last executing test programs: 2.244929638s ago: executing program 4 (id=130): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x0, 0x0, 0x148, 0x0, 0x148, 0x200, 0x240, 0x240, 0x200, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$char_usb(r1, &(0x7f0000000100)=""/174, 0xae) 2.180965912s ago: executing program 4 (id=131): r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x1bf58, 0x10000, 0x2, 0x2d0}, &(0x7f0000000440), &(0x7f0000000400)) io_uring_enter(r1, 0x7b1d, 0x693c, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f00000000c0)={0x5, 0x6}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x15, 0x3}, 0x7) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x24020000) syz_clone(0x12003080, 0x0, 0x0, 0x0, 0x0, 0x0) 2.013042272s ago: executing program 1 (id=135): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40001) 1.977141794s ago: executing program 1 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.808521704s ago: executing program 0 (id=138): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="b0", 0x1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_read_part_table(0x1051, &(0x7f0000001080)="$eJzszzGqwlAQBdCb//OIdi5Ba1cRW2tbW1t3oCC4DWvdozzBBAsXICnOaQYuwww3TMZ1GLV+5V2aJLck/59s+zx2yXm5yqX/S2bzcXOfulmnDk4pTe59m2ZR0iaHJGU88H6ye/yoGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABM2isAAP//k04TRw==") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x66960000) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfd44) 1.580276727s ago: executing program 4 (id=139): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xf) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, 0x0, 0x0) sendmsg(r1, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/225, 0xe1}], 0x1}, 0x1ff}], 0x1, 0x10100, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 1.576699677s ago: executing program 3 (id=140): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24000000) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8804}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.473973994s ago: executing program 4 (id=141): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.372281289s ago: executing program 4 (id=142): socket$nl_route(0x10, 0x3, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/92, 0x5c}], 0x1) 1.366187629s ago: executing program 1 (id=143): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000d80)="923dd0992c", 0x5}], 0x1, 0x5, 0x0, 0x2) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 1.350262391s ago: executing program 0 (id=144): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) msgsnd(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x7005, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) 1.346969291s ago: executing program 3 (id=145): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x13bb711e) 1.198476639s ago: executing program 0 (id=147): socket$packet(0x11, 0x2, 0x300) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40010000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) 809.427462ms ago: executing program 2 (id=151): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) socket$inet(0x2, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000040)={[{@mode={'mode', 0x3d, 0x2}}, {@nocompress}, {}, {@uid}, {@check_strict}, {@uid}, {@gid}, {@cruft}, {@nocompress}]}, 0x1, 0xa4b, &(0x7f0000000180)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 724.273947ms ago: executing program 3 (id=152): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x49, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000000)) write(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="070200000000000c00000100000004000480080001000300000004000880080002000100000054000c801c000b8008000a"], 0x80}}, 0x800) 633.724562ms ago: executing program 2 (id=153): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 510.1168ms ago: executing program 2 (id=154): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r1) 478.108071ms ago: executing program 4 (id=155): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x806, 0x1, {0x5, 0xa}, {0x4, 0x7}, @cond=[{0x0, 0x9, 0x1, 0x7, 0xfffe, 0x8}, {0x291, 0x4, 0x9, 0x5, 0x1fc, 0x3}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 453.875163ms ago: executing program 3 (id=156): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 430.045574ms ago: executing program 2 (id=157): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r1, 0x0, 0x0, 0x8f, 0x3b16) lseek(r1, 0x4, 0x1) poll(&(0x7f0000000300)=[{r0, 0x80}], 0x1, 0x101) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 313.426281ms ago: executing program 1 (id=158): r0 = socket$packet(0x11, 0xa, 0x300) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000d80)={'pim6reg\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="840f280064423ed2da", 0x9}], 0x1}}], 0x1, 0x1) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xfd44) socket$inet_icmp_raw(0x2, 0x3, 0x1) 294.919282ms ago: executing program 3 (id=159): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) set_mempolicy(0x8003, 0x0, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000040)=0xc, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 277.095053ms ago: executing program 0 (id=160): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 248.062915ms ago: executing program 3 (id=161): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x1b, 0x0, "bb41053574544524474004200b424e7a03000000000000008a0e2f964e0000c503bb2d8afaa4ff1f56c54de76d8b6d2c0100ffffffffffff7bbe00000000000000f1864da3290d00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 187.535139ms