last executing test programs: 14.856204194s ago: executing program 0 (id=24): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x3}, 0x11111a, 0x7, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @val=@tracing={0x0, 0x10}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) 14.606585888s ago: executing program 0 (id=26): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002580)=""/245, 0xf5}], 0x1, 0x0) 14.432615598s ago: executing program 0 (id=29): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="780000003600000227bd7000ffdbdf251d000000e7e8a01eb331c155d10ab1f7"], 0x78}, 0x1, 0x0, 0x0, 0x4014}, 0x4000812) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x71, 0x10, 0x13}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="87", 0x1}], 0x3f, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32=r4, @ANYBLOB='\b\x00'], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 14.348039373s ago: executing program 0 (id=30): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@smackfsfloor={'smackfsfloor', 0x3d, '^$/[%'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$ITER_CREATE(0x21, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="cc0000000002010400000000000000000a000000380001802c00018014000300fe80000000000000000000000000002114000400ff01000000000000000000000000000106000340000300004400038014000180080001007f00000108000200ac1414bb2c00018014000300ff02000000000000000000000000000104800400ff0100000000000000000000000000013c0002802c00018014000300fc0000000000000000000000000000011400040000000000000000000000ffffac1414170c00028005000100"], 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014, 0x300000000000000}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0, 0x0, 0x0, 0x0, 0x1}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x454, &(0x7f0000000ec0)="$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") 14.036326591s ago: executing program 0 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000003c000280380003"], 0x68}}, 0xa040) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r4, 0x3516, 0xc03e0000, 0x4, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000001d00)={0x13, 0x10, 0xfa00, {&(0x7f0000005d40), 0xffffffffffffffff, 0x2}}, 0x18) r7 = getpgid(0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) setns(r9, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) umount2(&(0x7f0000000040)='.\x00', 0x2) 13.71960891s ago: executing program 0 (id=34): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x6, 0x20010, r4, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x402}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 13.698862421s ago: executing program 32 (id=34): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = syz_io_uring_setup(0x3, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe, 0x368}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x6, 0x20010, r4, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x402}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xf9}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24}, 0x94) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 5.059134005s ago: executing program 4 (id=145): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f00000003c0)=ANY=[], 0x361, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=@md5={0x1, "4bafb13f23c85fbd49d44b6c179bfe62"}, 0x11, 0x3) 4.932073662s ago: executing program 4 (id=146): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) listen(r0, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x24040010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.054938094s ago: executing program 4 (id=160): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x3}, 0x11111a, 0x7, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @val=@tracing={0x0, 0x10}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) 3.831719436s ago: executing program 4 (id=163): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x20004000) (async, rerun: 64) r0 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0xb1e1, 0x2, 0xfffffffe, 0x181}) (rerun: 64) close_range(r0, r0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) msync(&(0x7f000050a000/0x3000)=nil, 0x3000, 0x2) 3.642697317s ago: executing program 3 (id=166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000001c00028018000380100001800800010009000000040003"], 0x48}}, 0x0) 3.603124749s ago: executing program 3 (id=169): futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x3a, 0x20, 0x0, 0x0) 3.319098316s ago: executing program 4 (id=173): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88e000c1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580100001000010000000000fcdbdf00088000000000000000000000000000bb0000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000600000000000000090000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000400000000000000000000000a000000ad0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000170060"], 0x158}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x54, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r11, {0xffe0, 0x9}, {0x0, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}, @TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) sendto$packet(r0, &(0x7f0000000340)='\b', 0x1, 0x4000, &(0x7f0000000400)={0x11, 0xc, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.927725699s ago: executing program 2 (id=176): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x1f, 0x0, 0x0, 0x3}, 0x3c) 2.723325361s ago: executing program 2 (id=182): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c00"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 2.723024911s ago: executing program 3 (id=183): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000054) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r3, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x2, 0x5, 0x995, 0x8000, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x3, 0x4, 0x1}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000000) unshare(0x22020600) socket$kcm(0x10, 0x2, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2.699972123s ago: executing program 2 (id=184): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x3}, 0x11111a, 0x7, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @val=@tracing={0x0, 0x10}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) 2.463824956s ago: executing program 4 (id=187): r0 = socket$kcm(0x2, 0x1, 0x84) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000402) utime(&(0x7f0000000240)='./file0\x00', 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10102, 0x0) lseek(r1, 0x0, 0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xfffffff7) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x1) getdents(r1, &(0x7f0000000540)=""/258, 0x102) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)=ANY=[@ANYBLOB="3c00ff00000000000000002bc3333300000000000000006a43776e21744a4127dedab23b13b86ac42ac002b24197a39f40b3419dd3a24591cfd6d305d6414a11e3c3a604a9bac79195b774302d9357f5717e7bacd955ac460d31e4a5513ba1bfc722c288e960ff6e93e67d1ed39e81fc7ee8de487a1b076df043a42e5b5a71216c60fd", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028006000f0003000000"], 0x3c}}, 0x0) r5 = syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f01040000000800"], 0x0) kexec_load(0x6, 0x5, &(0x7f0000001780)=[{&(0x7f0000000280)="d54dc076bdb07eac4c7178ce7ea8e4f8a7b039e22c5fd44815f0fd82dca17d7f63de53af5abf26eec8d5", 0x2a, 0x5, 0x80000000}, {&(0x7f00000002c0)="502bd0241f84193e379e634443c1bad94f84e39030fe2ab91f1b141a42ba0e341feaab033d5213c1d708ab96e9126dea80c65ba0f8f1f48369b4", 0x3a, 0x9, 0x4}, {&(0x7f00000003c0)="7e3b2e9ff6291f5408afbd7358ed03876f4d967af32de052e86d61d52a61c5dbcde08d54ce210d3827e66ce57a00a18f42dcf93553936c3590b21fe1b1ddd83886b9e972ec62d576ddfb48122ffe6f03c8cb88f522ef02904202b1e5751f3d8d786c6220bcc18d792831f12674e80d2f53b281966b8201b79cbc96c588a8a16ddc29c79ad9f95fda3cc0b38d13c96a", 0x8f, 0x9, 0x7}, {&(0x7f0000000680)="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", 0x1000, 0x9, 0x6d}, {&(0x7f0000001680)="a012d4314847bec6c6f1ecf8344c0fbae4ff77818c1622ec9a8a0e02535096ee6ff331db4168c078249d5322f393ba01fdde32679852768be1fd3e0d6de7cd6a449317b62eddca501c3e83cd51c596dd79a959ae8a1b4895755dac3f25f7919e8e96c86b08eb8ef0f8e15a83ea554589cc8edb4da1701f730daf0679a776aeef6c178819b9c159c9652b2da09d86e0203981cfc33338dcdabed4f860fc07170c2eb52a995ab32e0f264f436990451498c0deecc1d0b8bbe88628a79285e3ae20a1baf8b47273dd462dc33f10ad48a2b848c27e35bcd9f92867acef54e21fd8832e436bf8da79173d190b6c07f891dc7015", 0xf1, 0x3, 0x8}], 0x160000) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001980)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r3, @ANYRESDEC, @ANYRES32=r0, @ANYRES16=r5, @ANYRES8=0x0, @ANYRES16=r5], 0x20) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000340)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000480)=0x2c) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890c, &(0x7f0000000000)) sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)}, 0x4000080) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) 2.463234456s ago: executing program 2 (id=188): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, 0x0, 0xffc0) 2.385719471s ago: executing program 2 (id=190): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x3}, 0x11111a, 0x7, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @val=@tracing={0x0, 0x10}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) 2.089715228s ago: executing program 5 (id=195): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) listen(r0, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x24040010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.004445463s ago: executing program 2 (id=197): r0 = syz_open_procfs(0x0, 0x0) lseek(r0, 0x22004, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom$l2tp6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.500472662s ago: executing program 1 (id=198): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x3}, 0x11111a, 0x7, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @val=@tracing={0x0, 0x10}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) 1.229730618s ago: executing program 3 (id=199): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1) 1.208805s ago: executing program 1 (id=200): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffeb) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, 0x0, 0xffc0) 1.19765135s ago: executing program 5 (id=201): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1280, &(0x7f0000000780)="$eJzs3UtrJFUbB/Cnk8513lxeHUdnQDzoRhHaSRBXboLMgBhQohlQQagxHW3SuZBuAhFx4sqV4McQdelOUL9ANrpwLQgi2bichVjSl9F0uhNj0tMR+f02fTh1/vVU5VAFFepQB89/sr62WiutZvUYKhSiuDUSxbspUgzFcLTsxVO3fvjx0Vdff+OlhcXFG0sp3Vx4be65lNL0Y1+/+f4Xj39bv3Try+mvxmJ/9q2DX+d/2r+yf/Xg98+jUkuVWtrYrKcs3d7crGe3q+W0UqmtlVJ6pVrOauVU2aiVtzu2r1Y3t7Z2U7axMjW5tV2u1VK2sZvWyrupXkj17d2UvZNVNlKpVEpTk8F5LH92N8/ziDwfidHI8zyfiMm4FP+LqZiOmZiN/8cD8WBcjofiSjwcj8TV5qhm+JuLPnoAAAAAAAAAAAAAAAAAAAD4r/ib9f+FE9b/AwAAAAAAAAAAAAAAAAAAAH1ydP1/MeK03/8HAAAAAAAAAAAAAAAAAAAA+uTw+v/vJyKOfP//yPr/p63/BwAAAAAAAAAAAAAAAAAAgPthvPWzlNJ4xPpHO8s7y63fVv/CalSiGuW4HjPxWzRX/7e02jdfXLxxPTXNxjPrd9r5OzvLw535uZGZmC30zM+18qkzPxaTh/PzMROXe9afne+ZH48nn2jkP2zlSzET370dm1GNlYhC++yb9T+YS+mFlxcnOvPXGuOONXyfpwUAAAD6qZT+1P38vtce1HN7a1P7+Ty1RxZO+P/AkefzYlwrXtRZc09t9721rFotb5+xMXr8fkbPt+euRiEisjjcMz3581KjeN9KnLUxPNCiIyePOcecRvFf8MfsQ+OXTw/1jMdgqw+1L4ms2rh/ni4Ve3l+pqLPnnK+el6MY43GXvNQu1PH3zMKA7gvMRh/TfpFHwkAAAAAAAAAAAD/RM93Biciout9wHe7eu69Ht4Z797z8dU/HsAZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwBztwLAAAAAAgzN86jY4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK8CAAD//8uGzL8=") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x1, 0x2, &(0x7f0000000140)={r0, r1+60000000}, &(0x7f00000001c0)=0x1, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ioprio_set$uid(0x3, 0x0, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 1.129327194s ago: executing program 1 (id=202): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000003700090025bd7000ff8400000200000004"], 0x24}}, 0x0) lseek(r0, 0xfffd, 0x0) 935.518166ms ago: executing program 1 (id=203): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x800, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x0, 0x2b}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xc3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0088a80180c200000e2833b165653286dd694f920600083a01fe8000000000000000000000000000bbff02000000000000000000000000000180009078f8010009fddb1f643a3b5f2e61667d7e9fa3a34800a11f2a70f3fda8d2fb5fa7b80d0600000000000000f0b2602f4a2e136c461533bcf2fad960607305ab8dc802eda55cc2"], 0x42) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000023c0)=@newtaction={0x11c4, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x11b0, 0x1, [@m_csum={0x4c, 0x2001, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0xc0, 0x9, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x16ff, 0x1, 0x4e614853, 0x1}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x10000, 0x3, 0xafb8, 0x4}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xe, 0x1, 0x1, 0x7ca79d26}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0x400, 0xff}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x0, 0x4, 0x6, 0x7b}, 0x5b}}]}, {0x6, 0x6, "3afb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x10a0, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x1074, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x11c4}}, 0x0) 935.223005ms ago: executing program 5 (id=204): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000300)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 699.907819ms ago: executing program 5 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) (fail_nth: 10) 167.9784ms ago: executing program 3 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) rename(&(0x7f0000000600)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000740)='./file1\x00') ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000001040)={'veth1_vlan\x00', 0xdd}) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000040a010300ddc745ef7bc8ac841a"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4091) recvmmsg(r0, 0x0, 0x0, 0x40, 0x0) 120.219273ms ago: executing program 5 (id=207): openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000000c0), 0x100) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaee7, 0x0, 0x1, 0x11e}, &(0x7f0000000200), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000440)=""/41, 0x29}, {&(0x7f0000000480)=""/123, 0x7b}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000014000580080001"], 0x5c}}, 0x0) 119.040413ms ago: executing program 1 (id=208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xb}, {0x0, 0x9}, {0x9, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4001, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xc) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) 59.544146ms ago: executing program 3 (id=209): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x1, 0x43a, &(0x7f0000000340)="$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") syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000000200)="000bda", 0x3) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000090a010400000000000000000a000004140000001100010000000000000000000400000ad1e26fb97327e5efa2d95add4cfc47d1471f87a5fb1d4e9410145d25d065c04902c03bce08630cfe536b93c3ec4e"], 0xfffffea2}, 0x1, 0x0, 0x0, 0x4000850}, 0x4854) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="140000000a0af58162420102000000000000000000000007"], 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r6 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x181242, 0x1ea) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x0, 0x2, 0xfffefffffdffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000014c0)={r9, 0x1, 0x2fee, 0x1}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r10, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r11 = accept$phonet_pipe(r6, &(0x7f00000001c0), &(0x7f0000000300)=0x10) recvmmsg(r11, &(0x7f0000001040)=[{{&(0x7f0000001180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/211, 0xd3}], 0x1, &(0x7f0000000f40)=""/216, 0xd8}, 0x1}], 0x1, 0x0, &(0x7f0000001080)={0x0, 0x989680}) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) 12.245819ms ago: executing program 5 (id=210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x99b802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x8000}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x4) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2a011, r1, 0x0) fadvise64(r1, 0xfffffffffffffffe, 0x0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x6c4000, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, 0x0, 0x25, 0x8, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r5}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r8, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xd1) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000200)={0x5, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x3, 0x0, @loopback}}}, 0x108) r10 = socket(0x28, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4001, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r7, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000000)={r6, 0x7, 0x7f, 0x1000, 0x82, 0x6, 0x1, 0x3, {0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x6, 0x10, 0x4, 0x62f, 0x4b1}}, &(0x7f00000000c0)=0xb0) r11 = socket(0x10, 0x803, 0x4) fchmod(r11, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={r6, 0xac, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0xffff2222, @remote, 0x5}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0xa, @mcast2, 0x3f37}, @in6={0xa, 0x4e24, 0x3, @empty, 0x10001}, @in6={0xa, 0x4a20, 0x1, @remote, 0x612}, @in6={0xa, 0x4e23, 0x5, @local, 0x7}]}, &(0x7f0000000180)=0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 1 (id=211): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0x3}, 0x11111a, 0x7, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @val=@tracing={0x0, 0x10}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) kernel console output (not intermixed with test programs): [ 22.320760][ T29] audit: type=1400 audit(1770165388.609:62): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.342740][ T29] audit: type=1400 audit(1770165388.609:63): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.365306][ T29] audit: type=1400 audit(1770165388.609:64): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.388217][ T29] audit: type=1400 audit(1770165388.609:65): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.411406][ T29] audit: type=1400 audit(1770165388.609:66): avc: denied { read open } for pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 28.249751][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 28.249776][ T29] audit: type=1400 audit(1770165394.539:70): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.278968][ T29] audit: type=1400 audit(1770165394.569:71): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.281302][ T3298] cgroup: Unknown subsys name 'net' [ 28.306722][ T29] audit: type=1400 audit(1770165394.599:72): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.406718][ T3298] cgroup: Unknown subsys name 'cpuset' [ 28.412976][ T3298] cgroup: Unknown subsys name 'rlimit' [ 28.505169][ T29] audit: type=1400 audit(1770165394.789:73): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.541920][ T29] audit: type=1400 audit(1770165394.799:74): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.562955][ T29] audit: type=1400 audit(1770165394.799:75): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.582854][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.583500][ T29] audit: type=1400 audit(1770165394.799:76): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.612276][ T29] audit: type=1400 audit(1770165394.809:77): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.637238][ T29] audit: type=1400 audit(1770165394.809:78): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.660648][ T29] audit: type=1400 audit(1770165394.819:79): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.692297][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.881126][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 29.925229][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 29.934161][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.983047][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 30.024900][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.032032][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.039288][ T3321] bridge_slave_0: entered allmulticast mode [ 30.045969][ T3321] bridge_slave_0: entered promiscuous mode [ 30.064663][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.071930][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.079270][ T3321] bridge_slave_1: entered allmulticast mode [ 30.086063][ T3321] bridge_slave_1: entered promiscuous mode [ 