz.3.3363" path="socket:[52836]" dev="sockfs" ino=52836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 574.777784][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.789497][ T29] audit: type=1400 audit(1755239019.069:554): avc: denied { read } for pid=13834 comm="syz.3.3363" path="socket:[52836]" dev="sockfs" ino=52836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 574.796518][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.848442][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.855536][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.858495][T12221] IPVS: starting estimator thread 0... [ 574.888061][T11858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.901869][T13746] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 574.912287][T13746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.953274][T13847] loop2: detected capacity change from 0 to 512 [ 574.970936][T13845] IPVS: using max 2736 ests per chain, 136800 per kthread [ 574.996132][T13847] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3367: corrupted in-inode xattr: invalid ea_ino [ 575.029849][T13847] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3367: couldn't read orphan inode 15 (err -117) [ 575.060095][T13854] loop3: detected capacity change from 0 to 512 [ 575.067526][T13776] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 575.081481][T13847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.097619][T13776] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 575.100907][T13854] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.3369: corrupted in-inode xattr: invalid ea_ino [ 575.125588][T13776] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 575.135387][T13776] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 575.142726][T13854] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3369: couldn't read orphan inode 15 (err -117) [ 575.155779][T13854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.190257][T13746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.197698][T13847] netlink: 'syz.2.3367': attribute type 12 has an invalid length. [ 575.214590][T13854] netlink: 'syz.3.3369': attribute type 12 has an invalid length. [ 575.224326][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3373'. [ 575.261235][T13847] loop2: detected capacity change from 512 to 64 [ 575.271183][T13854] loop3: detected capacity change from 512 to 64 [ 575.274231][T13776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.297592][T13776] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.308518][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.315678][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.331290][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.338469][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.361066][T11858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.370447][T12729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.546105][T13912] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3384'. [ 575.559772][T13746] veth0_vlan: entered promiscuous mode [ 575.575479][T13776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.589969][T13914] loop3: detected capacity change from 0 to 512 [ 575.594815][T13746] veth1_vlan: entered promiscuous mode [ 575.615881][T13914] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.3385: corrupted in-inode xattr: invalid ea_ino [ 575.645437][T13914] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3385: couldn't read orphan inode 15 (err -117) [ 575.667926][T13746] veth0_macvtap: entered promiscuous mode [ 575.677712][T13914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.701371][T13746] veth1_macvtap: entered promiscuous mode [ 575.712899][T13746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.728821][T13746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.743662][T13929] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3389'. [ 575.776148][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.798055][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.820874][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.823693][T13932] loop3: detected capacity change from 512 to 64 [ 575.849858][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.922514][T13942] syzkaller0: entered promiscuous mode [ 575.928067][T13942] syzkaller0: entered allmulticast mode [ 575.968214][T13776] veth0_vlan: entered promiscuous mode [ 575.983522][T13776] veth1_vlan: entered promiscuous mode [ 576.027040][T12729] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 576.064750][T13776] veth0_macvtap: entered promiscuous mode [ 576.073055][T13776] veth1_macvtap: entered promiscuous mode [ 576.079511][T12729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.095304][T13776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.126686][T13776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.139534][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.162365][ T41] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.184693][T13956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.211233][T13956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.248050][T13956] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3397'. [ 576.328146][ T41] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.339486][ T41] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.349893][ T3390] IPVS: starting estimator thread 0... [ 576.440831][T13963] IPVS: using max 2592 ests per chain, 129600 per kthread [ 576.448228][ T50] bridge_slave_1: left allmulticast mode [ 576.453969][ T50] bridge_slave_1: left promiscuous mode [ 576.459873][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.480939][ T50] bridge_slave_0: left allmulticast mode [ 576.486801][ T50] bridge_slave_0: left promiscuous mode [ 576.492541][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.547021][T13980] loop6: detected capacity change from 0 to 512 [ 576.602919][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.612302][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.635148][ T50] bond0 (unregistering): Released all slaves [ 576.692775][T13982] tipc: Started in network mode [ 576.697736][T13982] tipc: Node identity de9e0ea203b, cluster identity 4711 [ 576.704865][T13982] tipc: Enabled bearer , priority 0 [ 576.723970][T13980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.726466][T13983] syzkaller0: entered promiscuous mode [ 576.742270][T13983] syzkaller0: entered allmulticast mode [ 576.761216][T13980] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 576.772316][ T50] tipc: Left network mode [ 576.779066][ T50] hsr_slave_0: left promiscuous mode [ 576.792165][ T50] hsr_slave_1: left promiscuous mode [ 576.808030][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.822490][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.939873][ T50] team0 (unregistering): Port device team_slave_1 removed [ 576.963532][ T50] team0 (unregistering): Port device team_slave_0 removed [ 577.039286][T13979] tipc: Resetting bearer [ 577.084300][T13978] tipc: Resetting bearer [ 577.097990][T13978] tipc: Disabling bearer [ 577.253629][T14010] loop2: detected capacity change from 0 to 1024 [ 577.269984][T14010] EXT4-fs: Ignoring removed orlov option [ 577.275870][T14010] EXT4-fs: inline encryption not supported [ 577.316194][T13964] chnl_net:caif_netlink_parms(): no params data found [ 577.358989][T14010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.407801][T11858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.523619][ T50] IPVS: stop unused estimator thread 0... [ 577.723881][T13964] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.731039][T13964] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.786009][T13964] bridge_slave_0: entered allmulticast mode [ 577.824931][T13964] bridge_slave_0: entered promiscuous mode [ 577.895212][T13964] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.902427][T13964] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.945048][T13964] bridge_slave_1: entered allmulticast mode [ 577.951842][T13964] bridge_slave_1: entered promiscuous mode [ 578.007114][T13964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.020488][T13964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.035682][T14033] mmap: syz.5.3421 (14033) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 578.067808][T13964] team0: Port device team_slave_0 added [ 578.083717][T13964] team0: Port device team_slave_1 added [ 578.107737][T13964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.114791][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.140807][T13964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.173233][T13964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.180269][T13964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.206475][T13964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.411600][T13964] hsr_slave_0: entered promiscuous mode [ 578.417785][T13964] hsr_slave_1: entered promiscuous mode [ 578.496386][T14059] netlink: 79 bytes leftover after parsing attributes in process `syz.0.3432'. [ 579.209589][T14065] loop0: detected capacity change from 0 to 512 [ 579.328319][T13964] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 579.430730][T13964] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 579.455176][T14065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.467787][T14065] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 579.537111][T13964] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 579.683495][T13964] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 579.812798][T14079] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 579.849731][T13964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.912341][T13964] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.041348][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.048516][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.819976][T13964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 580.830426][T13964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.912686][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.919767][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.068254][T14093] hub 8-0:1.0: USB hub found [ 581.075623][T12193] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.137993][T14093] hub 8-0:1.0: 8 ports detected [ 581.178749][T13964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.994200][T13964] veth0_vlan: entered promiscuous mode [ 582.021310][T13964] veth1_vlan: entered promiscuous mode [ 582.071400][T13964] veth0_macvtap: entered promiscuous mode [ 582.095897][T13964] veth1_macvtap: entered promiscuous mode [ 582.170040][T14129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14129 comm=syz.0.3447 [ 582.187593][T13964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.204266][T13964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.229729][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.256032][ T29] audit: type=1400 audit(1755239026.769:555): avc: denied { mount } for