last executing test programs: 5.925589355s ago: executing program 2 (id=295): socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x8, 0x2, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 5.838064239s ago: executing program 0 (id=296): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff02000000080000000000000000000114000400200100000000000000000000000000010600034000010000080007400000000004000d"], 0xa0}}, 0x0) 4.838449047s ago: executing program 0 (id=299): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000400}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x0, 0x5003) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) msgctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080), 0xff, 0x548, &(0x7f0000001300)="$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") 4.026333414s ago: executing program 3 (id=302): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x10, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c180}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.781461935s ago: executing program 2 (id=304): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x1, 0x0, 0x2, 0x81, 0xffffffff}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x1b) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={r3, 0x1fb}, 0x8) memfd_create(&(0x7f0000000000)='@,-&,$\x00', 0x20000007) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7e9d19db568a1fea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x2}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000040)="480000001400195a8563e43c12f461560a8447600000000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed5e00000000000000", 0x48}], 0x1) 3.739174892s ago: executing program 4 (id=305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) setfsuid(0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x40, 0x0, 0x8fffb) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073"], 0xe4}}, 0x4000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x5, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x50) r3 = epoll_create(0x9) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x8, r3, 0x0, 0x0, 0x16}]) 3.15649687s ago: executing program 4 (id=306): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xfeff, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4803f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 3.15601405s ago: executing program 2 (id=316): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x800000b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x803) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 3.093625091s ago: executing program 2 (id=308): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000300)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000951000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.471220595s ago: executing program 4 (id=311): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') munmap(&(0x7f0000123000/0x4000)=nil, 0x4000) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) pipe2$9p(&(0x7f0000000100), 0x4000) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5433, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 2.287465806s ago: executing program 1 (id=312): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000890000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x50) io_uring_enter(r1, 0x2219, 0xcf74, 0x51, 0x0, 0x0) 2.267934399s ago: executing program 2 (id=313): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fc, &(0x7f00000004c0)="$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") socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 1.518577225s ago: executing program 1 (id=314): r0 = socket$kcm(0x2d, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x200}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 1.510144246s ago: executing program 4 (id=315): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 1.437958979s ago: executing program 4 (id=317): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 1.42549596s ago: executing program 1 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount(0x0, 0x0, 0x0, 0x4, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x804) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendto$packet(r4, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0xe, 0x40000, &(0x7f0000000180)={0x11, 0x18, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.337500375s ago: executing program 2 (id=319): io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x42001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x10) 1.326417647s ago: executing program 1 (id=320): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{}, &(0x7f0000000040), &(0x7f0000000680)='%pi6 \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 977.796086ms ago: executing program 3 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1e}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x10) syz_mount_image$ext4(&(0x7f0000000b40)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000bc0), 0x1, 0xb0a, &(0x7f0000000c00)="$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") r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000020700000a4c000000090a3f0400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a3100000000080003400000011c08000440ffffff00140000001100010000"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x40080}, 0x200400d1) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000440)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x7be, &(0x7f0000003080)="$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") open(&(0x7f0000000140)='.\x00', 0x80000, 0x8) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)) 743.125545ms ago: executing program 3 (id=322): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 681.672075ms ago: executing program 0 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf250c000000280005800e0001006962"], 0x3c}, 0x1, 0x0, 0x0, 0x40815}, 0x20000040) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="ff", 0x1}], 0x1}, 0x40810) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000280)={[], [{@uid_eq}]}) acct(0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "7187e1aa2b36fd7df82f81ba96e66789b942db3686806f5fdcc994835961f027b3f4d50b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x349}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x80}}, 0x40004) 663.681718ms ago: executing program 3 (id=324): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 596.34722ms ago: executing program 0 (id=325): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = epoll_create1(0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$dupfd(r1, 0x406, r0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0xa, 0x801, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 595.76856ms ago: executing program 3 (id=326): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x4, 0x0, 0x0, 0x0, 0xb, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b40)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x280040c1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x8000003c, 0x4, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x24020000) getcwd(&(0x7f00000003c0)=""/257, 0x101) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="200000002e000b00000000000000000002"], 0x20}}, 0x8000) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) pwritev(r4, 0x0, 0x0, 0x3, 0x80000080) sendmsg$kcm(r0, 0x0, 0x64d0ae04281b2cc9) 517.416283ms ago: executing program 4 (id=327): syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x20, 0x3) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = socket$inet6(0xa, 0x800, 0xfffffff7) sendto$inet6(r3, 0x0, 0x0, 0xe0, 0x0, 0x0) 377.177057ms ago: executing program 1 (id=328): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 333.992223ms ago: executing program 1 (id=329): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000b00)=[{&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f0000000980)=""/3, 0x3}, {&(0x7f00000009c0)=""/44, 0x2c}, {&(0x7f0000000a00)=""/234, 0xea}], 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r5, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r5, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0xfffffffd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000240)="d36d", 0x2}], 0x1}, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x2, 0x2, 0x3}}}, 0x118) 326.616575ms ago: executing program 0 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) 264.498776ms ago: executing program 3 (id=331): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) fcntl$addseals(r0, 0x409, 0x2) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\xab7\x1f\xde\xb5\x83>\fG\\x00', 0x3a, '/dev\x14bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xa}, r4}, 0x14) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, &(0x7f00000000c0)) unshare(0x40200) r6 = semget(0x2, 