30.119409][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 30.132812][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.139992][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.147249][ T3313] bridge_slave_0: entered allmulticast mode [ 30.153659][ T3313] bridge_slave_0: entered promiscuous mode [ 30.164374][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.171535][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.178709][ T3313] bridge_slave_1: entered allmulticast mode [ 30.185286][ T3313] bridge_slave_1: entered promiscuous mode [ 30.200315][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.207448][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.214703][ T3312] bridge_slave_0: entered allmulticast mode [ 30.221195][ T3312] bridge_slave_0: entered promiscuous mode [ 30.232344][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.239453][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.246658][ T3312] bridge_slave_1: entered allmulticast mode [ 30.253239][ T3312] bridge_slave_1: entered promiscuous mode [ 30.270874][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.285732][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.294867][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.302055][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.309197][ T3317] bridge_slave_0: entered allmulticast mode [ 30.315775][ T3317] bridge_slave_0: entered promiscuous mode [ 30.333193][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.354927][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.362088][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.369312][ T3317] bridge_slave_1: entered allmulticast mode [ 30.375846][ T3317] bridge_slave_1: entered promiscuous mode [ 30.383574][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.393710][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.416079][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.430251][ T3321] team0: Port device team_slave_0 added [ 30.452099][ T3321] team0: Port device team_slave_1 added [ 30.463246][ T3313] team0: Port device team_slave_0 added [ 30.469916][ T3312] team0: Port device team_slave_0 added [ 30.481711][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.491724][ T3312] team0: Port device team_slave_1 added [ 30.498210][ T3313] team0: Port device team_slave_1 added [ 30.523831][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.543040][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.550135][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.576162][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.587426][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.594369][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.620964][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.632164][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.639149][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.665243][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.676109][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.683182][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.690619][ T3322] bridge_slave_0: entered allmulticast mode [ 30.697191][ T3322] bridge_slave_0: entered promiscuous mode [ 30.717868][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.724892][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.750857][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.764650][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.771890][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.779132][ T3322] bridge_slave_1: entered allmulticast mode [ 30.785531][ T3322] bridge_slave_1: entered promiscuous mode [ 30.792467][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.799466][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.825489][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.837536][ T3317] team0: Port device team_slave_0 added [ 30.852586][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.859670][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.885687][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.897289][ T3317] team0: Port device team_slave_1 added [ 30.922047][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.929040][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.955057][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.977068][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.987824][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.007178][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.014129][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.040108][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.058003][ T3312] hsr_slave_0: entered promiscuous mode [ 31.064137][ T3312] hsr_slave_1: entered promiscuous mode [ 31.093840][ T3313] hsr_slave_0: entered promiscuous mode [ 31.099843][ T3313] hsr_slave_1: entered promiscuous mode [ 31.105881][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 31.111605][ T3313] Cannot create hsr debugfs directory [ 31.117795][ T3322] team0: Port device team_slave_0 added [ 31.126999][ T3321] hsr_slave_0: entered promiscuous mode [ 31.132996][ T3321] hsr_slave_1: entered promiscuous mode [ 31.139095][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 31.144819][ T3321] Cannot create hsr debugfs directory [ 31.169514][ T3322] team0: Port device team_slave_1 added [ 31.217486][ T3317] hsr_slave_0: entered promiscuous mode [ 31.223495][ T3317] hsr_slave_1: entered promiscuous mode [ 31.229876][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 31.235633][ T3317] Cannot create hsr debugfs directory [ 31.241385][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.248392][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.274402][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.288237][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.295296][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.321349][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.390695][ T3322] hsr_slave_0: entered promiscuous mode [ 31.396802][ T3322] hsr_slave_1: entered promiscuous mode [ 31.402659][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 31.408424][ T3322] Cannot create hsr debugfs directory [ 31.557359][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.566200][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.575110][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.586668][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.610521][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.621829][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.631867][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.640531][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.674342][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.685098][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.695480][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.708661][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.750261][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.757854][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.767514][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.776682][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.796267][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.821329][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.833517][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.856945][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.870499][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.880785][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.887955][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.902844][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.913527][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.920672][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.930407][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.939563][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.959249][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.966358][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.986490][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.998550][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.005783][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.039123][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.068130][ T2284] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.075237][ T2284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.106704][ T2284] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.113805][ T2284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.139976][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.173126][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.199558][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.211764][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.229570][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.244759][ T2284] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.251900][ T2284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.273616][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.292051][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.299253][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.315628][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.322695][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.334956][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.342137][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.372094][ T3321] veth0_vlan: entered promiscuous mode [ 32.385215][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.400811][ T3321] veth1_vlan: entered promiscuous mode [ 32.453205][ T3321] veth0_macvtap: entered promiscuous mode [ 32.478295][ T3321] veth1_macvtap: entered promiscuous mode [ 32.499803][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.529374][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.557777][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.569611][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.579409][ T366] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.595774][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.612540][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.646411][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.655234][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.669123][ T3313] veth0_vlan: entered promiscuous mode [ 32.687871][ T3313] veth1_vlan: entered promiscuous