last executing test programs: 2.703483865s ago: executing program 4 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r3, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) 2.321540582s ago: executing program 3 (id=163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0xf2ff, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 2.287802426s ago: executing program 2 (id=164): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) 2.282065916s ago: executing program 4 (id=176): openat$dir(0xffffffffffffff9c, 0x0, 0x458081, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) close_range(r1, r2, 0x0) 2.065805437s ago: executing program 0 (id=165): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x750, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)={@multicast2, @loopback, 0x0, 0x1, [@rand_addr=0x64010101]}, 0x14) 2.065113648s ago: executing program 3 (id=178): openat$dir(0xffffffffffffff9c, 0x0, 0x458081, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) close_range(r1, r2, 0x0) 1.825537851s ago: executing program 0 (id=167): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/152) 1.825224121s ago: executing program 3 (id=168): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1d}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x8000) 1.824798131s ago: executing program 4 (id=180): openat$dir(0xffffffffffffff9c, 0x0, 0x458081, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) close_range(r1, r2, 0x0) 1.718612432s ago: executing program 4 (id=171): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, &(0x7f00000013c0)=""/4100, 0x1004) 1.668656736s ago: executing program 3 (id=174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x3d, 0x2, 0x4038a09, 0x4, @remote, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x6, 0x5}}) 1.545670519s ago: executing program 1 (id=175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r3, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) 1.380237784s ago: executing program 1 (id=177): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) 1.380070405s ago: executing program 2 (id=179): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtfilter={0x54, 0x2c, 0xd27, 0xf0bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x10, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8401}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 1.379476865s ago: executing program 3 (id=190): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00'}, 0x18) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.32304477s ago: executing program 1 (id=181): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1010012, &(0x7f0000000080), 0x3, 0x4e2, &(0x7f0000000dc0)="$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") 1.236843778s ago: executing program 1 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0xf2ff, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf0, 0x8}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 445.460176ms ago: executing program 2 (id=183): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x750, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)={@multicast2, @loopback, 0x0, 0x1, [@rand_addr=0x64010101]}, 0x14) 445.236217ms ago: executing program 3 (id=184): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) write(r1, &(0x7f00000001c0)="49bd", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 440.309527ms ago: executing program 0 (id=194): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00'}, 0x18) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 259.703605ms ago: executing program 2 (id=185): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) 259.521555ms ago: executing program 4 (id=186): openat$dir(0xffffffffffffff9c, 0x0, 0x458081, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) close_range(r1, r2, 0x0) 210.51536ms ago: executing program 0 (id=187): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1ff}, @TCA_TBF_PARMS={0x28}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 210.31712ms ago: executing program 1 (id=188): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1d}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x8000) 77.366252ms ago: executing program 1 (id=189): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) 76.992523ms ago: executing program 2 (id=191): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) 76.566043ms ago: executing program 0 (id=201): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) 75.928193ms ago: executing program 4 (id=203): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 742.84µs ago: executing program 2 (id=192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r3, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448c5}, 0x8000002) 0s ago: executing program 0 (id=193): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 34.094163][ T29] audit: type=1400 audit(1760694838.615:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.095405][ T3302] cgroup: Unknown subsys name 'net' [ 34.117423][ T29] audit: type=1400 audit(1760694838.615:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.145488][ T29] audit: type=1400 audit(1760694838.655:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.241257][ T3302] cgroup: Unknown subsys name 'cpuset' [ 34.247721][ T3302] cgroup: Unknown subsys name 'rlimit' [ 34.399188][ T29] audit: type=1400 audit(1760694838.915:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.423092][ T29] audit: type=1400 audit(1760694838.925:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.444201][ T29] audit: type=1400 audit(1760694838.925:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.465091][ T29] audit: type=1400 audit(1760694838.925:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.479758][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.485469][ T29] audit: type=1400 audit(1760694838.925:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.519261][ T29] audit: type=1400 