0x3, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) 0s ago: executing program 0 (id=332): socket(0x10, 0x803, 0x0) socket$packet(0x2d, 0x3, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) cachestat(r0, &(0x7f0000000040)={0x81, 0x20000000000006}, &(0x7f000009de80), 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 29.493042][ T28] audit: type=1400 audit(1776213585.241:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.516428][ T28] audit: type=1400 audit(1776213585.261:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.517275][ T3303] cgroup: Unknown subsys name 'net' [ 29.544704][ T28] audit: type=1400 audit(1776213585.291:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.677734][ T3303] cgroup: Unknown subsys name 'cpuset' [ 29.684242][ T3303] cgroup: Unknown subsys name 'rlimit' [ 29.794334][ T28] audit: type=1400 audit(1776213585.541:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.819468][ T28] audit: type=1400 audit(1776213585.541:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.845384][ T28] audit: type=1400 audit(1776213585.541:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.848011][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.866463][ T28] audit: type=1400 audit(1776213585.541:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.896350][ T28] audit: type=1400 audit(1776213585.541:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.910110][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.922481][ T28] audit: type=1400 audit(1776213585.541:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.954922][ T28] audit: type=1400 audit(1776213585.591:71): avc: denied { read } for pid=3042 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.091612][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 31.117946][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 31.148768][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 31.167827][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 31.180997][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.230117][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.237757][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.245242][ T3322] bridge_slave_0: entered allmulticast mode [ 31.251985][ T3322] bridge_slave_0: entered promiscuous mode [ 31.276962][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.284283][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.291538][ T3322] bridge_slave_1: entered allmulticast mode [ 31.298251][ T3322] bridge_slave_1: entered promiscuous mode [ 31.324810][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.332777][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.341514][ T3314] bridge_slave_0: entered allmulticast mode [ 31.348376][ T3314] bridge_slave_0: entered promiscuous mode [ 31.355251][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.363298][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.371129][ T3314] bridge_slave_1: entered allmulticast mode [ 31.377863][ T3314] bridge_slave_1: entered promiscuous mode [ 31.410328][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.429012][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.436651][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.444280][ T3320] bridge_slave_0: entered allmulticast mode [ 31.450777][ T3320] bridge_slave_0: entered promiscuous mode [ 31.462727][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.478044][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.487622][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.495694][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.503121][ T3320] bridge_slave_1: entered allmulticast mode [ 31.509726][ T3320] bridge_slave_1: entered promiscuous mode [ 31.516441][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.523955][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.531434][ T3315] bridge_slave_0: entered allmulticast mode [ 31.538003][ T3315] bridge_slave_0: entered promiscuous mode [ 31.549362][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.556801][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.564197][ T3323] bridge_slave_0: entered allmulticast mode [ 31.571073][ T3323] bridge_slave_0: entered promiscuous mode [ 31.579409][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.599349][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.607305][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.615322][ T3315] bridge_slave_1: entered allmulticast mode [ 31.621853][ T3315] bridge_slave_1: entered promiscuous mode [ 31.632456][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.639937][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.647883][ T3323] bridge_slave_1: entered allmulticast mode [ 31.654832][ T3323] bridge_slave_1: entered promiscuous mode [ 31.676533][ T3322] team0: Port device team_slave_0 added [ 31.688550][ T3314] team0: Port device team_slave_0 added [ 31.695621][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.706389][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.720985][ T3322] team0: Port device team_slave_1 added [ 31.731398][ T3314] team0: Port device team_slave_1 added [ 31.742682][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.757705][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.777544][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.793609][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.808046][ T3320] team0: Port device team_slave_0 added [ 31.818453][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.825560][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.851672][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.867157][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.874177][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.900877][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.912946][ T3320] team0: Port device team_slave_1 added [ 31.923089][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.930216][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.957205][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.973783][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.981121][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.007898][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.024587][ T3315] team0: Port device team_slave_0 added [ 32.038403][ T3323] team0: Port device team_slave_0 added [ 32.047678][ T3315] team0: Port device team_slave_1 added [ 32.053596][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.060622][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.087054][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.098865][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.106001][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.132248][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.144369][ T3323] team0: Port device team_slave_1 added [ 32.174228][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.181761][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.208316][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.237157][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.244960][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.273707][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.287706][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.295102][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.323393][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.335768][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.344775][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.374116][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.389964][ T3322] hsr_slave_0: entered promiscuous mode [ 32.397493][ T3322] hsr_slave_1: entered promiscuous mode [ 32.422762][ T3314] hsr_slave_0: entered promiscuous mode [ 32.429612][ T3314] hsr_slave_1: entered promiscuous mode [ 32.436400][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 32.442924][ T3314] Cannot create hsr debugfs directory [ 32.457261][ T3320] hsr_slave_0: entered promiscuous mode [ 32.463622][ T3320] hsr_slave_1: entered promiscuous mode [ 32.470308][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 32.476340][ T3320] Cannot create hsr debugfs directory [ 32.531714][ T3323] hsr_slave_0: entered promiscuous mode [ 32.537949][ T3323] hsr_slave_1: entered promiscuous mode [ 32.544257][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 32.550140][ T3323] Cannot create hsr debugfs directory [ 32.558558][ T3315] hsr_slave_0: entered promiscuous mode [ 32.564769][ T3315] hsr_slave_1: entered promiscuous mode [ 32.571825][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.577841][ T3315] Cannot create hsr debugfs directory [ 