mode [ 32.708974][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.734373][ T3313] veth0_macvtap: entered promiscuous mode [ 32.767012][ T3313] veth1_macvtap: entered promiscuous mode [ 32.775250][ T3312] veth0_vlan: entered promiscuous mode [ 32.781561][ C1] hrtimer: interrupt took 25952 ns [ 32.787717][ T3312] veth1_vlan: entered promiscuous mode [ 32.803428][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.834487][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.866850][ T3312] veth0_macvtap: entered promiscuous mode [ 32.878757][ T3312] veth1_macvtap: entered promiscuous mode [ 32.885331][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.905141][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.930989][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.946840][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.970814][ T3322] veth0_vlan: entered promiscuous mode [ 32.979330][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.997680][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.005496][ T3322] veth1_vlan: entered promiscuous mode [ 33.024354][ T3322] veth0_macvtap: entered promiscuous mode [ 33.051180][ T3457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.064824][ T3322] veth1_macvtap: entered promiscuous mode [ 33.087347][ T3457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.104324][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.131778][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.150124][ T3457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.172467][ T3457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.215291][ T3457] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.233443][ T3457] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.259026][ T3500] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10'. [ 33.262654][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 33.262697][ T29] audit: type=1400 audit(1770165399.549:117): avc: denied { create } for pid=3497 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.294273][ T29] audit: type=1400 audit(1770165399.549:118): avc: denied { write } for pid=3497 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.306964][ T3317] veth0_vlan: entered promiscuous mode [ 33.314576][ T29] audit: type=1400 audit(1770165399.549:119): avc: denied { nlmsg_write } for pid=3497 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.347443][ T2284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.358349][ T29] audit: type=1400 audit(1770165399.579:120): avc: denied { create } for pid=3499 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.379663][ T3317] veth1_vlan: entered promiscuous mode [ 33.401358][ T3317] veth0_macvtap: entered promiscuous mode [ 33.416803][ T3504] Zero length message leads to an empty skb [ 33.423988][ T29] audit: type=1400 audit(1770165399.699:121): avc: denied { setopt } for pid=3501 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.444187][ T29] audit: type=1400 audit(1770165399.699:122): avc: denied { bind } for pid=3501 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.464644][ T2284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.481153][ T3317] veth1_macvtap: entered promiscuous mode [ 33.515751][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.548536][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 33.561424][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.572218][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.585948][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.594755][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.613566][ T3514] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 33.618519][ T29] audit: type=1400 audit(1770165399.779:123): avc: denied { write } for pid=3509 comm="syz.2.11" name="unix" dev="proc" ino=4026532424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 33.644241][ T29] audit: type=1400 audit(1770165399.789:124): avc: denied { create } for pid=3507 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 33.663623][ T29] audit: type=1400 audit(1770165399.819:125): avc: denied { create } for pid=3512 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.682892][ T29] audit: type=1400 audit(1770165399.819:126): avc: denied { setopt } for pid=3512 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.704052][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.707787][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 33.757707][ T3521] loop3: detected capacity change from 0 to 512 [ 33.767080][ T3521] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 33.789375][ T3521] EXT4-fs (loop3): invalid journal inode [ 33.800923][ T3521] EXT4-fs (loop3): can't get journal size [ 33.845972][ T3521] EXT4-fs (loop3): 1 truncate cleaned up [ 33.861527][ T3513] syz.0.12 (3513) used greatest stack depth: 9640 bytes left [ 33.866680][ T3521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.911177][ T3531] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.16'. [ 33.937427][ T3531] netlink: zone id is out of range [ 33.942664][ T3531] netlink: zone id is out of range [ 33.961729][ T3535] FAULT_INJECTION: forcing a failure. [ 33.961729][ T3535] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.962738][ T3531] netlink: zone id is out of range [ 33.974852][ T3535] CPU: 0 UID: 0 PID: 3535 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.974885][ T3535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.974903][ T3535] Call Trace: [ 33.974916][ T3535] [ 33.974926][ T3535] __dump_stack+0x1d/0x30 [ 33.975053][ T3535] dump_stack_lvl+0x95/0xd0 [ 33.975146][ T3535] dump_stack+0x15/0x1b [ 33.975364][ T3535] should_fail_ex+0x263/0x280 [ 33.975477][ T3535] should_fail+0xb/0x20 [ 33.975640][ T3535] should_fail_usercopy+0x1a/0x20 [ 33.975745][ T3535] _copy_from_iter+0xcf/0xea0 [ 33.975807][ T3535] ? __alloc_skb+0x397/0x4b0 [ 33.975905][ T3535] ? __alloc_skb+0x219/0x4b0 [ 33.976031][ T3535] netlink_sendmsg+0x4ae/0x6f0 [ 33.976105][ T3535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.976168][ T3535] ____sys_sendmsg+0x5af/0x600 [ 33.976235][ T3535] ___sys_sendmsg+0x195/0x1e0 [ 33.976372][ T3535] __x64_sys_sendmsg+0xd4/0x160 [ 33.976470][ T3535] x64_sys_call+0x17ba/0x3000 [ 33.976556][ T3535] do_syscall_64+0xc0/0x2a0 [ 33.976660][ T3535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.976809][ T3535] RIP: 0033:0x7fea4ad5aeb9 [ 33.976863][ T3535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.976927][ T3535] RSP: 002b:00007fea497b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.977004][ T3535] RAX: ffffffffffffffda RBX: 00007fea4afd5fa0 RCX: 00007fea4ad5aeb9 [ 33.977056][ T3535] RDX: 0000000000008000 RSI: 00002000000019c0 RDI: 0000000000000004 [ 33.977107][ T3535] RBP: 00007fea497b7090 R08: 0000000000000000 R09: 0000000000000000 [ 33.977174][ T3535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.977219][ T3535] R13: 00007fea4afd6038 R14: 00007fea4afd5fa0 R15: 00007ffccc384278 [ 33.977283][ T3535] [ 34.165812][ T3531] netlink: zone id is out of range [ 34.170995][ T3531] netlink: zone id is out of range [ 34.180680][ T3537] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 34.225275][ T3541] loop1: detected capacity change from 0 to 164 [ 34.233806][ T3541] ======================================================= [ 34.233806][ T3541] WARNING: The mand mount option has been deprecated and [ 34.233806][ T3541] and is ignored by this kernel. Remove the mand [ 34.233806][ T3541] option from the mount to silence this warning. [ 34.233806][ T3541] ======================================================= [ 34.272858][ T3533] vxcan0: tx address claim with dest, not broadcast [ 34.282249][ T3531] netlink: set zone limit has 8 unknown bytes [ 34.290487][ T3533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 34.306624][ T3541] rock: directory entry would overflow storage [ 34.312838][ T3541] rock: sig=0x5252, size=5, remaining=3 [ 34.425707][ T3544] loop1: detected capacity change from 0 to 128 [ 34.432761][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.447531][ T3544] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.469216][ T3547] loop4: detected capacity change from 0 to 512 [ 34.514627][ T3549] loop3: detected capacity change from 0 to 512 [ 34.521394][ T3544] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.540617][ T3549] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.553780][ T3549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.596809][ T3544] netlink: 'syz.1.20': attribute type 1 has an invalid length. [ 34.638973][ T3547] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.655272][ T52] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.723400][ T3549] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.724031][ T3547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.762268][ T3549] EXT4-fs (loop3): 1 truncate cleaned up [ 34.779445][ T3549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.843448][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.863996][ T3567] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.048046][ T3570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 35.086196][ T3576] loop0: detected capacity change from 0 to 1024 [ 35.101591][ T3576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.173732][ T3576] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.30: missing EA_INODE flag [ 35.233215][ T3576] EXT4-fs (loop0): Remounting filesystem read-only [ 35.263600][ T3582] tipc: Started in network mode [ 35.268583][ T3582] tipc: Node identity aab1570fa6c7, cluster identity 4711 [ 35.275819][ T3582] tipc: Enabled bearer , priority 0 [ 35.284641][ T3576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.30'. [ 35.393191][ T3582] syzkaller0: entered promiscuous mode [ 35.398748][ T3582] syzkaller0: entered allmulticast mode [ 35.430500][ T3585] loop1: detected capacity change from 0 to 512 [ 35.457135][ T3582] tipc: Resetting bearer [ 35.475862][ T3585] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.497010][ T3585] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 35.498217][ T3549] syz.3.23 (3549) used greatest stack depth: 7272 bytes left [ 35.536077][ T3585] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.31: inode #15: comm syz.1.31: iget: illegal inode # [ 35.560709][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.569895][ T3585] EXT4-fs (loop1): Remounting filesystem read-only [ 35.580255][ T3585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.596001][ T3581] tipc: Resetting bearer [ 35.617232][ T3584] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.676551][ T3581] tipc: Disabling bearer [ 35.714257][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.799036][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.820018][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.899837][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.979287][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.065396][ T3589] xfrm1: entered allmulticast mode [ 36.167742][ T37] bridge_slave_1: left allmulticast mode [ 36.173432][ T37] bridge_slave_1: left promiscuous mode [ 36.179332][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.215114][ T37] bridge_slave_0: left allmulticast mode [ 36.221079][ T37] bridge_slave_0: left promiscuous mode [ 36.227023][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.425816][ T3615] tmpfs: Unknown parameter '18446744073709551615' [ 36.432958][ T3615] netlink: 'syz.1.39': attribute type 7 has an invalid length. [ 36.440815][ T3615] netlink: 'syz.1.39': attribute type 8 has an invalid length. [ 36.538643][ T3640] loop1: detected capacity change from 0 to 512 [ 36.565752][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.601862][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.616320][ T3640] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.628441][ T37] bond0 (unregistering): Released all slaves [ 36.647005][ T3640] EXT4-fs (loop1): 1 truncate cleaned up [ 36.653215][ T3640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.788416][ T3636] syzkaller0: entered promiscuous mode [ 36.794310][ T3636] syzkaller0: entered allmulticast mode [ 36.876226][ T37] hsr_slave_0: left promiscuous mode [ 36.892375][ T37] hsr_slave_1: left promiscuous mode [ 36.916676][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.924177][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.974906][ T3639] syz.1.43 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 36.985904][ T3639] CPU: 1 UID: 0 PID: 3639 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.985932][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 36.985945][ T3639] Call Trace: [ 36.985952][ T3639] [ 36.985988][ T3639] __dump_stack+0x1d/0x30 [ 36.986020][ T3639] dump_stack_lvl+0x95/0xd0 [ 36.986049][ T3639] dump_stack+0x15/0x1b [ 36.986069][ T3639] dump_header+0x80/0x240 [ 36.986096][ T3639] oom_kill_process+0x295/0x350 [ 36.986175][ T3639] out_of_memory+0x97d/0xb80 [ 36.986202][ T3639] try_charge_memcg+0x62e/0xa10 [ 36.986268][ T3639] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 36.986347][ T3639] __read_swap_cache_async+0x17b/0x2d0 [ 36.986468][ T3639] swap_cluster_readahead+0x362/0x3c0 [ 36.986595][ T3639] swapin_readahead+0xde/0x840 [ 36.986639][ T3639] ? __rcu_read_unlock+0x33/0x70 [ 36.986674][ T3639] ? __rcu_read_unlock+0x4e/0x70 [ 36.986732][ T3639] ? swap_cache_get_folio+0x26f/0x280 [ 36.986781][ T3639] do_swap_page+0x59b/0x2a50 [ 36.986880][ T3639] ? __rcu_read_lock+0x36/0x50 [ 36.986909][ T3639] ? __pfx_default_wake_function+0x10/0x10 [ 36.986942][ T3639] handle_mm_fault+0xb40/0x3030 [ 36.986985][ T3639] ? vma_start_read+0x1c7/0x2c0 [ 36.987088][ T3639] do_user_addr_fault+0x62f/0x1050 [ 36.987190][ T3639] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 36.987234][ T3639] ? irqentry_exit+0x3c/0x510 [ 36.987267][ T3639] exc_page_fault+0x62/0xa0 [ 36.987357][ T3639] asm_exc_page_fault+0x26/0x30 [ 36.987384][ T3639] RIP: 0033:0x7fea4ac28910 [ 36.987406][ T3639] Code: c4 4c 0f 42 e0 83 3d ba f4 3a 00 00 0f 8e d9 fd ff ff e8 b3 88 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d 7e cd ed 00 e8 03 00 00 48 8d 1d 7f d6 3a 00 e8 ca 30 13 00 [ 36.987428][ T3639] RSP: 002b:00007ffccc3843e0 EFLAGS: 00010212 [ 36.987446][ T3639] RAX: 000000000000903f RBX: 00007fea4afd7da0 RCX: 0000000000008ca0 [ 36.987506][ T3639] RDX: 000000000000039f RSI: 00007ffccc3843c0 RDI: 0000000000000001 [ 36.987524][ T3639] RBP: 00007fea4afd7da0 R08: 00000000374ca847 R09: 7fffffffffffffff [ 36.987543][ T3639] R10: 3fffffffffffffff R11: 0000000000000246 R12: 00000000000091da [ 36.987560][ T3639] R13: 00007fea4afd5fac R14: 0000000000008f98 R15: 00007ffccc3844e0 [ 36.987581][ T3639] [ 36.987587][ T3639] memory: usage 307200kB, limit 307200kB, failcnt 310 [ 37.214230][ T3639] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 37.222171][ T3639] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 37.229550][ T3639] Memory cgroup stats for /syz1: [ 37.230256][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.242717][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.290157][ T37] veth1_macvtap: left promiscuous mode [ 37.301407][ T37] veth0_macvtap: left promiscuous mode [ 37.357323][ T37] veth1_vlan: left promiscuous mode [ 37.395613][ T3639] cache 12288 [ 37.399075][ T3639] rss 0 [ 37.401869][ T3639] shmem 0 [ 37.404834][ T3639] mapped_file 0 [ 37.408360][ T3639] dirty 0 [ 37.411311][ T3639] writeback 0 [ 37.414611][ T3639] workingset_refault_anon 49 [ 37.419510][ T3639] workingset_refault_file 384 [ 37.424195][ T3639] swap 446464 [ 37.427576][ T3639] swapcached 0 [ 37.430967][ T3639] pgpgin 1669 [ 37.434392][ T3639] pgpgout 1666 [ 37.437794][ T3639] pgfault 1915 [ 37.441177][ T3639] pgmajfault 45 [ 37.444657][ T3639] inactive_anon 0 [ 37.448424][ T3639] active_anon 0 [ 37.451907][ T3639] inactive_file 12288 [ 37.455994][ T3639] active_file 0 [ 37.459557][ T3639] unevictable 0 [ 37.463133][ T3639] hierarchical_memory_limit 314572800 [ 37.468578][ T3639] hierarchical_memsw_limit 9223372036854771712 [ 37.474805][ T3639] total_cache 12288 [ 37.478665][ T3639] total_rss 0 [ 37.481994][ T3639] total_shmem 0 [ 37.485487][ T3639] total_mapped_file 0 [ 37.489586][ T3639] total_dirty 0 [ 37.493110][ T3639] total_writeback 0 [ 37.497331][ T3639] total_workingset_refault_anon 49 [ 37.502461][ T3639] total_workingset_refault_file 384 [ 37.507846][ T3639] total_swap 446464 [ 37.511733][ T3639] total_swapcached 0 [ 37.515709][ T3639] total_pgpgin 1669 [ 37.519968][ T3639] total_pgpgout 1666 [ 37.523874][ T3639] total_pgfault 1915 [ 37.527826][ T3639] total_pgmajfault 45 [ 37.531883][ T3639] total_inactive_anon 0 [ 37.536099][ T3639] total_active_anon 0 [ 37.540100][ T3639] total_inactive_file 12288 [ 37.544609][ T3639] total_active_file 0 [ 37.548662][ T3639] total_unevictable 0 [ 37.552704][ T3639] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.43,pid=3639,uid=0 [ 37.567353][ T3639] Memory cgroup out of memory: Killed process 3639 (syz.1.43) total-vm:94000kB, anon-rss:1204kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 37.594440][ T37] veth0_vlan: left promiscuous mode [ 37.846417][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.869864][ T37] team0 (unregistering): Port device team_slave_1 removed [ 37.959695][ T37] team0 (unregistering): Port device team_slave_0 removed [ 38.042652][ T3675] loop1: detected capacity change from 0 to 512 [ 38.087163][ T3675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.163101][ T3591] chnl_net:caif_netlink_parms(): no params data found [ 38.291323][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.298797][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.306315][ T3591] bridge_slave_0: entered allmulticast mode [ 38.312894][ T3591] bridge_slave_0: entered promiscuous mode [ 38.320837][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 38.320855][ T29] audit: type=1400 audit(1770165404.609:223): avc: denied { write } for pid=3672 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.336246][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.353271][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.360586][ T3591] bridge_slave_1: entered allmulticast mode [ 38.367244][ T3591] bridge_slave_1: entered promiscuous mode [ 38.395511][ T3591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.408316][ T3591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.418906][ T3705] netlink: 'syz.1.52': attribute type 4 has an invalid length. [ 38.469760][ T3700] netlink: 'syz.1.52': attribute type 4 has an invalid length. [ 38.491201][ T3591] team0: Port device team_slave_0 added [ 38.515024][ T3591] team0: Port device team_slave_1 added [ 38.575094][ T3591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.582195][ T3591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.608508][ T3591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.627481][ T3591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.634500][ T3591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.660498][ T3591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.705967][ T3727] mmap: syz.4.53 (3727) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.731621][ T3731] netlink: 44 bytes leftover after parsing attributes in process `syz.3.56'. [ 38.779461][ T3591] hsr_slave_0: entered promiscuous mode [ 38.793201][ T3591] hsr_slave_1: entered promiscuous mode [ 38.799493][ T3591] debugfs: 'hsr0' already exists in 'hsr' [ 38.805269][ T3591] Cannot create hsr debugfs directory [ 38.813659][ T3736] loop2: detected capacity change from 0 to 512 [ 38.828145][ T29] audit: type=1400 audit(1770165405.119:224): avc: denied { ioctl } for pid=3733 comm="syz.3.57" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 38.880440][ T3736] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.915376][ T3736] EXT4-fs (loop2): 1 truncate cleaned up [ 38.921608][ T3736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.989594][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.013957][ T3694] syz.4.53 uses obsolete (PF_INET,SOCK_PACKET) [ 39.021529][ T29] audit: type=1400 audit(1770165405.299:225): avc: denied { read write } for pid=3687 comm="syz.4.53" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.044729][ T29] audit: type=1400 audit(1770165405.299:226): avc: denied { open } for pid=3687 comm="syz.4.53" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.105571][ T29] audit: type=1400 audit(1770165405.309:227): avc: denied { shutdown } for pid=3687 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.125054][ T29] audit: type=1400 audit(1770165405.389:228): avc: denied { getopt } for pid=3687 comm="syz.4.53" lport=44192 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 39.318963][ T3591] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.395152][ T3591] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.421777][ T3591] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.445955][ T3591] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.505287][ T3591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.522570][ T3591] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.546244][ T29] audit: type=1400 audit(1770165405.819:229): avc: denied { write } for pid=3733 comm="syz.3.57" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.616506][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.623726][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.635491][ T29] audit: type=1400 audit(1770165405.929:230): avc: denied { getopt } for pid=3772 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.654818][ T29] audit: type=1400 audit(1770165405.929:231): avc: denied { setopt } for pid=3772 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.676583][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.683688][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.836970][ T3784] delete_channel: no stack [ 39.845977][ T29] audit: type=1400 audit(1770165406.139:232): avc: denied { write } for pid=3783 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 39.886605][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.905211][ T3591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.954153][ T3795] netlink: 44 bytes leftover after parsing attributes in process `syz.2.66'. [ 39.972366][ T3734] hub 3-0:1.0: USB hub found [ 40.002520][ T3734] hub 3-0:1.0: 8 ports detected [ 40.041335][ T3734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=36444 sclass=netlink_route_socket pid=3734 comm=syz.3.57 [ 40.088593][ T3804] loop4: detected capacity change from 0 to 512 [ 40.100189][ T3806] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.159683][ T3804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.170569][ T3810] bond1: Removing last arp target with arp_interval on [ 40.177834][ T3810] bond1: entered promiscuous mode [ 40.182944][ T3810] bond1: entered allmulticast mode [ 40.188594][ T3810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.190569][ T3804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.209534][ T3804] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.288561][ T3591] veth0_vlan: entered promiscuous mode [ 40.304317][ T3591] veth1_vlan: entered promiscuous mode [ 40.359104][ T3591] veth0_macvtap: entered promiscuous mode [ 40.388786][ T3591] veth1_macvtap: entered promiscuous mode [ 40.420297][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.430787][ T3591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.448679][ T3591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.463831][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.488210][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.528036][ T3837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.75'. [ 40.541546][ T3837] capability: warning: `syz.4.75' uses 32-bit capabilities (legacy support in use) [ 40.567862][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.588293][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.764884][ T3860] netlink: 'syz.1.83': attribute type 3 has an invalid length. [ 40.772679][ T3860] netlink: 'syz.1.83': attribute type 3 has an invalid length. [ 40.794363][ T2965] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 40.802236][ T2965] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 40.809763][ T2965] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 40.817481][ T2965] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 40.825107][ T2965] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 40.832573][ T2965] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 40.840086][ T2965] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 40.847593][ T2965] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 40.855008][ T2965] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 40.862540][ T2965] hid-generic 0103:0004:0000.0001: unknown main item tag 0x0 [ 40.886031][ T3868] netlink: 40 bytes leftover after parsing attributes in process `syz.5.87'. [ 40.896030][ T2965] hid-generic 0103:0004:0000.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 40.951920][ T3868] loop5: detected capacity change from 0 to 512 [ 40.969704][ T3822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.994458][ T3870] fido_id[3870]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.016445][ T3868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.034796][ T3822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.043142][ T3868] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.071921][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.089180][ T3887] loop1: detected capacity change from 0 to 128 [ 41.101882][ T3884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 41.118424][ T3884] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 41.132513][ T3884] batman_adv: batadv0: Adding interface: ip6gretap1 [ 41.139211][ T3884] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.166733][ T3884] batman_adv: batadv0: Interface activated: ip6gretap1 [ 41.198435][ T3894] syzkaller0: entered promiscuous mode [ 41.203983][ T3894] syzkaller0: entered allmulticast mode [ 41.249919][ T3890] loop4: detected capacity change from 0 to 128 [ 41.264133][ T3890] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 262163)! [ 41.274742][ T3890] EXT4-fs (loop4): group descriptors corrupted! [ 41.364945][ T3899] loop4: detected capacity change from 0 to 512 [ 41.373216][ T3899] ext4: Bad value for 'max_dir_size_kb' [ 41.399463][ T3901] netlink: 'syz.5.96': attribute type 5 has an invalid length. [ 41.412933][ T3899] loop4: detected capacity change from 0 to 2048 [ 41.422451][ T3901] 9pnet_fd: p9_fd_create_unix (3901): problem connecting socket: ./file1: -111 [ 41.448165][ T3904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 41.456937][ T3904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 41.496722][ T3906] loop7: detected capacity change from 0 to 16384 [ 41.509516][ T3899] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 41.563133][ T3899] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 41.574322][ T3899] team0: Port device batadv1 added [ 41.626606][ T3907] loop7: detected capacity change from 16384 to 0 [ 41.645799][ C0] I/O error, dev loop7, sector 2816 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 41.655695][ C0] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 41.740250][ T3906] loop5: detected capacity change from 0 to 4096 [ 41.751232][ T3906] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 41.872712][ T3918] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 41.880484][ T3918] netlink: 224 bytes leftover after parsing attributes in process `syz.1.102'. [ 41.903592][ T3921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 41.954759][ T3921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3921 comm=syz.4.103 [ 41.996576][ T3904] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.074923][ T3904] 9p: Unknown access argument .-%L$X``{U2rþ [ 42.074923][ T3904] GqA C": -22 [ 42.089101][ T3940] 9p: Bad value for 'wfdno' [ 42.156627][ T3949] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 42.204044][ T3946] program syz.4.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.216371][ T3949] EXT4-fs (loop5): orphan cleanup on readonly fs [ 42.225460][ T3949] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.107: Block bitmap for bg 0 marked uninitialized [ 42.264851][ T3953] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.282171][ T3949] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 42.304838][ T3949] EXT4-fs (loop5): 1 orphan inode deleted [ 42.317304][ T3958] netlink: 'syz.4.109': attribute type 1 has an invalid length. [ 42.334112][ T3953] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.344845][ T3949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.370286][ T3904] EXT4-fs: quotafile must be on filesystem root [ 42.377138][ T3961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 42.394509][ T3949] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 42.405056][ T3949] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 42.524384][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.534823][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.770736][ T3990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.825879][ T3990] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.861870][ T3996] netlink: 'syz.3.124': attribute type 4 has an invalid length. [ 42.914535][ T3990] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 42.926955][ T3990] EXT4-fs (loop2): This should not happen!! Data will be lost [ 42.926955][ T3990] [ 42.936728][ T3990] EXT4-fs (loop2): Total free blocks count 0 [ 42.942737][ T3990] EXT4-fs (loop2): Free/Dirty block details [ 42.948690][ T3990] EXT4-fs (loop2): free_blocks=2415919504 [ 42.954448][ T3990] EXT4-fs (loop2): dirty_blocks=32 [ 42.959700][ T3990] EXT4-fs (loop2): Block reservation details [ 42.965805][ T3990] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 43.045964][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.076554][ T4013] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.087645][ T3985] syz.1.121: attempt to access beyond end of device [ 43.087645][ T3985] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 43.105439][ T4013] program syz.5.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.325762][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 43.325782][ T29] audit: type=1400 audit(1770165409.619:361): avc: denied { accept } for pid=4026 comm="syz.2.134" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 43.388147][ T3985] syz.1.121: attempt to access beyond end of device [ 43.388147][ T3985] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 43.512880][ T3983] syz.1.121: attempt to access beyond end of device [ 43.512880][ T3983] loop1: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 43.526661][ T3983] Buffer I/O error on dev loop1, logical block 69, lost async page write [ 43.571874][ T4035] syzkaller0: entered promiscuous mode [ 43.577466][ T4035] syzkaller0: entered allmulticast mode [ 43.856418][ T29] audit: type=1326 audit(1770165410.149:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.5.