pid=14130 comm="syz.0.3448" name="/" dev="ramfs" ino=55060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 582.290040][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.321407][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.330201][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.403763][ T29] audit: type=1400 audit(1755239026.929:556): avc: denied { write } for pid=14136 comm="syz.0.3450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 582.503837][T14137] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.511156][T14137] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.579433][T14143] loop0: detected capacity change from 0 to 512 [ 582.676507][T14137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.690170][T14143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.702747][T14143] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 582.743899][T14137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.552803][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.571628][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.070710][ T295] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.095523][ T295] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.396695][T12193] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.421210][T13776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.475793][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3461'. [ 585.988969][T14195] loop6: detected capacity change from 0 to 512 [ 586.022276][T14195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.034895][T14195] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 588.373645][T13776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.634765][T14222] loop6: detected capacity change from 0 to 512 [ 588.726468][T14222] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.821016][T14222] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.297446][T14238] loop0: detected capacity change from 0 to 1024 [ 589.339375][T14238] EXT4-fs: Ignoring removed oldalloc option [ 589.345465][T14238] EXT4-fs: Ignoring removed bh option [ 589.498751][T14240] netlink: 'syz.7.3480': attribute type 10 has an invalid length. [ 589.557059][T14240] team0: Port device dummy0 added [ 589.773462][T14238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.924147][T12193] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.071602][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 591.086167][ T29] audit: type=1400 audit(1755239035.549:557): avc: denied { nlmsg_write } for pid=14265 comm="syz.7.3489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 591.803446][T14284] loop2: detected capacity change from 0 to 512 [ 591.866627][T14284] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3494: corrupted in-inode xattr: invalid ea_ino [ 592.659495][T14284] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3494: couldn't read orphan inode 15 (err -117) [ 592.954393][T14284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.560903][ T29] audit: type=1400 audit(1755239038.069:558): avc: denied { ioctl } for pid=14281 comm="syz.2.3494" path="/127/file0/file0/bus" dev="loop2" ino=18 ioctlcmd=0x4c04 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 593.733740][T11858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.398511][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3505'. [ 595.337344][T14331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14331 comm=syz.7.3508 [ 596.509341][ T29] audit: type=1400 audit(1755239041.029:559): avc: denied { mount } for pid=14348 comm="syz.7.3515" name="/" dev="hugetlbfs" ino=55495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 596.593020][ T29] audit: type=1400 audit(1755239041.029:560): avc: denied { unmount } for pid=13964 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 597.327841][T14365] 9pnet_fd: Insufficient options for proto=fd [ 597.821336][T13776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.030932][ T29] audit: type=1400 audit(1755239042.539:561): avc: denied { create } for pid=14370 comm="syz.2.3523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 598.441085][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3526'. [ 599.399961][T14404] loop6: detected capacity change from 0 to 512 [ 599.408841][T14404] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.3533: corrupted in-inode xattr: invalid ea_ino [ 599.423805][T14404] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3533: couldn't read orphan inode 15 (err -117) [ 599.436550][T14404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.587045][T13776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.823263][T14414] netlink: 136 bytes leftover after parsing attributes in process `syz.7.3536'. [ 599.927718][T14416] 9pnet_fd: Insufficient options for proto=fd [ 599.955816][T14087] IPVS: starting estimator thread 0... [ 600.050891][T14421] IPVS: using max 2688 ests per chain, 134400 per kthread [ 601.056407][T14439] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 601.065977][T14441] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3545'. [ 601.262833][ T29] audit: type=1400 audit(1755239045.789:562): avc: denied { setopt } for pid=14446 comm="syz.6.