32.771789][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.781161][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.792566][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.803768][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.824047][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.833067][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.841916][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.855401][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.880561][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.890849][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.901666][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.917697][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.948690][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.964214][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.974163][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.989737][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.019211][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.045556][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.055438][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.069789][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.079183][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.089012][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.106137][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.113723][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.122794][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.129934][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.154481][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.181753][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.209213][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.223694][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.239545][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.247777][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.257690][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.264897][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.277926][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.292094][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.299639][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.309822][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.317985][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.343184][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.358468][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.379405][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.386627][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.406853][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.419972][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.427218][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.458573][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.500112][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.507223][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.527560][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.536497][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.543580][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.562231][ T3322] veth0_vlan: entered promiscuous mode [ 33.580621][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.592384][ T3322] veth1_vlan: entered promiscuous mode [ 33.636483][ T3322] veth0_macvtap: entered promiscuous mode [ 33.658670][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.679704][ T3322] veth1_macvtap: entered promiscuous mode [ 33.715191][ T3320] veth0_vlan: entered promiscuous mode [ 33.728441][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.740847][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.751961][ T3320] veth1_vlan: entered promiscuous mode [ 33.762501][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.771950][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.786887][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.797206][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.806534][ T3314] veth0_vlan: entered promiscuous mode [ 33.818163][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.836146][ T3314] veth1_vlan: entered promiscuous mode [ 33.853909][ T3320] veth0_macvtap: entered promiscuous mode [ 33.868690][ T3320] veth1_macvtap: entered promiscuous mode [ 33.889221][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.890490][ T3314] veth0_macvtap: entered promiscuous mode [ 33.920910][ T3314] veth1_macvtap: entered promiscuous mode [ 33.937517][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.953284][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.975865][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.994845][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.006209][ T3323] veth0_vlan: entered promiscuous mode [ 34.025142][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.039845][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.059670][ T3323] veth1_vlan: entered promiscuous mode [ 34.073512][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.101644][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.126432][ T1803] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.140997][ T1803] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.152466][ T3315] veth0_vlan: entered promiscuous mode [ 34.169001][ T1803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.194744][ T1803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.214050][ T3323] veth0_macvtap: entered promiscuous mode [ 34.221138][ T3315] veth1_vlan: entered promiscuous mode [ 34.245371][ T3323] veth1_macvtap: entered promiscuous mode [ 34.280361][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.303753][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.318132][ T3315] veth0_macvtap: entered promiscuous mode [ 34.696100][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.696218][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.696311][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.696396][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.696742][ T3315] veth1_macvtap: entered promiscuous mode [ 34.716952][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.725445][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.735897][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.736005][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.736034][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.736083][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.861381][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 34.861395][ T28] audit: type=1400 audit(1776213590.611:106): avc: denied { allowed } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.866078][ T28] audit: type=1400 audit(1776213590.611:107): avc: denied { create } for pid=3498 comm="syz.4.5" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.866304][ T28] audit: type=1400 audit(1776213590.611:108): avc: denied { map } for pid=3498 comm="syz.4.5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.866413][ T28] audit: type=1400 audit(1776213590.611:109): avc: denied { read write } for pid=3498 comm="syz.4.5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5262 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.866503][ T28] audit: type=1400 audit(1776213590.611:110): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.866544][ T28] audit: type=1400 audit(1776213590.611:111): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.879236][ T28] audit: type=1400 audit(1776213590.611:112): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.892895][ T28] audit: type=1400 audit(1776213590.641:113): avc: denied { create } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.897833][ T28] audit: type=1400 audit(1776213590.651:114): avc: denied { create } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.901914][ T28] audit: type=1400 audit(1776213590.651:115): avc: denied { write } for pid=3498 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 35.051538][ T3510] syzkaller0: entered promiscuous mode [ 35.051556][ T3510] syzkaller0: entered allmulticast mode [ 35.433684][ T3547] ------------[ cut here ]------------ [ 35.439277][ T3547] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 35.451624][ T3547] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#0: syz.3.11/3547 [ 35.461191][ T3547] Modules linked in: [ 35.465267][ T3547] CPU: 0 UID: 0 PID: 3547 Comm: syz.3.11 Not tainted syzkaller #0 PREEMPT(full) [ 35.474526][ T3547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 35.484981][ T3547] RIP: 0010:u32_change+0x1463/0x14d0 [ 35.490526][ T3547] Code: 31 ed e9 96 fe ff ff e8 fb 3c c4 fc 48 8d 3d a4 26 8b 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 f5 ac 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 35.510756][ T3547] RSP: 0018:ffffc9000190f5e0 EFLAGS: 00010283 [ 35.516834][ T3547] RAX: ffffffff849502a5 RBX: ffffc9000190f7f0 RCX: 0000000000000010 [ 35.524915][ T3547] RDX: ffffffff867eacf5 RSI: 