ago: executing program 1 (id=162): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_setup(0x512, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(0x0, 0x2000000002075f, 0x12382) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a0101"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 141.746311ms ago: executing program 2 (id=163): r0 = socket$kcm(0x2, 0x5, 0x84) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x10, 0x3}, {0x10000002, 0x4, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)="be", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x20000010) 117.146183ms ago: executing program 0 (id=164): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000800)=0xffffffffffffffff, 0x4) 100.443554ms ago: executing program 2 (id=165): sched_setattr(0x0, 0x0, 0x0) epoll_create1(0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x3e00000000000000) 86.674565ms ago: executing program 0 (id=166): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000280)='2', 0x1, 0x8080c61) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c) open(0x0, 0x64042, 0x178) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r1, 0x100c17a) truncate(&(0x7f0000000000)='./file2\x00', 0x0) 0s ago: executing program 1 (id=167): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = getpgid(0xffffffffffffffff) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x2, 0x5004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x40002) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x15000000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 26.778528][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 26.778546][ T29] audit: type=1400 audit(1769820783.937:70): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.807567][ T29] audit: type=1400 audit(1769820783.967:71): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.808277][ T3299] cgroup: Unknown subsys name 'net' [ 26.835447][ T29] audit: type=1400 audit(1769820783.997:72): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.975717][ T3299] cgroup: Unknown subsys name 'cpuset' [ 26.981824][ T3299] cgroup: Unknown subsys name 'rlimit' [ 27.151014][ T29] audit: type=1400 audit(1769820784.307:73): avc: denied { setattr } for pid=3299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.176089][ T29] audit: type=1400 audit(1769820784.307:74): avc: denied { create } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.196934][ T29] audit: type=1400 audit(1769820784.307:75): avc: denied { write } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.217503][ T29] audit: type=1400 audit(1769820784.307:76): avc: denied { read } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.237820][ T29] audit: type=1400 audit(1769820784.307:77): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.262703][ T29] audit: type=1400 audit(1769820784.307:78): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.272154][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.286261][ T29] audit: type=1400 audit(1769820784.337:79): avc: denied { read } for pid=3038 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.341668][ T3299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.349926][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 28.389800][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 28.447236][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.454872][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.462261][ T3310] bridge_slave_0: entered allmulticast mode [ 28.468994][ T3310] bridge_slave_0: entered promiscuous mode [ 28.482260][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.489556][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.496938][ T3310] bridge_slave_1: entered allmulticast mode [ 28.503359][ T3310] bridge_slave_1: entered promiscuous mode [ 28.543086][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.553631][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.565568][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.572635][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.579939][ T3311] bridge_slave_0: entered allmulticast mode [ 28.586455][ T3311] bridge_slave_0: entered promiscuous mode [ 28.593112][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.600245][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.607378][ T3311] bridge_slave_1: entered allmulticast mode [ 28.613753][ T3311] bridge_slave_1: entered promiscuous mode [ 28.657291][ T3310] team0: Port device team_slave_0 added [ 28.668554][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.680825][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.691089][ T3310] team0: Port device team_slave_1 added [ 28.697051][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.708984][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.753098][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.760097][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.786180][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.803744][ T3311] team0: Port device team_slave_0 added [ 28.816442][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.823561][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.850168][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.861882][ T3311] team0: Port device team_slave_1 added [ 28.897200][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.914898][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.922057][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.949146][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.972972][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.980088][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.987362][ T3317] bridge_slave_0: entered allmulticast mode [ 28.993685][ T3317] bridge_slave_0: entered promiscuous mode [ 29.000230][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.007450][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.033542][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.061550][ T3310] hsr_slave_0: entered promiscuous mode [ 29.067665][ T3310] hsr_slave_1: entered promiscuous mode [ 29.073778][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.081002][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.088185][ T3317] bridge_slave_1: entered allmulticast mode [ 29.094674][ T3317] bridge_slave_1: entered promiscuous mode [ 29.106304][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.113501][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.120832][ T3314] bridge_slave_0: entered allmulticast mode [ 29.127376][ T3314] bridge_slave_0: entered promiscuous mode [ 29.148311][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.157582][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.164781][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.172125][ T3314] bridge_slave_1: entered allmulticast mode [ 29.178765][ T3314] bridge_slave_1: entered promiscuous mode [ 29.199971][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.243376][ T3311] hsr_slave_0: entered promiscuous mode [ 29.249585][ T3311] hsr_slave_1: entered promiscuous mode [ 29.255611][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 29.261346][ T3311] Cannot create hsr debugfs directory [ 29.268420][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.277659][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.284791][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.292434][ T3315] bridge_slave_0: entered allmulticast mode [ 29.299001][ T3315] bridge_slave_0: entered promiscuous mode [ 29.310974][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.318266][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.325617][ T3315] bridge_slave_1: entered allmulticast mode [ 29.331914][ T3315] bridge_slave_1: entered promiscuous mode [ 29.350170][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.360826][ T3317] team0: Port device team_slave_0 added [ 29.381348][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.395427][ T3317] team0: Port device team_slave_1 added [ 29.413654][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.437366][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.444307][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.471125][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.486738][ T3314] team0: Port device team_slave_0 added [ 29.503025][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.510033][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.536194][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.547585][ T3314] team0: Port device team_slave_1 added [ 29.556824][ T3315] team0: Port device team_slave_0 added [ 29.565389][ T3315] team0: Port device team_slave_1 added [ 29.612424][ T3317] hsr_slave_0: entered promiscuous mode [ 29.618486][ T3317] hsr_slave_1: entered promiscuous mode [ 29.624285][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 29.630071][ T3317] Cannot create hsr debugfs directory [ 29.640127][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.647131][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.673237][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.684420][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.691609][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.718889][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.747452][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.754771][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.781343][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.792369][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.799443][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.825538][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.891050][ T3314] hsr_slave_0: entered promiscuous mode [ 29.897262][ T3314] hsr_slave_1: entered promiscuous mode [ 29.903558][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 29.909396][ T3314] Cannot create hsr debugfs directory [ 29.921158][ T3315] hsr_slave_0: entered promiscuous mode [ 29.927398][ T3315] hsr_slave_1: entered promiscuous mode [ 29.933283][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 29.939045][ T3315] Cannot create hsr debugfs directory [ 30.000727][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.009516][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.022227][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.033942][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.103251][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.119867][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.131669][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.140690][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.149981][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.159167][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.171332][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.184488][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.226006][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.245298][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.253071][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.262172][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.274986][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.284757][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.296429][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.303796][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.313717][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.321038][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.356966][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.370661][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.383216][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.393242][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.412535][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.419971][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.437749][ T3348] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.444876][ T3348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.464485][ T3348] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.471716][ T3348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.503730][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.539735][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.551655][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.567351][ T3348] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.574396][ T3348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.590703][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.607852][ T3348] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.614971][ T3348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.629393][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.664321][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.673776][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.683679][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.690765][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.707590][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.718159][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.725337][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.739796][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.747087][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.763898][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.774896][ T3348] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.782006][ T3348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.853016][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.896832][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.955611][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.965810][ T3311] veth0_vlan: entered promiscuous mode [ 30.976483][ T3310] veth0_vlan: entered promiscuous mode [ 30.985801][ T3310] veth1_vlan: entered promiscuous mode [ 30.996897][ T3311] veth1_vlan: entered promiscuous mode [ 31.021437][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.035882][ T3310] veth0_macvtap: entered promiscuous mode [ 31.071316][ T3311] veth0_macvtap: entered promiscuous mode [ 31.083311][ T3310] veth1_macvtap: entered promiscuous mode [ 31.096087][ T3311] veth1_macvtap: entered promiscuous mode [ 31.124120][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.140119][ T3317] veth0_vlan: entered promiscuous mode [ 31.151748][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.162168][ T3314] veth0_vlan: entered promiscuous mode [ 31.174765][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.183111][ T3317] veth1_vlan: entered promiscuous mode [ 31.190940][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.210792][ T3348] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220049][ T3314] veth1_vlan: entered promiscuous mode [ 31.230274][ T3348] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.239280][ T3348] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.256151][ T3315] veth0_vlan: entered promiscuous mode [ 31.264702][ T3348] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.277476][ T3317] veth0_macvtap: entered promiscuous mode [ 31.285051][ T3317] veth1_macvtap: entered promiscuous mode [ 31.297691][ T3348] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.310580][ T3315] veth1_vlan: entered promiscuous mode [ 31.318808][ T3348] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.330861][ T3314] veth0_macvtap: entered promiscuous mode [ 31.338740][ T3314] veth1_macvtap: entered promiscuous mode [ 31.362109][ T3348] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.362917][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.374790][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.397659][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.410468][ T3348] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.424402][ T3315] veth0_macvtap: entered promiscuous mode [ 31.452121][ T3315] veth1_macvtap: entered promiscuous mode [ 31.463336][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.477287][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.503176][ T3487] loop4: detected capacity change from 0 to 128 [ 31.504943][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.533264][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.542881][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.556095][ T3487] syz.4.5: attempt to access beyond end of device [ 31.556095][ T3487] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 31.561874][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.580140][ T3487] syz.4.5: attempt to access beyond end of device [ 31.580140][ T3487] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 31.599029][ T3487] syz.4.5: attempt to access beyond end of device [ 