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22263aeb9 code=0x7ffc0000 [ 43.891511][ T4053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.914217][ T4057] set_capacity_and_notify: 6 callbacks suppressed [ 43.914235][ T4057] loop4: detected capacity change from 0 to 512 [ 43.925637][ T29] audit: type=1326 audit(1770165410.169:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.5.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fd22263aeb9 code=0x7ffc0000 [ 43.950380][ T29] audit: type=1326 audit(1770165410.169:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4055 comm="syz.5.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd22263aeb9 code=0x7ffc0000 [ 43.976006][ T4053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.030329][ T4057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.046765][ T4052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.065486][ T4052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.086952][ T4057] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.154050][ T4057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.214267][ T4065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.244106][ T4065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.272300][ T4051] loop4: detected capacity change from 0 to 512 [ 44.299221][ T4051] EXT4-fs: Ignoring removed oldalloc option [ 44.306185][ T4051] ext4: Unknown parameter 'subj_type' [ 44.378620][ T4068] loop4: detected capacity change from 0 to 1024 [ 44.401493][ T4068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.415822][ T29] audit: type=1400 audit(1770165410.709:365): avc: denied { setattr } for pid=4067 comm="syz.4.145" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.429972][ T4068] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.145: inode #778331508: comm syz.4.145: iget: illegal inode # [ 44.451916][ T4068] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.145: error while reading EA inode 778331508 err=-117 [ 44.469458][ T4068] EXT4-fs error (device loop4): ext4_xattr_block_find:1879: inode #15: comm syz.4.145: corrupted xattr block 113: invalid header [ 44.495925][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.570982][ T29] audit: type=1400 audit(1770165410.859:366): avc: denied { listen } for pid=4071 comm="syz.4.146" lport=60890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.621985][ T4075] loop1: detected capacity change from 0 to 512 [ 44.629037][ T4075] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 44.639121][ T4075] EXT4-fs (loop1): invalid journal inode [ 44.644988][ T4075] EXT4-fs (loop1): can't get journal size [ 44.666148][ T4075] EXT4-fs (loop1): 1 truncate cleaned up [ 44.672431][ T4075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.708943][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.769906][ T4080] __nla_validate_parse: 13 callbacks suppressed [ 44.769925][ T4080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 44.790916][ T29] audit: type=1400 audit(1770165411.079:367): avc: denied { getopt } for pid=4081 comm="syz.3.148" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.912944][ T4093] capability: warning: `syz.1.156' uses deprecated v2 capabilities in a way that may be insecure [ 45.007564][ T29] audit: type=1400 audit(1770165411.299:368): avc: denied { ioctl } for pid=4092 comm="syz.1.156" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.016950][ T4093] syzkaller0: entered promiscuous mode [ 45.039049][ T4093] syzkaller0: entered allmulticast mode [ 45.062439][ T4098] bridge_slave_0: left allmulticast mode [ 45.068167][ T4098] bridge_slave_0: left promiscuous mode [ 45.074346][ T4098] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.090259][ T4098] bridge_slave_1: left allmulticast mode [ 45.096190][ T4098] bridge_slave_1: left promiscuous mode [ 45.102212][ T4098] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.113963][ T4098] bond0: (slave bond_slave_0): Releasing backup interface [ 45.125001][ T4098] bond0: (slave bond_slave_1): Releasing backup interface [ 45.138687][ T4098] team0: Port device team_slave_0 removed [ 45.148319][ T4098] team0: Port device team_slave_1 removed [ 45.155593][ T4098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.163032][ T4098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.174391][ T4098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.182097][ T4098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.192735][ T4098] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.317284][ T4108] loop5: detected capacity change from 0 to 512 [ 45.325586][ T4108] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 45.339402][ T4108] EXT4-fs (loop5): invalid journal inode [ 45.345318][ T4108] EXT4-fs (loop5): can't get journal size [ 45.363367][ T4108] EXT4-fs (loop5): 1 truncate cleaned up [ 45.376219][ T4108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.426003][ T4106] hub 3-0:1.0: USB hub found [ 45.430742][ T4106] hub 3-0:1.0: 8 ports detected [ 45.471874][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.512384][ T29] audit: type=1400 audit(1770165411.799:369): avc: denied { read } for pid=4115 comm="syz.5.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 45.614749][ T4123] cgroup: fork rejected by pids controller in /syz4 [ 45.873470][ T4232] hub 3-0:1.0: USB hub found [ 45.882329][ T4232] hub 3-0:1.0: 8 ports detected [ 46.035239][ T4347] loop5: detected capacity change from 0 to 512 [ 46.058318][ T4347] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.076533][ T4347] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.084471][ T29] audit: type=1400 audit(1770165412.369:370): avc: denied { create } for pid=4350 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 46.098875][ T4347] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.172: lblock 23 mapped to illegal pblock 18 (length 1) [ 46.120874][ T4347] EXT4-fs (loop5): Remounting filesystem read-only [ 46.137682][ T3591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.196346][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 46.693809][ T4379] loop3: detected capacity change from 0 to 512 [ 46.708463][ T4379] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.740216][ T4379] EXT4-fs (loop3): 1 truncate cleaned up [ 46.756238][ T4379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.900949][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 46.963252][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'. [ 47.375702][ T4415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.405685][ T4415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.428241][ T4418] loop1: detected capacity change from 0 to 512 [ 47.467289][ T4418] EXT4-fs: Ignoring removed orlov option [ 47.512496][ T4418] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 47.545788][ T4418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 47.569782][ T4418] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.196: corrupted in-inode xattr: e_value size too large [ 47.608358][ T4418] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.196: couldn't read orphan inode 15 (err -117) [ 47.632726][ T4418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.648813][ T4418] netlink: 52 bytes leftover after parsing attributes in process `syz.1.196'. [ 47.707447][ T3322] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 47.718406][ T3322] CPU: 1 UID: 0 PID: 3322 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.718435][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.718451][ T3322] Call Trace: [ 47.718491][ T3322] [ 47.718502][ T3322] __dump_stack+0x1d/0x30 [ 47.718534][ T3322] dump_stack_lvl+0x95/0xd0 [ 47.718565][ T3322] dump_stack+0x15/0x1b [ 47.718619][ T3322] dump_header+0x80/0x240 [ 47.718640][ T3322] oom_kill_process+0x295/0x350 [ 47.718674][ T3322] out_of_memory+0x97d/0xb80 [ 47.718730][ T3322] try_charge_memcg+0x62e/0xa10 [ 47.718768][ T3322] __mem_cgroup_charge+0x65/0x150 [ 47.718814][ T3322] filemap_add_folio+0x110/0x350 [ 47.718849][ T3322] __filemap_get_folio_mpol+0x326/0x680 [ 47.718920][ T3322] filemap_fault+0x473/0xbb0 [ 47.718965][ T3322] __do_fault+0xbc/0x200 [ 47.719044][ T3322] handle_mm_fault+0x11d7/0x3030 [ 47.719080][ T3322] ? vma_start_read+0x1c7/0x2c0 [ 47.719186][ T3322] do_user_addr_fault+0x62f/0x1050 [ 47.719305][ T3322] exc_page_fault+0x62/0xa0 [ 47.719334][ T3322] asm_exc_page_fault+0x26/0x30 [ 47.719355][ T3322] RIP: 0033:0x7f92705d8fb4 [ 47.719513][ T3322] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 c8 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c6 ed 00 48 01 d1 [ 47.719536][ T3322] RSP: 002b:00007ffd004e3550 EFLAGS: 00010202 [ 47.719613][ T3322] RAX: 0000001b33a24000 RBX: 0000000000000056 RCX: 000000000000b798 [ 47.719626][ T3322] RDX: 000000000a2c368b RSI: 00007ffd004e35e0 RDI: 0000000000000001 [ 47.719639][ T3322] RBP: 00007ffd004e358c R08: 0000000026ce48d3 R09: 7fffffffffffffff [ 47.719657][ T3322] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 47.719730][ T3322] R13: 00000000000927c0 R14: 000000000000b6ae R15: 00007ffd004e35e0 [ 47.719756][ T3322] [ 47.719762][ T3322] memory: usage 307200kB, limit 307200kB, failcnt 670 [ 47.907846][ T3322] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 47.915789][ T3322] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 47.923154][ T3322] Memory cgroup stats for /syz3: [ 47.925340][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.927828][ T3322] cache 4096 [ 47.942586][ T3322] rss 0 [ 47.945374][ T3322] shmem 0 [ 47.948380][ T3322] mapped_file 0 [ 47.951860][ T3322] dirty 0 [ 47.954869][ T3322] writeback 0 [ 47.958195][ T3322] workingset_refault_anon 99 [ 47.962801][ T3322] workingset_refault_file 892 [ 47.967577][ T3322] swap 450560 [ 47.970875][ T3322] swapcached 0 [ 47.974275][ T3322] pgpgin 31225 [ 47.977841][ T3322] pgpgout 31224 [ 47.981380][ T3322] pgfault 22896 [ 47.984876][ T3322] pgmajfault 79 [ 47.988407][ T3322] inactive_anon 0 [ 47.992080][ T3322] active_anon 0 [ 47.995599][ T3322] inactive_file 4096 [ 47.999588][ T3322] active_file 0 [ 48.003072][ T3322] unevictable 0 [ 48.006576][ T3322] hierarchical_memory_limit 314572800 [ 48.011965][ T3322] hierarchical_memsw_limit 9223372036854771712 [ 48.018166][ T3322] total_cache 4096 [ 48.021992][ T3322] total_rss 0 [ 48.025308][ T3322] total_shmem 0 [ 48.028831][ T3322] total_mapped_file 0 [ 48.032841][ T3322] total_dirty 0 [ 48.036414][ T3322] total_writeback 0 [ 48.040245][ T3322] total_workingset_refault_anon 99 [ 48.045370][ T3322] total_workingset_refault_file 892 [ 48.050608][ T3322] total_swap 450560 [ 48.054453][ T3322] total_swapcached 0 [ 48.058427][ T3322] total_pgpgin 31225 [ 48.062521][ T3322] total_pgpgout 31224 [ 48.066599][ T3322] total_pgfault 22896 [ 48.070608][ T3322] total_pgmajfault 79 [ 48.074605][ T3322] total_inactive_anon 0 [ 48.078846][ T3322] total_active_anon 0 [ 48.082847][ T3322] total_inactive_file 4096 [ 48.087316][ T3322] total_active_file 0 [ 48.091310][ T3322] total_unevictable 0 [ 48.095301][ T3322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.183,pid=4378,uid=0 [ 48.110083][ T3322] Memory cgroup out of memory: Killed process 4378 (syz.3.183) total-vm:96048kB, anon-rss:1204kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 48.196702][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.312379][ T4435] loop1: detected capacity change from 0 to 512 [ 48.320605][ T4429] loop5: detected capacity change from 0 to 8192 [ 48.331440][ T4435] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.356850][ T4429] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 48.365485][ T4429] FAT-fs (loop5): Filesystem has been set read-only [ 48.375116][ T4435] EXT4-fs (loop1): 1 truncate cleaned up [ 48.387789][ T4435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.447141][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.526145][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 48.526163][ T29] audit: type=1326 audit(1770165414.819:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4ad5aeb9 code=0x7ffc0000 [ 48.559527][ T29] audit: type=1326 audit(1770165414.849:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fea4ad5aeb9 code=0x7ffc0000 [ 48.582911][ T29] audit: type=1326 audit(1770165414.849:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4ad5aeb9 code=0x7ffc0000 [ 48.606277][ T29] audit: type=1326 audit(1770165414.849:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4ad5aeb9 code=0x7ffc0000 [ 48.619618][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 48.630012][ T29] audit: type=1326 audit(1770165414.849:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fea4ad5aeb9 code=0x7ffc0000 [ 48.647824][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.204'. [ 48.661592][ T29] audit: type=1326 audit(1770165414.849:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4ad5aeb9 code=0x7ffc0000 [ 48.693666][ T29] audit: type=1326 audit(1770165414.849:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4ad5aeb9 code=0x7ffc0000 [ 48.725752][ T29] audit: type=1326 audit(1770165414.899:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fea4ad5aeb9 code=0x7ffc0000 [ 48.749139][ T29] audit: type=1326 audit(1770165414.899:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4ad5aeb9 code=0x7ffc0000 [ 48.772688][ T29] audit: type=1326 audit(1770165414.899:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4437 comm="syz.1.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4ad5aeb9 code=0x7ffc0000 [ 48.819627][ T4443] FAULT_INJECTION: forcing a failure. [ 48.819627][ T4443] name failslab, interval 1, probability 0, space 0, times 1 [ 48.832330][ T4443] CPU: 1 UID: 0 PID: 4443 Comm: syz.5.205 Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.832550][ T4443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 48.832569][ T4443] Call Trace: [ 48.832578][ T4443] [ 48.832589][ T4443] __dump_stack+0x1d/0x30 [ 48.832697][ T4443] dump_stack_lvl+0x95/0xd0 [ 48.832728][ T4443] dump_stack+0x15/0x1b [ 48.832752][ T4443] should_fail_ex+0x263/0x280 [ 48.832845][ T4443] should_failslab+0x8c/0xb0 [ 48.832988][ T4443] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 48.833021][ T4443] ? __alloc_skb+0x2f0/0x4b0 [ 48.833064][ T4443] __alloc_skb+0x2f0/0x4b0 [ 48.833104][ T4443] ? __alloc_skb+0x219/0x4b0 [ 48.833179][ T4443] inet6_rt_notify+0x8b/0x1d0 [ 48.833211][ T4443] fib6_del+0x7e4/0x910 [ 48.833245][ T4443] ? fib6_ifdown+0xce/0x330 [ 48.833281][ T4443] fib6_clean_node+0x18c/0x2a0 [ 48.833332][ T4443] fib6_walk_continue+0x39f/0x440 [ 48.833371][ T4443] __fib6_clean_all+0x21c/0x350 [ 48.833479][ T4443] ? __pfx_fib6_ifdown+0x10/0x10 [ 48.833519][ T4443] ? __pfx_fib6_clean_node+0x10/0x10 [ 48.833553][ T4443] ? __pfx_fib6_ifdown+0x10/0x10 [ 48.833658][ T4443] ? __pfx_fib6_ifdown+0x10/0x10 [ 48.833694][ T4443] fib6_clean_all+0x2a/0x40 [ 48.833768][ T4443] rt6_disable_ip+0xb0/0x590 [ 48.833797][ T4443] ? consume_skb+0x71/0x140 [ 48.833842][ T4443] addrconf_ifdown+0x94/0xf90 [ 48.833927][ T4443] ? __pfx_cbs_dev_notifier+0x10/0x10 [ 48.834030][ T4443] ? tls_dev_event+0x47c/0x9b0 [ 48.834065][ T4443] addrconf_notify+0x222/0x8f0 [ 48.834243][ T4443] ? __pfx_addrconf_notify+0x10/0x10 [ 48.834282][ T4443] raw_notifier_call_chain+0x6f/0x1b0 [ 48.834312][ T4443] ? call_netdevice_notifiers_info+0x80/0xd0 [ 48.834339][ T4443] call_netdevice_notifiers_info+0x92/0xd0 [ 48.834394][ T4443] netif_set_mtu_ext+0x3e3/0x520 [ 48.834485][ T4443] do_setlink+0x670/0x2940 [ 48.834517][ T4443] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 48.834577][ T4443] ? __list_del_entry_valid_or_report+0x65/0x130 [ 48.834613][ T4443] ? __mutex_lock+0xa20/0xe30 [ 48.834662][ T4443] ? full_name_hash+0x92/0xe0 [ 48.834776][ T4443] rtnl_newlink+0xea4/0x1370 [ 48.834842][ T4443] ? skb_network_protocol+0x329/0x420 [ 48.834986][ T4443] ? __rcu_read_unlock+0x4e/0x70 [ 48.835027][ T4443] ? avc_has_perm_noaudit+0xab/0x130 [ 48.835072][ T4443] ? cred_has_capability+0x224/0x290 [ 48.835140][ T4443] ? selinux_capable+0x31/0x40 [ 48.835166][ T4443] ? security_capable+0x7b/0x90 [ 48.835202][ T4443] ? ns_capable+0x7c/0xb0 [ 48.835238][ T4443] ? __pfx_rtnl_newlink+0x10/0x10 [ 48.835284][ T4443] rtnetlink_rcv_msg+0x64b/0x720 [ 48.835321][ T4443] netlink_rcv_skb+0x123/0x220 [ 48.835437][ T4443] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 48.835466][ T4443] rtnetlink_rcv+0x1c/0x30 [ 48.835492][ T4443] netlink_unicast+0x5c0/0x690 [ 48.835621][ T4443] netlink_sendmsg+0x5c8/0x6f0 [ 48.835684][ T4443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 48.835757][ T4443] ____sys_sendmsg+0x5af/0x600 [ 48.835780][ T4443] ___sys_sendmsg+0x195/0x1e0 [ 48.835853][ T4443] __x64_sys_sendmsg+0xd4/0x160 [ 48.835887][ T4443] x64_sys_call+0x17ba/0x3000 [ 48.835923][ T4443] do_syscall_64+0xc0/0x2a0 [ 48.835973][ T4443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.836080][ T4443] RIP: 0033:0x7fd22263aeb9 [ 48.836102][ T4443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 48.836162][ T4443] RSP: 002b:00007fd221097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.836182][ T4443] RAX: ffffffffffffffda RBX: 00007fd2228b5fa0 RCX: 00007fd22263aeb9 [ 48.836196][ T4443] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000003 [ 48.836209][ T4443] RBP: 00007fd221097090 R08: 0000000000000000 R09: 0000000000000000 [ 48.836222][ T4443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.836263][ T4443] R13: 00007fd2228b6038 R14: 00007fd2228b5fa0 R15: 00007fff4d1af688 [ 48.836291][ T4443] [ 49.238681][ T4443] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 49.334348][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.207'. [ 49.343549][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.207'. [ 49.358334][ T4451] loop3: detected capacity change from 0 to 512 [ 49.386763][ T4451] EXT4-fs: Ignoring removed mblk_io_submit option [ 49.398924][ T4451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.419208][ T4451] EXT4-fs (loop3): 1 truncate cleaned up [ 49.452665][ T4451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.476775][ T4458] loop5: detected capacity change from 0 to 256 [ 49.518199][ T4458] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.618101][ T4472] ================================================================== [ 49.626248][ T4472] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 49.634287][ T4472] [ 49.636651][ T4472] write to 0xffff888107addcfc of 4 bytes by task 4451 on cpu 0: [ 49.644308][ T4472] xas_set_mark+0x12b/0x140 [ 49.648860][ T4472] tag_pages_for_writeback+0xe3/0x2e0 [ 49.654289][ T4472] ext4_do_writepages+0x6a8/0x2800 [ 49.659436][ T4472] ext4_writepages+0x18f/0x320 [ 49.664235][ T4472] do_writepages+0x1c6/0x310 [ 49.668963][ T4472] file_write_and_wait_range+0x178/0x2f0 [ 49.674628][ T4472] generic_buffers_fsync_noflush+0x45/0x130 [ 49.680553][ T4472] ext4_sync_file+0x1aa/0x680 [ 49.685243][ T4472] vfs_fsync_range+0x10d/0x130 [ 49.690023][ T4472] ext4_buffered_write_iter+0x34f/0x3c0 [ 49.695609][ T4472] ext4_file_write_iter+0x380/0xf70 [ 49.700837][ T4472] iter_file_splice_write+0x6bc/0xa80 [ 49.706221][ T4472] direct_splice_actor+0x156/0x2a0 [ 49.711352][ T4472] splice_direct_to_actor+0x311/0x670 [ 49.716764][ T4472] do_splice_direct+0x119/0x1a0 [ 49.721638][ T4472] do_sendfile+0x382/0x650 [ 49.726086][ T4472] __x64_sys_sendfile64+0x105/0x150 [ 49.731324][ T4472] x64_sys_call+0x2db1/0x3000 [ 49.736110][ T4472] do_syscall_64+0xc0/0x2a0 [ 49.740639][ T4472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.746552][ T4472] [ 49.748890][ T4472] read to 0xffff888107addcfc of 4 bytes by task 4472 on cpu 1: [ 49.756535][ T4472] file_write_and_wait_range+0x130/0x2f0 [ 49.762196][ T4472] generic_buffers_fsync_noflush+0x45/0x130 [ 49.768113][ T4472] ext4_sync_file+0x1aa/0x680 [ 49.772806][ T4472] vfs_fsync_range+0x10d/0x130 [ 49.777589][ T4472] ext4_buffered_write_iter+0x34f/0x3c0 [ 49.783161][ T4472] ext4_file_write_iter+0x380/0xf70 [ 49.788410][ T4472] iter_file_splice_write+0x6bc/0xa80 [ 49.793805][ T4472] direct_splice_actor+0x156/0x2a0 [ 49.798938][ T4472] splice_direct_to_actor+0x311/0x670 [ 49.804336][ T4472] do_splice_direct+0x119/0x1a0 [ 49.809195][ T4472] do_sendfile+0x382/0x650 [ 49.813647][ T4472] __x64_sys_sendfile64+0x105/0x150 [ 49.818879][ T4472] x64_sys_call+0x2db1/0x3000 [ 49.823589][ T4472] do_syscall_64+0xc0/0x2a0 [ 49.828119][ T4472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.834034][ T4472] [ 49.836373][ T4472] value changed: 0x02000021 -> 0x04000021 [ 49.842113][ T4472] [ 49.844487][ T4472] Reported by Kernel Concurrency Sanitizer on: [ 49.850675][ T4472] CPU: 1 UID: 0 PID: 4472 Comm: syz.3.209 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.860324][ T4472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.870394][ T4472] ================================================================== [ 49.970154][ T4451] EXT4-fs (loop3): Online defrag not supported for non-extent files [ 50.120184][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.