0000000000000020 RDI: ffffffff87202950 [ 35.532941][ T3547] RBP: ffffc9000190f6e8 R08: 000188811aa49987 R09: 0000000000000000 [ 35.540950][ T3547] R10: ffff88811aa49900 R11: 0000000000000002 R12: ffff88811b006900 [ 35.549765][ T3547] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88811b0069c0 [ 35.558158][ T3547] FS: 00007f01fb8bf6c0(0000) GS:ffff8882ae8e7000(0000) knlGS:0000000000000000 [ 35.567236][ T3547] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.573851][ T3547] CR2: 0000001b3421effc CR3: 000000011b462000 CR4: 00000000003506f0 [ 35.582240][ T3547] Call Trace: [ 35.585607][ T3547] [ 35.588673][ T3547] tc_new_tfilter+0xfc0/0x1200 [ 35.593657][ T3547] ? ns_capable+0x7c/0xb0 [ 35.598184][ T3547] ? __pfx_tc_new_tfilter+0x10/0x10 [ 35.603615][ T3547] rtnetlink_rcv_msg+0x64b/0x720 [ 35.608722][ T3547] netlink_rcv_skb+0x123/0x220 [ 35.613524][ T3547] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 35.619139][ T3547] rtnetlink_rcv+0x1c/0x30 [ 35.623650][ T3547] netlink_unicast+0x5c0/0x690 [ 35.628682][ T3547] netlink_sendmsg+0x5c8/0x6f0 [ 35.633677][ T3547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.639215][ T3547] ____sys_sendmsg+0x563/0x5b0 [ 35.644118][ T3547] ___sys_sendmsg+0x195/0x1e0 [ 35.649100][ T3547] __sys_sendmmsg+0x185/0x320 [ 35.653903][ T3547] __x64_sys_sendmmsg+0x57/0x70 [ 35.659025][ T3547] x64_sys_call+0x27aa/0x3020 [ 35.663768][ T3547] do_syscall_64+0x12c/0x3b0 [ 35.668424][ T3547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.674537][ T3547] RIP: 0033:0x7f01fce6c819 [ 35.679057][ T3547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.698960][ T3547] RSP: 002b:00007f01fb8bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 35.707513][ T3547] RAX: ffffffffffffffda RBX: 00007f01fd0e5fa0 RCX: 00007f01fce6c819 [ 35.715708][ T3547] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 35.724002][ T3547] RBP: 00007f01fcf02c91 R08: 0000000000000000 R09: 0000000000000000 [ 35.732160][ T3547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.740292][ T3547] R13: 00007f01fd0e6038 R14: 00007f01fd0e5fa0 R15: 00007fffc49e5078 [ 35.748328][ T3547] [ 35.751370][ T3547] ---[ end trace 0000000000000000 ]--- [ 35.790158][ T3547] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11'. [ 35.812240][ T3547] Zero length message leads to an empty skb [ 35.977924][ T3603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14'. [ 36.001777][ T3603] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3603 comm=syz.1.14 [ 36.014180][ T3607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'. [ 36.060811][ T3541] loop2: detected capacity change from 0 to 8192 [ 36.068690][ T3541] msdos: Unknown parameter '184467440737095516150x0000000000000000<÷-úçl' [ 36.107258][ T3607] veth0_macvtap: left promiscuous mode [ 36.308706][ T3616] bridge0: entered promiscuous mode [ 36.314450][ T3616] macsec1: entered promiscuous mode [ 36.349587][ T3618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'. [ 36.363373][ T3618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20'. [ 36.382792][ T3618] syzkaller0: entered promiscuous mode [ 36.388717][ T3618] syzkaller0: entered allmulticast mode [ 36.610826][ T3631] netlink: 'syz.2.25': attribute type 1 has an invalid length. [ 36.642374][ T3631] ipvlan2: entered allmulticast mode [ 36.647913][ T3631] bond0: entered allmulticast mode [ 36.653357][ T3631] bond_slave_0: entered allmulticast mode [ 36.661875][ T3631] bond_slave_1: entered allmulticast mode [ 36.685786][ T3631] bridge1: entered allmulticast mode [ 36.693105][ T3631] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 36.806609][ T3634] loop2: detected capacity change from 0 to 512 [ 36.815576][ T3634] ======================================================= [ 36.815576][ T3634] WARNING: The mand mount option has been deprecated and [ 36.815576][ T3634] and is ignored by this kernel. Remove the mand [ 36.815576][ T3634] option from the mount to silence this warning. [ 36.815576][ T3634] ======================================================= [ 36.929135][ T3634] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.943239][ T3634] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.958284][ T3634] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.26: orphan file block 0: bad magic [ 36.971483][ T3634] loop2: lost filesystem error report for type 5 error -117 [ 36.971907][ T3634] EXT4-fs (loop2): Remounting filesystem read-only [ 36.979502][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 36.979524][ C1] EXT4-fs (loop2): initial error at time 1776213592: ext4_init_orphan_info:618 [ 36.979549][ C1] EXT4-fs (loop2): last error at time 1776213592: ext4_init_orphan_info:618 [ 37.011931][ T3634] EXT4-fs (loop2): mount failed [ 37.035340][ T3634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26'. [ 37.046418][ T3634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 37.070077][ T3637] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 37.088419][ T3637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 37.285568][ T3640] syz.4.28 (3640) used greatest stack depth: 9912 bytes left [ 37.340741][ T3648] loop0: detected capacity change from 0 to 512 [ 37.371838][ T3648] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.392494][ T3648] EXT4-fs (loop0): 1 orphan inode deleted [ 37.401597][ T3648] EXT4-fs (loop0): 1 truncate cleaned up [ 37.408598][ T3648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.440353][ T3648] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.31' sets config #0 [ 37.453598][ T3646] netlink: 'syz.2.30': attribute type 13 has an invalid length. [ 37.465973][ T3646] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 37.562087][ T3646] loop2: detected capacity change from 0 to 512 [ 37.574938][ T3669] bridge_slave_0: left allmulticast mode [ 37.580757][ T3669] bridge_slave_0: left promiscuous mode [ 37.586518][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.601749][ T3646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.616208][ T3669] bridge_slave_1: left allmulticast mode [ 37.630040][ T3669] bridge_slave_1: left promiscuous mode [ 37.636347][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.646750][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.681510][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.697445][ T3674] process 'syz.3.36' launched '/dev/fd/4' with NULL argv: empty string added [ 37.731911][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'. [ 37.786499][ T3669] bond0: (slave bond_slave_0): Releasing backup interface [ 37.825143][ T3669] bond0: (slave bond_slave_1): Releasing backup interface [ 37.872510][ T3669] team0: Port device team_slave_0 removed [ 37.920524][ T3669] team0: Port device team_slave_1 removed [ 37.952944][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.968959][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.013423][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.023934][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.052949][ T3669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 38.152921][ T3673] team0: Mode changed to "loadbalance" [ 38.638021][ T3687] netlink: 'syz.0.38': attribute type 2 has an invalid length. [ 38.913253][ T3685] loop2: detected capacity change from 0 to 512 [ 38.959363][ T3685] mmap: syz.2.39 (3685) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.778301][ T1031] IPVS: starting estimator thread 0... [ 39.887168][ T3719] IPVS: using max 2592 ests per chain, 129600 per kthread [ 39.894475][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 39.894503][ T28] audit: type=1400 audit(1776213595.641:161): avc: denied { create } for pid=3707 comm="syz.2.48" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.069463][ T28] audit: type=1400 audit(1776213595.681:162): avc: denied { write } for pid=3707 comm="syz.2.48" name="file0" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.136570][ T3723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.167514][ T28] audit: type=1400 audit(1776213595.681:163): avc: denied { open } for pid=3707 comm="syz.2.48" path="/13/file0" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.259492][ T28] audit: type=1400 audit(1776213595.681:164): avc: denied { ioctl } for pid=3707 comm="syz.2.48" path="/13/file0" dev="tmpfs" ino=91 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 40.308846][ T3726] bond1: (slave ip6gretap1): making interface the new active one [ 40.354416][ T3726] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 40.683769][ T3728] loop1: detected capacity change from 0 to 512 [ 40.827293][ T3728] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.52: iget: bad extra_isize 58 (inode size 256) [ 40.852204][ T3728] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.852397][ T3728] EXT4-fs (loop1): Remounting filesystem read-only [ 40.861584][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 40.861603][ C0] EXT4-fs (loop1): initial error at time 1776213596: ext4_xattr_inode_iget:441: inode 11 [ 40.861631][ C0] EXT4-fs (loop1): last error at time 1776213596: ext4_xattr_inode_iget:441: inode 11 [ 41.081669][ T3706] syz.3.47 (3706) used greatest stack depth: 9728 bytes left [ 41.190336][ T3728] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.301123][ T3728] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 41.416673][ T3728] EXT4-fs (loop1): 1 orphan inode deleted [ 41.471075][ T3728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.517674][ T28] audit: type=1400 audit(1776213597.151:165): avc: denied { create } for pid=3735 comm="syz.3.