31.599029][ T3487] loop4: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 31.606792][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.636508][ C0] hrtimer: interrupt took 37137 ns [ 31.675011][ T3487] syz.4.5: attempt to access beyond end of device [ 31.675011][ T3487] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 31.691554][ T3487] syz.4.5: attempt to access beyond end of device [ 31.691554][ T3487] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 31.692806][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.706115][ T3487] syz.4.5: attempt to access beyond end of device [ 31.706115][ T3487] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 31.731576][ T3487] syz.4.5: attempt to access beyond end of device [ 31.731576][ T3487] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 31.746169][ T3487] syz.4.5: attempt to access beyond end of device [ 31.746169][ T3487] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 31.759886][ T3487] syz.4.5: attempt to access beyond end of device [ 31.759886][ T3487] loop4: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 31.790987][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.804038][ T3489] syz.4.5: attempt to access beyond end of device [ 31.804038][ T3489] loop4: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 31.841534][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.853535][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 31.853550][ T29] audit: type=1400 audit(1769820789.007:115): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.862520][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.884907][ T29] audit: type=1400 audit(1769820789.007:116): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.938285][ T3495] loop3: detected capacity change from 0 to 256 [ 31.949224][ T3495] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.982910][ T3497] loop2: detected capacity change from 0 to 1024 [ 31.996018][ T3495] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.015783][ T29] audit: type=1400 audit(1769820789.077:117): avc: denied { ioctl } for pid=3317 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.043440][ T29] audit: type=1400 audit(1769820789.127:118): avc: denied { create } for pid=3496 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 32.044156][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.063788][ T29] audit: type=1400 audit(1769820789.137:119): avc: denied { create } for pid=3496 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.094919][ T29] audit: type=1400 audit(1769820789.147:120): avc: denied { map_create } for pid=3498 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.118424][ T29] audit: type=1400 audit(1769820789.147:121): avc: denied { map_read map_write } for pid=3498 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.160732][ T29] audit: type=1400 audit(1769820789.257:122): avc: denied { create } for pid=3500 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 32.183973][ T29] audit: type=1400 audit(1769820789.307:123): avc: denied { create } for pid=3500 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.207762][ T29] audit: type=1400 audit(1769820789.307:124): avc: denied { getopt } for pid=3500 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.219830][ T3489] Buffer I/O error on dev loop4, logical block 305, async page read [ 32.242256][ T3505] Illegal XDP return value 4294967294 on prog (id 2) dev syz_tun, expect packet loss! [ 32.247738][ T3506] loop1: detected capacity change from 0 to 1024 [ 32.262654][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.263006][ T3497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.273235][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.298770][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.307252][ T3489] Buffer I/O error on dev loop4, logical block 306, async page read [ 32.309754][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.332155][ T3506] ======================================================= [ 32.332155][ T3506] WARNING: The mand mount option has been deprecated and [ 32.332155][ T3506] and is ignored by this kernel. Remove the mand [ 32.332155][ T3506] option from the mount to silence this warning. [ 32.332155][ T3506] ======================================================= [ 32.372572][ T3489] Buffer I/O error on dev loop4, logical block 307, async page read [ 32.395526][ T3506] EXT4-fs: Ignoring removed bh option [ 32.413718][ T3489] Buffer I/O error on dev loop4, logical block 308, async page read [ 32.433445][ T3506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.454276][ T3489] Buffer I/O error on dev loop4, logical block 309, async page read [ 32.460629][ T3514] loop0: detected capacity change from 0 to 512 [ 32.470750][ T3489] Buffer I/O error on dev loop4, logical block 310, async page read [ 32.479694][ T3489] Buffer I/O error on dev loop4, logical block 311, async page read [ 32.488896][ T3489] Buffer I/O error on dev loop4, logical block 312, async page read [ 32.499818][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.511097][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.544300][ T3516] GUP no longer grows the stack in syz.4.12 (3516): 200000004000-200000005000 (200000001000) [ 32.556080][ T3516] CPU: 1 UID: 0 PID: 3516 Comm: syz.4.12 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.556123][ T3516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 32.556201][ T3516] Call Trace: [ 32.556213][ T3516] [ 32.556223][ T3516] __dump_stack+0x1d/0x30 [ 32.556254][ T3516] dump_stack_lvl+0x95/0xd0 [ 32.556279][ T3516] dump_stack+0x15/0x1b [ 32.556303][ T3516] __get_user_pages+0x195b/0x1ea0 [ 32.556396][ T3516] ? merge_sched_in+0x5db/0xbe0 [ 32.556495][ T3516] __gup_longterm_locked+0x8d7/0xe30 [ 32.556515][ T3516] ? visit_groups_merge+0xf7e/0xfd0 [ 32.556541][ T3516] ? __rcu_read_unlock+0x33/0x70 [ 32.556571][ T3516] ? try_get_folio+0x369/0x3b0 [ 32.556648][ T3516] ? try_grab_folio_fast+0xdc/0x370 [ 32.556672][ T3516] gup_fast_fallback+0x1f3/0x13c0 [ 32.556731][ T3516] get_user_pages_fast+0x5f/0x90 [ 32.556756][ T3516] __iov_iter_get_pages_alloc+0x24e/0x6f0 [ 32.556825][ T3516] ? __rcu_read_unlock+0x4e/0x70 [ 32.556939][ T3516] iov_iter_get_pages2+0x5e/0xa0 [ 32.556999][ T3516] __se_sys_vmsplice+0x538/0xf90 [ 32.557036][ T3516] __x64_sys_vmsplice+0x55/0x70 [ 32.557058][ T3516] x64_sys_call+0x2344/0x3000 [ 32.557089][ T3516] do_syscall_64+0xc0/0x2a0 [ 32.557150][ T3516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.557176][ T3516] RIP: 0033:0x7fd1ef3caeb9 [ 32.557269][ T3516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.557290][ T3516] RSP: 002b:00007fd1ede27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 32.557398][ T3516] RAX: ffffffffffffffda RBX: 00007fd1ef645fa0 RCX: 00007fd1ef3caeb9 [ 32.557414][ T3516] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 32.557429][ T3516] RBP: 00007fd1ef438c1f R08: 0000000000000000 R09: 0000000000000000 [ 32.557443][ T3516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.557455][ T3516] R13: 00007fd1ef646038 R14: 00007fd1ef645fa0 R15: 00007ffcc8170158 [ 32.557477][ T3516] [ 32.793766][ T3514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.809303][ T3514] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.861927][ T3525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13'. [ 32.903534][ T3526] netlink: 'syz.4.14': attribute type 4 has an invalid length. [ 33.005442][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.061370][ T3533] loop0: detected capacity change from 0 to 128 [ 33.105084][ T3533] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.143433][ T3533] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 33.167946][ T3482] kernel read not supported for file /11/syscall (pid: 3482 comm: kworker/1:6) [ 33.227052][ T3543] Cannot find add_set index 0 as target [ 33.256701][ T3533] EXT4-fs (loop0): shut down requested (0) [ 33.284650][ T3311] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.338324][ T3551] tipc: Started in network mode [ 33.343491][ T3551] tipc: Node identity ce537c8694f9, cluster identity 4711 [ 33.350937][ T3551] tipc: Enabled bearer , priority 0 [ 33.387521][ T3551] syzkaller0: entered promiscuous mode [ 33.393041][ T3551] syzkaller0: entered allmulticast mode [ 33.399772][ T3551] tipc: Resetting bearer [ 33.417982][ T3550] tipc: Resetting bearer [ 33.443452][ T3550] tipc: Disabling bearer [ 33.492887][ T3564] syzkaller0: entered promiscuous mode [ 33.499027][ T3564] syzkaller0: entered allmulticast mode [ 33.618265][ T3578] loop4: detected capacity change from 0 to 164 [ 33.626404][ T3578] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 33.636155][ T3579] vxcan1: entered promiscuous mode [ 33.870762][ T3588] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 34.437998][ T3617] syz.2.50 uses obsolete (PF_INET,SOCK_PACKET) [ 34.475874][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 34.765165][ T3629] netlink: 76 bytes leftover after parsing attributes in process `syz.0.54'. [ 34.864817][ T3632] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 34.928884][ T3632] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 35.177681][ T3640] syzkaller1: entered promiscuous mode [ 35.183375][ T3640] syzkaller1: entered allmulticast mode [ 35.522331][ T3682] loop3: detected capacity change from 0 to 128 [ 35.570729][ T3682] loop5: detected capacity change from 0 to 95 [ 35.581068][ T3685] loop2: detected capacity change from 0 to 128 [ 35.601256][ T3685] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 35.614373][ T3685] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 35.677526][ T3689] delete_channel: no stack [ 35.852257][ T3706] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 35.865600][ T3706] team0 (unregistering): Port device team_slave_0 removed [ 35.874693][ T3706] team0 (unregistering): Failed to send options change via netlink (err -105) [ 35.884459][ T3706] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 35.896241][ T3706] team0 (unregistering): Port device team_slave_1 removed [ 35.985630][ T3303] loop3: p1 p2 p3 [ 36.007139][ T3303] loop3: p3 start 8388352 is beyond EOD, truncated [ 36.041267][ T3716] loop3: p1 p2 p3 [ 36.053890][ T3716] loop3: p3 start 8388352 is beyond EOD, truncated [ 36.172893][ T3733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 36.174733][ T3735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 36.427312][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 36.433848][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 36.916745][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 36.916759][ T29] audit: type=1400 audit(1769820794.077:220): avc: denied { mount } for pid=3779 comm="syz.1.106" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.997582][ T29] audit: type=1400 audit(1769820794.157:221): avc: denied { create } for pid=3773 comm="syz.4.