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 601.792111][T14454] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.799477][T14454] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.115098][ T29] audit: type=1400 audit(1755239046.639:563): avc: denied { write } for pid=14462 comm="syz.7.3553" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 602.262990][T14454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.314297][T14454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.595933][T14481] loop6: detected capacity change from 0 to 512 [ 602.654396][T14481] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.3555: corrupted in-inode xattr: invalid ea_ino [ 602.669340][T14481] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3555: couldn't read orphan inode 15 (err -117) [ 602.837829][T14484] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 602.891264][T14481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.946079][T13776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.077098][ T41] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.251795][T14490] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3557'. [ 603.277735][ T41] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.295742][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3557'. [ 603.473486][ T41] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.563766][ T41] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.760236][T14515] loop0: detected capacity change from 0 to 512 [ 604.787753][T14515] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.3566: corrupted in-inode xattr: invalid ea_ino [ 604.807556][T14515] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.3566: couldn't read orphan inode 15 (err -117) [ 604.821295][T14515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.010229][T12193] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.193083][T14535] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3574'. [ 605.203273][T14535] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3574'. [ 606.716485][T14550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3579'. [ 608.099218][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3593'. [ 608.430187][T14593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14593 comm=syz.2.3596 [ 609.727231][T14603] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 610.811168][T14623] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3606'. [ 611.275872][T14625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14625 comm=syz.2.3607 [ 612.357926][T14655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14655 comm=syz.6.3619 [ 612.435789][T14657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3620'. [ 612.501414][T14659] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3621'. [ 617.014507][T14728] loop0: detected capacity change from 0 to 164 [ 617.038936][ T29] audit: type=1400 audit(1755239061.559:564): avc: denied { mount } for pid=14726 comm="syz.0.3642" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 617.474554][T14744] loop2: detected capacity change from 0 to 512 [ 617.537364][ T31] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.560451][T14744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.654172][T14744] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 617.694614][ T31] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.738842][ T31] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.874869][ T31] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.938441][ T29] audit: type=1400 audit(1755239062.449:565): avc: denied { unmount } for pid=12193 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 618.213170][ T31] bridge_slave_1: left allmulticast mode [ 618.218871][ T31] bridge_slave_1: left promiscuous mode [ 618.224667][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.240130][ T31] bridge_slave_0: left allmulticast mode [ 618.245921][ T31] bridge_slave_0: left promiscuous mode [ 618.251717][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.318294][T11858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.656288][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.686844][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.756628][ T31] bond0 (unregistering): Released all slaves [ 619.522050][ T31] tipc: Left network mode [ 619.735953][ T31] hsr_slave_0: left promiscuous mode [ 619.746389][ T31] hsr_slave_1: left promiscuous mode [ 619.759376][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.766857][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.779496][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.786998][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.798452][ T31] veth1_macvtap: left promiscuous mode [ 619.804209][ T31] veth0_macvtap: left promiscuous mode [ 619.810186][ T31] veth1_vlan: left promiscuous mode [ 619.816197][ T31] veth0_vlan: left promiscuous mode [ 619.893984][ T31] team0 (unregistering): Port device team_slave_1 removed [ 619.903174][ T31] team0 (unregistering): Port device team_slave_0 removed [ 620.396166][T14752] chnl_net:caif_netlink_parms(): no params data found [ 620.468107][T14752] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.475439][T14752] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.483045][T14752] bridge_slave_0: entered allmulticast mode [ 620.489600][T14752] bridge_slave_0: entered promiscuous mode [ 620.496689][T14752] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.503914][T14752] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.511377][T14752] bridge_slave_1: entered allmulticast mode [ 620.518155][T14752] bridge_slave_1: entered promiscuous mode [ 620.547407][T14808] netlink: 87 bytes leftover after parsing attributes in process `syz.6.3667'. [ 