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 41.695828][ T3734] syz.0.53 (3734) used greatest stack depth: 9336 bytes left [ 41.740595][ T3728] syz.1.52 (3728): attempted to duplicate a private mapping with mremap. This is not supported. [ 41.765281][ T28] audit: type=1400 audit(1776213597.491:166): avc: denied { watch } for pid=3727 comm="syz.1.52" path="/11/file1" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.867248][ T28] audit: type=1400 audit(1776213597.551:167): avc: denied { write } for pid=3727 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 41.907183][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.003883][ T3742] __nla_validate_parse: 1 callbacks suppressed [ 42.003897][ T3742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.55'. [ 42.089792][ T28] audit: type=1400 audit(1776213597.831:168): avc: denied { block_suspend } for pid=3743 comm="syz.4.56" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.194849][ T28] audit: type=1400 audit(1776213597.941:169): avc: denied { bind } for pid=3749 comm="syz.3.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.257724][ T28] audit: type=1400 audit(1776213597.951:170): avc: denied { name_bind } for pid=3749 comm="syz.3.58" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 42.412285][ T3755] xt_hashlimit: size too large, truncated to 1048576 [ 42.551314][ T3756] loop3: detected capacity change from 0 to 2048 [ 42.857915][ T3764] tipc: Started in network mode [ 42.863103][ T3764] tipc: Node identity 0acf1d4a6287, cluster identity 4711 [ 42.871741][ T3764] tipc: Enabled bearer , priority 0 [ 42.897783][ T3765] syzkaller0: entered promiscuous mode [ 42.915101][ T3765] syzkaller0: entered allmulticast mode [ 42.935182][ T3762] tipc: Resetting bearer [ 42.976690][ T3761] tipc: Resetting bearer [ 42.989122][ T3761] tipc: Disabling bearer [ 43.126406][ T3786] loop1: detected capacity change from 0 to 2048 [ 43.141742][ T3786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.159051][ T3786] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 43.174854][ T3786] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 43.188685][ T3786] EXT4-fs (loop1): This should not happen!! Data will be lost [ 43.188685][ T3786] [ 43.199394][ T3786] EXT4-fs (loop1): Total free blocks count 0 [ 43.205543][ T3786] EXT4-fs (loop1): Free/Dirty block details [ 43.211916][ T3786] EXT4-fs (loop1): free_blocks=66060288 [ 43.217757][ T3786] EXT4-fs (loop1): dirty_blocks=48 [ 43.223017][ T3786] EXT4-fs (loop1): Block reservation details [ 43.230389][ T3786] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 43.242219][ T3786] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.257748][ T3785] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz.1.72: data will be lost [ 43.751339][ T3815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 44.242351][ T3818] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.303773][ T3818] syz.3.79 uses obsolete (PF_INET,SOCK_PACKET) [ 44.447523][ T3820] syzkaller0: entered promiscuous mode [ 44.463128][ T3820] syzkaller0: entered allmulticast mode [ 44.593960][ T3828] syzkaller0: entered promiscuous mode [ 44.625702][ T3828] syzkaller0: entered allmulticast mode [ 44.974111][ T3840] netlink: 'syz.3.88': attribute type 1 has an invalid length. [ 45.130047][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 45.130060][ T28] audit: type=1400 audit(1776213600.881:202): avc: denied { associate } for pid=3845 comm="syz.2.90" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 45.271761][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 45.297327][ T3849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.91'. [ 45.348794][ T3841] vlan2: entered promiscuous mode [ 45.354479][ T28] audit: type=1400 audit(1776213601.101:203): avc: denied { getopt } for pid=3847 comm="syz.2.91" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.357535][ T3841] vlan2: entered allmulticast mode [ 45.381569][ T3841] veth1_macvtap: entered allmulticast mode [ 45.502713][ T28] audit: type=1400 audit(1776213601.251:204): avc: denied { mount } for pid=3851 comm="syz.4.92" name="/" dev="ramfs" ino=6778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 45.586718][ T28] audit: type=1400 audit(1776213601.331:205): avc: denied { create } for pid=3855 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.632765][ T28] audit: type=1400 audit(1776213601.361:206): avc: denied { bind } for pid=3855 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.673404][ T28] audit: type=1400 audit(1776213601.361:207): avc: denied { listen } for pid=3855 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.696039][ T28] audit: type=1400 audit(1776213601.361:208): avc: denied { create } for pid=3855 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.717888][ T28] audit: type=1400 audit(1776213601.371:209): avc: denied { accept } for pid=3855 comm="syz.3.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.765734][ T28] audit: type=1400 audit(1776213601.421:210): avc: denied { execute } for pid=3851 comm="syz.4.92" path="/memory.swap.current" dev="ramfs" ino=6779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 45.839696][ T3860] tmpfs: Unknown parameter 'inode31' [ 45.921641][ T3858] syzkaller0: entered promiscuous mode [ 45.946576][ T3858] syzkaller0: entered allmulticast mode [ 46.020508][ T3865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 46.080208][ T3865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 46.102239][ T3865] hsr_slave_0: left promiscuous mode [ 46.116335][ T3865] hsr_slave_1: left promiscuous mode [ 46.308087][ T3873] xt_hashlimit: size too large, truncated to 1048576 [ 46.318977][ T28] audit: type=1400 audit(1776213602.061:211): avc: denied { setopt } for pid=3874 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.794382][ T3885] loop0: detected capacity change from 0 to 512 [ 46.830488][ T3885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.904880][ T3885] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.536504][ T3894] netlink: 'syz.3.104': attribute type 10 has an invalid length. [ 47.561177][ T3894] geneve1: entered promiscuous mode [ 47.588413][ T3894] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 47.653063][ T3862] syz.2.95 (3862) used greatest stack depth: 9272 bytes left [ 47.698874][ T3898] loop4: detected capacity change from 0 to 512 [ 47.722490][ T3860] syz.2.95 (3860) used greatest stack depth: 8552 bytes left [ 47.741499][ T3898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.797590][ T3898] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.814718][ T3903] netlink: 'syz.3.108': attribute type 4 has an invalid length. [ 48.032432][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.113689][ T3911] ref_ctr increment failed for inode: 0x92 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888103741440 [ 48.145030][ T3913] syzkaller0: entered promiscuous mode [ 48.161699][ T3913] syzkaller0: entered allmulticast mode [ 48.178148][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.109'. [ 48.237837][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.686852][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 48.743564][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.117'. [ 48.876398][ T3946] loop3: detected capacity change from 0 to 256 [ 48.930837][ T3946] FAT-fs (loop3): Directory bread(block 64) failed [ 48.958718][ T3946] FAT-fs (loop3): Directory bread(block 65) failed [ 48.969783][ T3946] FAT-fs (loop3): Directory bread(block 66) failed [ 48.987575][ T3946] FAT-fs (loop3): Directory bread(block 67) failed [ 48.995530][ T3946] FAT-fs (loop3): Directory bread(block 68) failed [ 49.007959][ T3946] FAT-fs (loop3): Directory bread(block 69) failed [ 49.025043][ T3946] FAT-fs (loop3): Directory bread(block 70) failed [ 49.040867][ T3946] FAT-fs (loop3): Directory bread(block 71) failed [ 49.057237][ T3946] FAT-fs (loop3): Directory bread(block 72) failed [ 49.064999][ T3946] FAT-fs (loop3): Directory bread(block 73) failed [ 49.156069][ T3946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.605237][ T3971] loop0: detected capacity change from 0 to 256 [ 50.053956][ T3971] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.384567][ T3987] loop0: detected capacity change from 0 to 2048 [ 51.410315][ T3987] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 15 [ 51.506650][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 51.506665][ T28] audit: type=1400 audit(1776213607.251:228): avc: denied { ioctl } for pid=3990 comm="syz.1.135" path="socket:[7666]" dev="sockfs" ino=7666 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.292756][ T28] audit: type=1400 audit(1776213608.041:229): avc: denied { kexec_image_load } for pid=4010 comm="syz.0.