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.033796][ T3783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.107'. [ 37.274331][ T29] audit: type=1400 audit(1769820794.427:222): avc: denied { read } for pid=3795 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.277789][ T3797] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 37.323555][ T29] audit: type=1400 audit(1769820794.437:223): avc: denied { read write } for pid=3795 comm="syz.0.113" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 37.349109][ T29] audit: type=1400 audit(1769820794.437:224): avc: denied { open } for pid=3795 comm="syz.0.113" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 37.376288][ T29] audit: type=1400 audit(1769820794.437:225): avc: denied { ioctl } for pid=3795 comm="syz.0.113" path="socket:[5775]" dev="sockfs" ino=5775 ioctlcmd=0x9401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.611573][ T29] audit: type=1400 audit(1769820794.767:226): avc: denied { watch watch_reads } for pid=3805 comm="syz.2.117" path="pipe:[4937]" dev="pipefs" ino=4937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 37.685123][ T29] audit: type=1400 audit(1769820794.797:227): avc: denied { mounton } for pid=3806 comm="syz.4.116" path="/30/file0" dev="cgroup" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 37.708128][ T29] audit: type=1400 audit(1769820794.817:228): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 37.765244][ T29] audit: type=1326 audit(1769820794.887:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.4.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1ef3caeb9 code=0x0 [ 38.950441][ T3865] set_capacity_and_notify: 1 callbacks suppressed [ 38.950462][ T3865] loop0: detected capacity change from 0 to 8192 [ 39.012935][ T3865] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 39.020231][ T3865] FAT-fs (loop0): Filesystem has been set read-only [ 39.283398][ T3871] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.323115][ T3871] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.336270][ T3875] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 39.374160][ T3875] SELinux: failed to load policy [ 39.918207][ T3898] syzkaller0: entered promiscuous mode [ 39.923721][ T3898] syzkaller0: entered allmulticast mode [ 40.112225][ T3902] loop2: detected capacity change from 0 to 1764 [ 40.234827][ T3906] netlink: 52 bytes leftover after parsing attributes in process `syz.3.152'. [ 40.244049][ T3906] netlink: 16 bytes leftover after parsing attributes in process `syz.3.152'. [ 40.439497][ T3916] netlink: 'syz.4.155': attribute type 4 has an invalid length. [ 40.447408][ T3916] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.155'. [ 40.456685][ T3916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.155'. [ 40.707681][ T3929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.162'. [ 40.788979][ T3938] loop0: detected capacity change from 0 to 8192 [ 40.798528][ T3938] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.850131][ T3941] capability: warning: `syz.1.167' uses 32-bit capabilities (legacy support in use) [ 40.907383][ T3942] ================================================================== [ 40.915590][ T3942] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 40.922810][ T3942] [ 40.925167][ T3942] write to 0xffff88811c5018f6 of 2 bytes by task 3938 on cpu 1: [ 40.933150][ T3942] fat16_ent_put+0x28/0x60 [ 40.937589][ T3942] fat_alloc_clusters+0x57b/0xc50 [ 40.942709][ T3942] fat_get_block+0x258/0x5e0 [ 40.947323][ T3942] __block_write_begin_int+0x400/0xf90 [ 40.953855][ T3942] cont_write_begin+0x5fe/0x970 [ 40.958995][ T3942] fat_write_begin+0x4f/0xe0 [ 40.963608][ T3942] cont_write_begin+0x1b0/0x970 [ 40.968554][ T3942] fat_write_begin+0x4f/0xe0 [ 40.973173][ T3942] generic_perform_write+0x183/0x490 [ 40.978490][ T3942] __generic_file_write_iter+0x9e/0x120 [ 40.984077][ T3942] generic_file_write_iter+0x8d/0x310 [ 40.989491][ T3942] vfs_write+0x5a6/0x9f0 [ 40.993757][ T3942] __x64_sys_pwrite64+0xfd/0x150 [ 40.998719][ T3942] x64_sys_call+0x9f7/0x3000 [ 41.003379][ T3942] do_syscall_64+0xc0/0x2a0 [ 41.008007][ T3942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.013940][ T3942] [ 41.016329][ T3942] read to 0xffff88811c501800 of 512 bytes by task 3942 on cpu 0: [ 41.024065][ T3942] fat_mirror_bhs+0x1df/0x320 [ 41.028761][ T3942] fat_alloc_clusters+0xb48/0xc50 [ 41.034069][ T3942] fat_get_block+0x258/0x5e0 [ 41.038680][ T3942] __block_write_begin_int+0x400/0xf90 [ 41.044327][ T3942] cont_write_begin+0x5fe/0x970 [ 41.049206][ T3942] fat_write_begin+0x4f/0xe0 [ 41.053811][ T3942] cont_write_begin+0x1b0/0x970 [ 41.058748][ T3942] fat_write_begin+0x4f/0xe0 [ 41.063334][ T3942] generic_cont_expand_simple+0xb0/0x150 [ 41.069061][ T3942] fat_cont_expand+0x3e/0x170 [ 41.073729][ T3942] fat_setattr+0x2a4/0x8a0 [ 41.078147][ T3942] notify_change+0x872/0x8f0 [ 41.082851][ T3942] do_ftruncate+0x349/0x3d0 [ 41.087347][ T3942] __x64_sys_ftruncate+0x68/0xc0 [ 41.092360][ T3942] x64_sys_call+0x2e35/0x3000 [ 41.097123][ T3942] do_syscall_64+0xc0/0x2a0 [ 41.101888][ T3942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.107775][ T3942] [ 41.110171][ T3942] Reported by Kernel Concurrency Sanitizer on: [ 41.116313][ T3942] CPU: 0 UID: 0 PID: 3942 Comm: syz.0.166 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.126125][ T3942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.136198][ T3942] ================================================================== [ 41.144615][ T3938] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 41.153580][ T3938] FAT-fs (loop0): Filesystem has been set read-only [ 41.161066][ T3938] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 41.170714][ T3938] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044)