620.566285][T14752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.586041][T14752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.652149][T14752] team0: Port device team_slave_0 added [ 620.658963][T14752] team0: Port device team_slave_1 added [ 620.693649][T14752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.700752][T14752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.726856][T14752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.763807][T14752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.770882][T14752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.792229][ T29] audit: type=1400 audit(1755239065.319:566): avc: denied { create } for pid=14814 comm="syz.7.3670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 620.796823][T14752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.896049][T14817] loop6: detected capacity change from 0 to 512 [ 621.088807][T14752] hsr_slave_0: entered promiscuous mode [ 621.115866][T14752] hsr_slave_1: entered promiscuous mode [ 621.131393][T14817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.145028][T14752] debugfs: 'hsr0' already exists in 'hsr' [ 621.150792][T14752] Cannot create hsr debugfs directory [ 621.234171][T14817] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 622.444936][T14752] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 622.455441][T14752] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 622.464606][T14752] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 622.474685][T14752] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 622.529587][T14752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.650870][T14752] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.741273][ T1602] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.748444][ T1602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.796375][ T1602] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.803505][ T1602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.893711][T14752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 623.052868][T14752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.178510][T14752] veth0_vlan: entered promiscuous mode [ 624.230417][T13776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.255087][T14888] netlink: 1004 bytes leftover after parsing attributes in process `syz.6.3688'. [ 624.301602][T14752] veth1_vlan: entered promiscuous mode [ 624.341812][T14893] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3690'. [ 624.350929][T14893] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3690'. [ 624.373485][T14752] veth0_macvtap: entered promiscuous mode [ 624.389651][T14752] veth1_macvtap: entered promiscuous mode [ 624.407183][T14752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.437263][T14752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.455877][ T3480] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.516407][ T3480] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.569973][ T29] audit: type=1400 audit(1755239069.079:567): avc: denied { mount } for pid=14752 comm="syz-executor" name="/" dev="gadgetfs" ino=4754 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 624.584953][ T3480] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.649450][ T3480] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.148156][T11858] ================================================================== [ 625.156314][T11858] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 625.163815][T11858] [ 625.166150][T11858] read-write to 0xffff888104b18108 of 8 bytes by task 14908 on cpu 0: [ 625.174319][T11858] inode_add_bytes+0x47/0xe0 [ 625.178953][T11858] __dquot_alloc_space+0x180/0x8a0 [ 625.184086][T11858] shmem_inode_acct_blocks+0x129/0x240 [ 625.189573][T11858] shmem_get_folio_gfp+0x5a7/0xd60 [ 625.194722][T11858] shmem_write_begin+0xa8/0x190 [ 625.199586][T11858] generic_perform_write+0x181/0x490 [ 625.204900][T11858] shmem_file_write_iter+0xc5/0xf0 [ 625.210206][T11858] __kernel_write_iter+0x2d6/0x540 [ 625.215340][T11858] dump_user_range+0x61e/0x8f0 [ 625.220137][T11858] elf_core_dump+0x1e00/0x1f90 [ 625.224932][T11858] coredump_write+0xb0a/0xe30 [ 625.229624][T11858] vfs_coredump+0x142f/0x20c0 [ 625.234329][T11858] get_signal+0xd85/0xf70 [ 625.238683][T11858] arch_do_signal_or_restart+0x96/0x480 [ 625.244230][T11858] irqentry_exit_to_user_mode+0x5e/0xa0 [ 625.249778][T11858] irqentry_exit+0x12/0x50 [ 625.254196][T11858] asm_exc_page_fault+0x26/0x30 [ 625.259050][T11858] [ 625.261370][T11858] read to 0xffff888104b18108 of 8 bytes by task 11858 on cpu 1: [ 625.268999][T11858] generic_fillattr+0x27d/0x340 [ 625.273858][T11858] shmem_getattr+0x181/0x200 [ 625.278450][T11858] vfs_getattr_nosec+0x146/0x1e0 [ 625.283392][T11858] vfs_statx+0x113/0x390 [ 625.287638][T11858] vfs_fstatat+0x115/0x170 [ 625.292068][T11858] __se_sys_newfstatat+0x55/0x260 [ 625.297134][T11858] __x64_sys_newfstatat+0x55/0x70 [ 625.302172][T11858] x64_sys_call+0x135a/0x2ff0 [ 625.306854][T11858] do_syscall_64+0xd2/0x200 [ 625.311366][T11858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.317259][T11858] [ 625.319576][T11858] value changed: 0x0000000000000378 -> 0x0000000000000380 [ 625.326675][T11858] [ 625.328993][T11858] Reported by Kernel Concurrency Sanitizer on: [ 625.335227][T11858] CPU: 1 UID: 0 PID: 11858 Comm: syz-executor Tainted: G W 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 625.349555][T11858] Tainted: [W]=WARN [ 625.353357][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.363407][T11858] ==================================================================