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 53.085623][ T4018] loop4: detected capacity change from 0 to 1024 [ 53.145683][ T4018] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 53.167310][ T4018] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 53.199011][ T4018] EXT4-fs error (device loop4): ext4_get_journal_inode:5890: comm syz.4.144: inode #1: comm syz.4.144: iget: illegal inode # [ 53.257393][ T4018] loop4: lost filesystem error report for type 5 error -117 [ 53.265716][ T4018] EXT4-fs (loop4): no journal found [ 53.273749][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 53.273897][ C1] EXT4-fs (loop4): initial error at time 1776213609: ext4_get_journal_inode:5890 [ 53.274078][ C1] EXT4-fs (loop4): last error at time 1776213609: ext4_get_journal_inode:5890 [ 53.456989][ T4018] EXT4-fs (loop4): can't get journal size [ 53.600067][ T4018] EXT4-fs (loop4): failed to initialize system zone (-22) [ 53.665105][ T4014] kexec: Could not allocate control_code_buffer [ 53.676170][ T4018] EXT4-fs (loop4): mount failed [ 54.015251][ T4035] syzkaller0: entered promiscuous mode [ 54.044456][ T4035] syzkaller0: entered allmulticast mode [ 54.133358][ T28] audit: type=1400 audit(1776213609.881:230): avc: denied { create } for pid=4040 comm="syz.2.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 54.146242][ T3985] syz.3.132 (3985) used greatest stack depth: 7696 bytes left [ 54.357793][ T4052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 54.589683][ T28] audit: type=1400 audit(1776213610.341:231): avc: denied { read } for pid=4063 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.664684][ T28] audit: type=1400 audit(1776213610.411:232): avc: denied { write } for pid=4063 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.784371][ T4064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 54.820552][ T28] audit: type=1400 audit(1776213610.511:233): avc: denied { setopt } for pid=4063 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.938001][ T28] audit: type=1400 audit(1776213610.511:234): avc: denied { read } for pid=4063 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.970043][ T4064] bond1: option lacp_active: invalid value (5) [ 55.028963][ T4064] bond1 (unregistering): Released all slaves [ 55.198936][ T28] audit: type=1326 audit(1776213610.931:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fce6c819 code=0x7ffc0000 [ 55.248718][ T28] audit: type=1326 audit(1776213610.931:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fce6c819 code=0x7ffc0000 [ 55.274442][ T4075] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.281746][ T4075] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.297544][ T28] audit: type=1326 audit(1776213610.931:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fce6c819 code=0x7ffc0000 [ 55.323311][ T4080] netlink: 'syz.1.162': attribute type 4 has an invalid length. [ 55.991229][ T4083] netlink: 'syz.1.162': attribute type 4 has an invalid length. [ 56.820562][ T4096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'. [ 56.833782][ T4075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.856426][ T4075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.899096][ T4099] netlink: 'syz.1.162': attribute type 4 has an invalid length. [ 56.907725][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 56.907740][ T28] audit: type=1326 audit(1776213612.661:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fce6c819 code=0x7ffc0000 [ 56.994200][ T4101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4101 comm=syz.4.166 [ 57.013002][ T28] audit: type=1326 audit(1776213612.661:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fce6c819 code=0x7ffc0000 [ 57.039258][ T4092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 57.052174][ T4101] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 57.061386][ T28] audit: type=1326 audit(1776213612.691:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f01fce6c819 code=0x7ffc0000 [ 57.088367][ T4101] netlink: 5 bytes leftover after parsing attributes in process `syz.4.166'. [ 57.105384][ T3589] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.120120][ T3589] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.147265][ T3589] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.198204][ T3589] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.249659][ T4113] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 57.333319][ T4113] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 57.378898][ T4118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 57.413678][ T4120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 57.447889][ T4118] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 57.488342][ T4118] bond1 (unregistering): Released all slaves [ 57.557785][ T4120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 57.687648][ T4126] Set syz1 is full, maxelem 0 reached [ 57.784537][ T28] audit: type=1400 audit(1776213613.531:335): avc: denied { write } for pid=4127 comm="syz.1.174" path="socket:[8971]" dev="sockfs" ino=8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.822791][ T4130] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4130 comm=syz.3.175 [ 57.881821][ T4136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4136 comm=syz.3.178 [ 57.882102][ T4136] nft_compat: unsupported protocol 0 [ 57.931519][ T28] audit: type=1400 audit(1776213613.681:336): avc: denied { ioctl } for pid=4137 comm="syz.3.179" path="socket:[8994]" dev="sockfs" ino=8994 ioctlcmd=0x8949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.377344][ T28] audit: type=1400 audit(1776213614.121:337): avc: denied { remount } for pid=4143 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 58.514514][ T28] audit: type=1400 audit(1776213614.151:338): avc: denied { ioctl } for pid=4143 comm="syz.0.181" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 58.699263][ T4149] syzkaller0: entered promiscuous mode [ 58.746622][ T4149] syzkaller0: entered allmulticast mode [ 58.985053][ T4153] netlink: 'syz.1.183': attribute type 10 has an invalid length. [ 59.011105][ T4157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 59.040169][ T4153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.064379][ T4153] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 59.084876][ T4154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.121573][ T4158] bond0: (slave batadv0): Releasing backup interface [ 59.166617][ T4159] bond1: (slave ip6gretap2): making interface the new active one [ 59.186770][ T4159] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 59.214793][ T4157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 59.707957][ T4173] netlink: 'syz.3.189': attribute type 4 has an invalid length. [ 59.716213][ T4173] netlink: 'syz.3.189': attribute type 4 has an invalid length. [ 59.748357][ T4173] netlink: 'syz.3.189': attribute type 4 has an invalid length. [ 60.084338][ T4182] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 60.107369][ T28] audit: type=1400 audit(1776213615.851:339): avc: denied { read write } for pid=4178 comm="syz.0.191" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.421060][ T28] audit: type=1400 audit(1776213615.851:340): avc: denied { open } for pid=4178 comm="syz.0.191" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.524606][ T28] audit: type=1400 audit(1776213616.211:341): avc: denied { read write } for pid=4190 comm="syz.0.194" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 60.648038][ T4193] netlink: 'syz.0.195': attribute type 4 has an invalid length. [ 60.667929][ T4193] netlink: 152 bytes leftover after parsing attributes in process `syz.0.195'. [ 61.233752][ T4193] .