audit(1760694838.925:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.542659][ T29] audit: type=1400 audit(1760694839.025:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.550764][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.888728][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 35.926912][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.953675][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.967971][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.060642][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.068150][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.075812][ T3312] bridge_slave_0: entered allmulticast mode [ 36.083321][ T3312] bridge_slave_0: entered promiscuous mode [ 36.101200][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.110509][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.117789][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.125327][ T3312] bridge_slave_1: entered allmulticast mode [ 36.132152][ T3312] bridge_slave_1: entered promiscuous mode [ 36.144404][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.151928][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.159932][ T3318] bridge_slave_0: entered allmulticast mode [ 36.167251][ T3318] bridge_slave_0: entered promiscuous mode [ 36.196467][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.203955][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.211630][ T3318] bridge_slave_1: entered allmulticast mode [ 36.218257][ T3318] bridge_slave_1: entered promiscuous mode [ 36.241080][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.256262][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.263864][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.271684][ T3314] bridge_slave_0: entered allmulticast mode [ 36.278352][ T3314] bridge_slave_0: entered promiscuous mode [ 36.285104][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.292364][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.299775][ T3319] bridge_slave_0: entered allmulticast mode [ 36.306534][ T3319] bridge_slave_0: entered promiscuous mode [ 36.313218][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.320303][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.327827][ T3319] bridge_slave_1: entered allmulticast mode [ 36.334416][ T3319] bridge_slave_1: entered promiscuous mode [ 36.346355][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.361264][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.368563][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.376245][ T3314] bridge_slave_1: entered allmulticast mode [ 36.383067][ T3314] bridge_slave_1: entered promiscuous mode [ 36.402735][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.431959][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.444731][ T3312] team0: Port device team_slave_0 added [ 36.457427][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.467762][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.488904][ T3312] team0: Port device team_slave_1 added [ 36.495848][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.511521][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.553830][ T3319] team0: Port device team_slave_0 added [ 36.561040][ T3318] team0: Port device team_slave_0 added [ 36.567481][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.575431][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.583213][ T3324] bridge_slave_0: entered allmulticast mode [ 36.590121][ T3324] bridge_slave_0: entered promiscuous mode [ 36.603136][ T3314] team0: Port device team_slave_0 added [ 36.609319][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.616631][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.643695][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.657248][ T3319] team0: Port device team_slave_1 added [ 36.664293][ T3318] team0: Port device team_slave_1 added [ 36.675219][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.682431][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.689626][ T3324] bridge_slave_1: entered allmulticast mode [ 36.696365][ T3324] bridge_slave_1: entered promiscuous mode [ 36.703566][ T3314] team0: Port device team_slave_1 added [ 36.715152][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.722445][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.749341][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.792675][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.800764][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.830042][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.847632][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.858890][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.866576][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.896249][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.908955][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.917432][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.945458][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.956614][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.963783][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.999881][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.011798][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.019714][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.047281][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.062422][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.099945][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.107451][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.134540][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.154670][ T3312] hsr_slave_0: entered promiscuous mode [ 37.160984][ T3312] hsr_slave_1: entered promiscuous mode [ 37.189236][ T3324] team0: Port device team_slave_0 added [ 37.196793][ T3324] team0: Port device team_slave_1 added [ 37.215782][ T3318] hsr_slave_0: entered promiscuous mode [ 37.222060][ T3318] hsr_slave_1: entered promiscuous mode [ 37.228554][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.234394][ T3318] Cannot create hsr debugfs directory [ 37.257631][ T3319] hsr_slave_0: entered promiscuous mode [ 37.263932][ T3319] hsr_slave_1: entered promiscuous mode [ 37.270460][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 37.276301][ T3319] Cannot create hsr debugfs directory [ 37.297562][ T3314] hsr_slave_0: entered promiscuous mode [ 37.303931][ T3314] hsr_slave_1: entered promiscuous mode [ 37.310172][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 37.316224][ T3314] Cannot create hsr debugfs directory [ 37.342743][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.349930][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.378174][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.392176][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.400103][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.427974][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.498660][ T3324] hsr_slave_0: entered promiscuous mode [ 37.504967][ T3324] hsr_slave_1: entered promiscuous mode [ 37.511077][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 37.516899][ T3324] Cannot create hsr debugfs directory [ 37.665760][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.675155][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.684392][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.696464][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.721416][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.731329][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.740784][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.752227][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.782984][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.795530][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.812766][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.823037][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.870476][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.891133][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.900534][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.911715][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.922425][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.933408][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.942622][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.952005][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.002046][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.016464][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.035819][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.059297][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.070040][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.077611][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.088159][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.097606][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.113009][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.120141][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.129216][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.136735][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.152462][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.159880][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.185554][ T127] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.192790][ T127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.202061][ T127] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.209713][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.234525][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.269058][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.292684][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.300682][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.323813][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.331769][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.341475][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.375570][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.383087][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.397184][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.405113][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.413922][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.421122][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.495306][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.505750][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.541624][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.578472][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.602004][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.671406][ T3319] veth0_vlan: entered promiscuous mode [ 38.689109][ T3318] veth0_vlan: entered promiscuous mode [ 38.703707][ T3319] veth1_vlan: entered promiscuous mode [ 38.723958][ T3318] veth1_vlan: entered promiscuous mode [ 38.745272][ T3319] veth0_macvtap: entered promiscuous mode [ 38.769446][ T3319] veth1_macvtap: entered promiscuous mode [ 38.799759][ T3312] veth0_vlan: entered promiscuous mode [ 38.806497][ T3314] veth0_vlan: entered promiscuous mode [ 38.815763][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.830917][ T3318] veth0_macvtap: entered promiscuous mode [ 38.837912][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.849267][ T3312] veth1_vlan: entered promiscuous mode [ 38.856867][ T3314] veth1_vlan: entered promiscuous mode [ 38.867121][ T3318] veth1_macvtap: entered promiscuous mode [ 38.887022][ T1722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.916782][ T1722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.929237][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.938145][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.947848][ T3314] veth0_macvtap: entered promiscuous mode [ 38.961170][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.967870][ T3324] veth0_vlan: entered promiscuous mode [ 38.985351][ T3314] veth1_macvtap: entered promiscuous mode [ 38.995595][ T3312] veth0_macvtap: entered promiscuous mode [ 39.003498][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.014219][ T3312] veth1_macvtap: entered promiscuous mode [ 39.027924][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.039627][ T3324] veth1_vlan: entered promiscuous mode [ 39.056821][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.069502][ T416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.081440][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.098127][ T416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.109142][ T416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.119749][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 39.119766][ T29] audit: type=1326 audit(1760694843.635:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287818efc9 code=0x7ffc0000 [ 39.124659][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.126438][ T29] audit: type=1326 audit(1760694843.635:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287818efc9 code=0x7ffc0000 [ 39.181934][ T29] audit: type=1326 audit(1760694843.635:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f287818efc9 code=0x7ffc0000 [ 39.184179][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.206155][ T29] audit: type=1326 audit(1760694843.635:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287818efc9 code=0x7ffc0000 [ 39.237413][ T29] audit: type=1326 audit(1760694843.635:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287818efc9 code=0x7ffc0000 [ 39.261112][ T29] audit: type=1326 audit(1760694843.635:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f287818efc9 code=0x7ffc0000 [ 39.286305][ T29] audit: type=1326 audit(1760694843.635:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287818efc9 code=0x7ffc0000 [ 39.312289][ T29] audit: type=1326 audit(1760694843.635:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287818efc9 code=0x7ffc0000 [ 39.337938][ T29] audit: type=1326 audit(1760694843.635:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f287818efc9 code=0x7ffc0000 [ 39.364490][ T29] audit: type=1326 audit(1760694843.635:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.2.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287818efc9 code=0x7ffc0000 [ 39.400204][ T416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.420235][ T416] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.441782][ T416] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.451532][ T416] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.463461][ T3324] veth0_macvtap: entered promiscuous mode [ 39.472635][ T3324] veth1_macvtap: entered promiscuous mode [ 39.497341][ T416] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.517075][ T3490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 39.517711][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.553568][ T3490] gretap0: entered promiscuous mode [ 39.559181][ T3490] macsec1: entered promiscuous mode [ 39.565159][ T3490] macsec1: entered allmulticast mode [ 39.570711][ T3490] gretap0: entered allmulticast mode [ 39.584339][ T3490] gretap0: left allmulticast mode [ 39.589784][ T3490] gretap0: left promiscuous mode [ 39.598009][ T416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.618054][ T3492] bridge_slave_0: left allmulticast mode [ 39.623827][ T3492] bridge_slave_0: left promiscuous mode [ 39.629560][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.638964][ T3492] bridge_slave_1: left allmulticast mode [ 39.644913][ T3492] bridge_slave_1: left promiscuous mode [ 39.651021][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.664742][ T3492] bond0: (slave bond_slave_0): Releasing backup interface [ 39.677997][ T3492] bond0: (slave bond_slave_1): Releasing backup interface [ 39.692165][ T3492] team0: Port device team_slave_0 removed [ 39.701677][ T3492] team0: Port device team_slave_1 removed [ 39.709102][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.716924][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.726454][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.734921][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.746235][ T3492] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 39.766283][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.773968][ T416] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.827537][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.860872][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.924164][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.924208][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.924238][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.924365][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.199290][ T3538] loop2: detected capacity change from 0 to 512 [ 40.206170][ T3538] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.216648][ T3538] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.225844][ T3538] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 40.235967][ T3538] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 40.246368][ T3538] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 40.255335][ T3538] System zones: 0-2, 18-18, 34-34 [ 40.270436][ T3524] Zero length message leads to an empty skb [ 40.278097][ T3538] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.19: iget: bad i_size value: 360287970189639680 [ 40.298228][ T3538] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.19: couldn't read orphan inode 15 (err -117) [ 40.324982][ T3538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.368857][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.409064][ T3549] netlink: 104 bytes leftover after parsing attributes in process `syz.2.21'. [ 40.496221][ T3551] netlink: 14 bytes leftover after parsing attributes in process `syz.2.22'. [ 40.528879][ T3551] bond0 (unregistering): Released all slaves [ 40.965986][ T3554] macvtap1: entered promiscuous mode [ 40.971372][ T3554] macvtap1: entered allmulticast mode [ 41.001991][ T3554] dummy0: entered promiscuous mode [ 41.011644][ T3554] dummy0: entered allmulticast mode [ 41.023385][ T3554] team0: Device macvtap1 failed to register rx_handler [ 41.051395][ T3554] dummy0: left allmulticast mode [ 41.064915][ T3554] dummy0: left promiscuous mode [ 41.066396][ T3559] loop4: detected capacity change from 0 to 512 [ 41.092678][ T3559] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.107335][ T3559] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.163835][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.471676][ T3571] netlink: 'syz.0.29': attribute type 13 has an invalid length. [ 41.513307][ T3577] loop4: detected capacity change from 0 to 4096 [ 41.530783][ T3571] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 41.564133][ T3577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.204859][ T3571] syz.0.29 (3571) used greatest stack depth: 10072 bytes left [ 42.239205][ T3599] netlink: 71 bytes leftover after parsing attributes in process `syz.2.38'. [ 42.282592][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.381619][ T3607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.40'. [ 42.414781][ T3607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.40'. [ 42.456543][ T3607] bridge: RTM_NEWNEIGH with unconfigured vlan 10 on bridge_slave_0 [ 42.977123][ T3643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 43.008170][ T3646] loop3: detected capacity change from 0 to 512 [ 43.029759][ T3646] EXT4-fs (loop3): failed to initialize system zone (-117) [ 43.039167][ T3650] netlink: 'syz.4.56': attribute type 1 has an invalid length. [ 43.068723][ T3646] EXT4-fs (loop3): mount failed [ 43.140977][ T3653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 43.169225][ T3653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 43.398280][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.405810][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.482697][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.494043][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.538749][ T37] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.569983][ T37] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.600579][ T37] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.630429][ T416] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.943858][ T3687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.69'. [ 44.130670][ T3704] sch_tbf: burst 511 is lower than device veth1_vlan mtu (1514) ! [ 44.561861][ T3722] loop4: detected capacity change from 0 to 128 [ 44.605485][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 44.605500][ T29] audit: type=1400 audit(1760694849.125:197): avc: denied { mount } for pid=3721 comm="syz.4.84" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.439648][ T3739] __nla_validate_parse: 3 callbacks suppressed [ 45.439735][ T3739] netlink: 71 bytes leftover after parsing attributes in process `syz.1.88'. [ 45.673174][ T3751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.94'. [ 45.719295][ T29] audit: type=1400 audit(1760694850.235:198): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.819435][ T3757] loop3: detected capacity change from 0 to 128 [ 46.011387][ T3769] netlink: 71 bytes leftover after parsing attributes in process `syz.0.101'. [ 46.100529][ T3771] netlink: 104 bytes leftover after parsing attributes in process `syz.4.102'. [ 46.149661][ T3775] loop0: detected capacity change from 0 to 512 [ 46.182336][ T3775] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.238899][ T3775] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.248171][ T3775] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 46.267083][ T3775] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 46.306235][ T3775] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 46.330138][ T3775] System zones: 0-2, 18-18, 34-34 [ 46.336430][ T3775] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.104: iget: bad i_size value: 360287970189639680 [ 46.360848][ T3775] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.104: couldn't read orphan inode 15 (err -117) [ 46.392119][ T3775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.449452][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.714167][ T3808] netlink: 71 bytes leftover after parsing attributes in process `syz.4.116'. [ 46.843587][ T3812] netlink: 104 bytes leftover after parsing attributes in process `syz.0.117'. [ 46.896877][ T3817] loop0: detected capacity change from 0 to 128 [ 46.906991][ T3818] loop4: detected capacity change from 0 to 512 [ 46.915121][ T3818] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.922918][ T3818] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.933325][ T3818] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 46.942710][ T3818] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 46.952406][ T3818] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 46.961226][ T3818] System zones: 0-2, 18-18, 34-34 [ 46.967033][ T3818] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.120: iget: bad i_size value: 360287970189639680 [ 46.980913][ T3818] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.120: couldn't read orphan inode 15 (err -117) [ 46.993403][ T3818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.022171][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.943344][ T3856] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.943515][ T3856] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.012042][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.014631][ T3856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.108092][ T416] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.108143][ T416] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.108195][ T416] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.108237][ T416] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.281769][ T3862] loop1: detected capacity change from 0 to 128 [ 49.704674][ T3875] macvtap1: entered promiscuous mode [ 49.710358][ T3875] macvtap1: entered allmulticast mode [ 49.718087][ T3875] dummy0: entered allmulticast mode [ 49.727984][ T3875] dummy0: entered promiscuous mode [ 49.734339][ T3875] team0: Device macvtap1 failed to register rx_handler [ 49.741684][ T3875] dummy0: left allmulticast mode [ 49.747777][ T3875] dummy0: left promiscuous mode [ 49.893454][ T3892] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.901149][ T3892] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.946468][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.957759][ T3892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.005662][ T37] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.025451][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.039439][ T3902] loop2: detected capacity change from 0 to 128 [ 50.050812][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.077089][ T127] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.131273][ T3926] loop1: detected capacity change from 0 to 128 [ 51.265075][ T3930] macvtap1: entered promiscuous mode [ 51.270821][ T3930] macvtap1: entered allmulticast mode [ 51.278009][ T3930] dummy0: entered allmulticast mode [ 51.283670][ T3930] dummy0: entered promiscuous mode [ 51.290402][ T3930] team0: Device macvtap1 failed to register rx_handler [ 51.298314][ T3930] dummy0: left allmulticast mode [ 51.304142][ T3930] dummy0: left promiscuous mode [ 51.446228][ T3939] loop2: detected capacity change from 0 to 512 [ 51.456615][ T3939] EXT4-fs (loop2): failed to initialize system zone (-117) [ 51.474506][ T3939] EXT4-fs (loop2): mount failed [ 51.858166][ T3952] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.866075][ T3952] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.921442][ T3952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.933548][ T3952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.975538][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.991609][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.001383][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.011537][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.116023][ T3964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.170'. [ 52.171675][ T3964] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 52.351872][ T3974] macvtap1: entered promiscuous mode [ 52.351986][ T3974] macvtap1: entered allmulticast mode [ 52.352230][ T3974] dummy0: entered allmulticast mode [ 52.352263][ T3974] dummy0: entered promiscuous mode [ 52.352975][ T3974] team0: Device macvtap1 failed to register rx_handler [ 52.381725][ T3974] dummy0: left allmulticast mode [ 52.381744][ T3974] dummy0: left promiscuous mode [ 52.570995][ T3982] loop1: detected capacity change from 0 to 512 [ 52.596102][ T3982] EXT4-fs (loop1): failed to initialize system zone (-117) [ 52.596146][ T3982] EXT4-fs (loop1): mount failed [ 53.438614][ T3991] loop3: detected capacity change from 0 to 128 [ 53.591422][ T127] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.606391][ T127] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.615648][ T127] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.632169][ T127] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.674320][ T4002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.187'. [ 53.737047][ T4002] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 53.902726][ T4016] macvtap1: entered promiscuous mode [ 53.908375][ T4016] macvtap1: entered allmulticast mode [ 53.928569][ T4016] dummy0: entered allmulticast mode [ 53.934224][ T4016] dummy0: entered promiscuous mode [ 53.941432][ T4016] team0: Device macvtap1 failed to register rx_handler [ 53.948820][ T4016] dummy0: left allmulticast mode [ 53.954124][ T4016] dummy0: left promiscuous mode [ 54.240877][ T3994] ================================================================== [ 54.249045][ T3994] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 54.257286][ T3994] [ 54.259646][ T3994] write to 0xffff88811ac58d28 of 4 bytes by task 3991 on cpu 0: [ 54.267801][ T3994] __mark_inode_dirty+0x248/0x750 [ 54.272966][ T3994] fat_update_time+0x1ec/0x200 [ 54.277793][ T3994] touch_atime+0x148/0x340 [ 54.282606][ T3994] filemap_splice_read+0x6ba/0x740 [ 54.287782][ T3994] splice_direct_to_actor+0x26f/0x680 [ 54.294004][ T3994] do_splice_direct+0xda/0x150 [ 54.299185][ T3994] do_sendfile+0x380/0x650 [ 54.303660][ T3994] __x64_sys_sendfile64+0x105/0x150 [ 54.309148][ T3994] x64_sys_call+0x2bb4/0x3000 [ 54.313944][ T3994] do_syscall_64+0xd2/0x200 [ 54.318551][ T3994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.324966][ T3994] [ 54.327415][ T3994] read to 0xffff88811ac58d28 of 4 bytes by task 3994 on cpu 1: [ 54.335168][ T3994] __mark_inode_dirty+0x55/0x750 [ 54.340185][ T3994] fat_update_time+0x1ec/0x200 [ 54.345358][ T3994] touch_atime+0x148/0x340 [ 54.349836][ T3994] filemap_splice_read+0x6ba/0x740 [ 54.355626][ T3994] splice_direct_to_actor+0x26f/0x680 [ 54.361313][ T3994] do_splice_direct+0xda/0x150 [ 54.366218][ T3994] do_sendfile+0x380/0x650 [ 54.370853][ T3994] __x64_sys_sendfile64+0x105/0x150 [ 54.376193][ T3994] x64_sys_call+0x2bb4/0x3000 [ 54.381452][ T3994] do_syscall_64+0xd2/0x200 [ 54.386348][ T3994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.392365][ T3994] [ 54.394806][ T3994] value changed: 0x00000000 -> 0x00000070 [ 54.400730][ T3994] [ 54.403109][ T3994] Reported by Kernel Concurrency Sanitizer on: [ 54.409682][ T3994] CPU: 1 UID: 0 PID: 3994 Comm: syz.3.184 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.419626][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.430188][ T3994] ==================================================================