`: renamed from bond0 (while UP) [ 61.921888][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 61.921903][ T28] audit: type=1326 audit(1776221809.671:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f071635d04e code=0x7ffc0000 [ 61.963211][ T28] audit: type=1326 audit(1776221809.701:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f071635d04e code=0x7ffc0000 [ 62.021899][ T28] audit: type=1326 audit(1776221809.711:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f071635d04e code=0x7ffc0000 [ 62.046123][ T28] audit: type=1326 audit(1776221809.711:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f071635d04e code=0x7ffc0000 [ 62.105576][ T28] audit: type=1326 audit(1776221809.751:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f071635d04e code=0x7ffc0000 [ 62.146682][ T28] audit: type=1326 audit(1776221809.751:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f071635d04e code=0x7ffc0000 [ 62.176566][ T28] audit: type=1326 audit(1776221809.751:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f071635d04e code=0x7ffc0000 [ 62.228583][ T28] audit: type=1326 audit(1776221809.751:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f071635d04e code=0x7ffc0000 [ 62.310760][ T4251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.209'. [ 62.347450][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.354772][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.427208][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.439170][ T4251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.570687][ T3587] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.597031][ T3587] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.668021][ T3587] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.739148][ T28] audit: type=1326 audit(1776221809.751:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f071635d04e code=0x7ffc0000 [ 62.824699][ T28] audit: type=1326 audit(1776221809.761:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4217 comm="syz.0.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f071635d04e code=0x7ffc0000 [ 62.853350][ T3587] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.268588][ T3384] IPVS: starting estimator thread 0... [ 65.283275][ T4283] loop0: detected capacity change from 0 to 512 [ 65.318038][ T4283] EXT4-fs (loop0): 1 truncate cleaned up [ 65.342296][ T4283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.367122][ T4290] IPVS: using max 2016 ests per chain, 100800 per kthread [ 65.455099][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.570413][ T4291] netlink: 'syz.3.221': attribute type 13 has an invalid length. [ 65.650404][ T4300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.223'. [ 65.676100][ T4291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.685541][ T4291] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.761832][ T4291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.789221][ T4305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 65.884045][ T4289] loop3: detected capacity change from 0 to 512 [ 65.962103][ T4289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.007254][ T4300] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.516292][ T4305] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 66.708106][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.907482][ T4313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.226'. [ 67.382971][ T4315] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.224'. [ 67.803776][ T4330] Illegal XDP return value 4294967262 on prog (id 70) dev N/A, expect packet loss! [ 67.813842][ T4328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.229'. [ 67.858926][ T4332] bridge_slave_0: left allmulticast mode [ 67.867149][ T4332] bridge_slave_0: left promiscuous mode [ 67.873265][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.893175][ T4332] bridge_slave_1: left allmulticast mode [ 67.899576][ T4332] bridge_slave_1: left promiscuous mode [ 67.906900][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.925618][ T4332] bond0: (slave bond_slave_0): Releasing backup interface [ 67.937599][ T4332] bond0: (slave bond_slave_1): Releasing backup interface [ 67.953012][ T4332] team0: Port device team_slave_0 removed [ 67.964402][ T4332] team0: Port device team_slave_1 removed [ 67.976528][ T4335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.231'. [ 67.978819][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.994096][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.002996][ T4332] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.058341][ T4334] team0: Mode changed to "loadbalance" [ 69.272864][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 69.272879][ T28] audit: type=1400 audit(1776221817.011:498): avc: denied { create } for pid=4347 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 69.301016][ T4348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 69.379551][ T4348] vlan2: entered promiscuous mode [ 69.410417][ T4348] dummy0: entered promiscuous mode [ 69.655869][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'. [ 69.741425][ T4359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.802887][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 69.829907][ T4359] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 69.887830][ T4359] macvlan2: entered promiscuous mode [ 69.887862][ T4359] macvlan2: entered allmulticast mode [ 69.888301][ T4359] bond2: entered promiscuous mode [ 69.888316][ T4359] bridge1: entered promiscuous mode [ 69.888675][ T4359] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 69.889394][ T4359] bond2: left promiscuous mode [ 69.889408][ T4359] bridge1: left promiscuous mode [ 70.559638][ T4374] loop3: detected capacity change from 0 to 128 [ 70.746578][ T4378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.241'. [ 70.752615][ T28] audit: type=1400 audit(1776221818.501:499): avc: denied { bind } for pid=4373 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.758610][ T28] audit: type=1400 audit(1776221818.511:500): avc: denied { write } for pid=4373 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.060706][ T4386] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 71.139313][ T4388] netlink: 'syz.2.243': attribute type 4 has an invalid length. [ 71.163139][ T4388] netlink: 152 bytes leftover after parsing attributes in process `syz.2.243'. [ 71.199364][ T4388] .`: renamed from bond0 (while UP) [ 71.545585][ T4395] bridge_slave_0: left allmulticast mode [ 71.552013][ T4395] bridge_slave_0: left promiscuous mode [ 71.563321][ T4395] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.575512][ T4395] bridge_slave_1: left allmulticast mode [ 71.584817][ T4395] bridge_slave_1: left promiscuous mode [ 71.597223][ T4395] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.626157][ T4395] .`: (slave bond_slave_0): Releasing backup interface [ 71.646339][ T4395] .`: (slave bond_slave_1): Releasing backup interface [ 71.662635][ T4395] team0: Port device team_slave_0 removed [ 71.679192][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 71.697036][ T4395] team0: Port device team_slave_1 removed [ 71.707911][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.715517][ T4395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.726216][ T4400] team0: Mode changed to "loadbalance" [ 71.880074][ T4409] netlink: 'syz.3.254': attribute type 4 has an invalid length. [ 71.889930][ T4409] netlink: 'syz.3.254': attribute type 4 has an invalid length. [ 71.901057][ T4409] netlink: 'syz.3.254': attribute type 4 has an invalid length. [ 73.080487][ T28] audit: type=1400 audit(1776221820.831:501): avc: denied { bind } for pid=4427 comm="syz.0.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.124638][ T4423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.186677][ T4430] loop3: detected capacity change from 0 to 256 [ 73.238958][ T28] audit: type=1400 audit(1776221820.991:502): avc: denied { accept } for pid=4431 comm="syz.1.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 73.259495][ T28] audit: type=1400 audit(1776221821.011:503): avc: denied { mounton } for pid=4429 comm="syz.3.259" path="/proc/168/task" dev="proc" ino=10399 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 73.391802][ T4440] netlink: 'syz.3.261': attribute type 4 has an invalid length. [ 73.400485][ T4440] netlink: 152 bytes leftover after parsing attributes in process `syz.3.261'. [ 73.495673][ T4440] .`: renamed from bond0 (while UP) [ 73.679503][ T4444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.758908][ T4444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.382139][ T4480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.276'. [ 74.569280][ T4486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.588931][ T4483] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 74.755097][ T4483] netlink: 152 bytes leftover after parsing attributes in process `syz.1.277'. [ 74.851794][ T4486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.142787][ T4483] .`: renamed from bond0 (while UP) [ 75.486028][ T4489] loop0: detected capacity change from 0 to 2048 [ 75.531192][ T4489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.364118][ T28] audit: type=1400 audit(1776221824.091:504): avc: denied { accept } for pid=4499 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.595811][ T28] audit: type=1400 audit(1776221824.311:505): avc: denied { create } for pid=4488 comm="syz.0.279" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 76.628178][ T28] audit: type=1400 audit(1776221824.311:506): avc: denied { add_name } for pid=4488 comm="syz.0.279" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 76.650614][ T28] audit: type=1400 audit(1776221824.321:507): avc: denied { create } for pid=4488 comm="syz.0.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 76.770726][ T28] audit: type=1400 audit(1776221824.381:508): avc: denied { read write open } for pid=4488 comm="syz.0.279" path="/51/file0/bus/file1" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.926338][ T28] audit: type=1400 audit(1776221824.641:509): avc: denied { create } for pid=4509 comm="syz.1.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 76.989525][ T28] audit: type=1400 audit(1776221824.641:510): avc: denied { sys_admin } for pid=4509 comm="syz.1.285" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 77.084933][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.635315][ T28] audit: type=1400 audit(1776221825.381:511): avc: denied { setopt } for pid=4521 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 77.681223][ T4527] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 77.700630][ T4529] netlink: 88 bytes leftover after parsing attributes in process `syz.2.291'. [ 77.718811][ T4527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.762839][ T4527] bond0: (slave gretap1): making interface the new active one [ 77.771480][ T4527] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 77.787394][ T4527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4527 comm=syz.1.290 [ 77.882378][ T28] audit: type=1400 audit(1776221825.631:512): avc: denied { setopt } for pid=4534 comm="syz.0.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 77.938497][ T28] audit: type=1400 audit(1776221825.681:513): avc: denied { name_bind } for pid=4536 comm="syz.1.294" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 78.823859][ T3589] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.843106][ T3589] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.930272][ T3589] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.950521][ T3589] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.980548][ T4568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.298'. [ 79.502059][ T4575] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 79.509833][ T4575] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 79.530578][ T4575] netlink: 14 bytes leftover after parsing attributes in process `syz.1.300'. [ 79.540447][ T4575] .` (unregistering): Released all slaves [ 79.704641][ T4578] loop0: detected capacity change from 0 to 512 [ 79.745971][ T4578] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 79.795173][ T4578] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 79.853521][ T4578] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.299: bg 0: block 248: padding at end of block bitmap is not set [ 79.927127][ T4578] loop0: lost filesystem error report for type 5 error -117 [ 79.927525][ T4578] EXT4-fs error (device loop0): ext4_acquire_dquot:7028: comm syz.0.299: Failed to acquire dquot type 1 [ 79.946401][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 79.946426][ C1] EXT4-fs (loop0): last error at time 1776221827: ext4_validate_block_bitmap:441 [ 79.962343][ T4578] loop0: lost filesystem error report for type 5 error -28 [ 79.964458][ T4578] EXT4-fs (loop0): 1 truncate cleaned up [ 79.987576][ T4578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 80.847095][ T4601] netlink: 'syz.4.306': attribute type 4 has an invalid length. [ 80.863632][ T4601] netlink: 152 bytes leftover after parsing attributes in process `syz.4.306'. [ 81.146794][ T4601] .`: renamed from bond0 (while UP) [ 81.949870][ T4619] netlink: 'syz.4.311': attribute type 10 has an invalid length. [ 82.025020][ T4619] team0: Device vxcan1 is of different type [ 82.293216][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 82.293279][ T28] audit: type=1400 audit(1776221830.041:614): avc: denied { create } for pid=4626 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 82.373641][ T28] audit: type=1400 audit(1776221830.071:615): avc: denied { read } for pid=4626 comm="syz.1.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 82.402258][ T4633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 82.420349][ T4633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.437786][ T4633] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4633 comm=syz.1.318 [ 82.902180][ T4643] loop3: detected capacity change from 0 to 4096 [ 82.935576][ T4643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.055609][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.080676][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 83.119223][ T4649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.323'. [ 83.137375][ T28] audit: type=1400 audit(1776221830.881:616): avc: denied { write } for pid=4648 comm="syz.0.323" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.177556][ T28] audit: type=1400 audit(1776221830.911:617): avc: denied { mount } for pid=4648 comm="syz.0.323" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 83.203180][ T28] audit: type=1400 audit(1776221830.911:618): avc: denied { remount } for pid=4648 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 83.224600][ T28] audit: type=1400 audit(1776221830.911:619): avc: denied { unmount } for pid=4648 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 83.250861][ T28] audit: type=1400 audit(1776221830.991:620): avc: denied { create } for pid=4652 comm="syz.0.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 83.260888][ T4653] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 83.305603][ T4653] bridge0: port 1(macvlan2) entered blocking state [ 83.314515][ T4653] bridge0: port 1(macvlan2) entered disabled state [ 83.328887][ T4653] macvlan2: entered allmulticast mode [ 83.340113][ T4653] .`: entered allmulticast mode [ 83.353991][ T4653] macvlan2: entered promiscuous mode [ 83.439177][ T4657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 83.480384][ T4637] syz.2.319 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 83.529649][ T4637] CPU: 1 UID: 0 PID: 4637 Comm: syz.2.319 Tainted: G W syzkaller #0 PREEMPT(full) [ 83.529677][ T4637] Tainted: [W]=WARN [ 83.529703][ T4637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 83.529713][ T4637] Call Trace: [ 83.529719][ T4637] [ 83.529725][ T4637] __dump_stack+0x1d/0x30 [ 83.529838][ T4637] dump_stack_lvl+0x95/0xd0 [ 83.529860][ T4637] dump_stack+0x15/0x1b [ 83.529877][ T4637] dump_header+0x80/0x240 [ 83.529895][ T4637] oom_kill_process+0x295/0x350 [ 83.529936][ T4637] out_of_memory+0x97d/0xb80 [ 83.530089][ T4637] try_charge_memcg+0x62e/0xa10 [ 83.530125][ T4637] obj_cgroup_charge_pages+0x23/0xc0 [ 83.530179][ T4637] __memcg_kmem_charge_page+0x9e/0x170 [ 83.530236][ T4637] __alloc_frozen_pages_noprof+0x18a/0x350 [ 83.530324][ T4637] alloc_pages_mpol+0xb3/0x260 [ 83.530351][ T4637] alloc_pages_noprof+0x8f/0x140 [ 83.530475][ T4637] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 83.530573][ T4637] __kvmalloc_node_noprof+0x3d4/0x640 [ 83.530599][ T4637] ? futex_hash_allocate+0x190/0x9a0 [ 83.530625][ T4637] ? futex_hash_allocate+0x190/0x9a0 [ 83.530714][ T4637] futex_hash_allocate+0x190/0x9a0 [ 83.530742][ T4637] ? cap_task_prctl+0x13f/0x6b0 [ 83.530813][ T4637] futex_hash_prctl+0xd8/0xf0 [ 83.530837][ T4637] __se_sys_prctl+0x4f4/0x1400 [ 83.530861][ T4637] __x64_sys_prctl+0x67/0x80 [ 83.530927][ T4637] x64_sys_call+0x2533/0x3020 [ 83.530953][ T4637] do_syscall_64+0x12c/0x3b0 [ 83.530976][ T4637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.530997][ T4637] RIP: 0033:0x7feb745fc819 [ 83.531018][ T4637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.531054][ T4637] RSP: 002b:00007feb73057028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 83.531106][ T4637] RAX: ffffffffffffffda RBX: 00007feb74875fa0 RCX: 00007feb745fc819 [ 83.531169][ T4637] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 83.531181][ T4637] RBP: 00007feb74692c91 R08: 0000000000000000 R09: 0000000000000000 [ 83.531192][ T4637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.531204][ T4637] R13: 00007feb74876038 R14: 00007feb74875fa0 R15: 00007ffe3464e9d8 [ 83.531223][ T4637] [ 83.772122][ T4637] memory: usage 307200kB, limit 307200kB, failcnt 3172 [ 83.786922][ T4637] memory+swap: usage 307852kB, limit 9007199254740988kB, failcnt 0 [ 83.800745][ T4637] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 83.808426][ T4637] Memory cgroup stats for /syz2: [ 83.808722][ T4637] cache 0 [ 83.816712][ T4637] rss 4096 [ 83.820037][ T4637] shmem 0 [ 83.823119][ T4637] mapped_file 0 [ 83.826846][ T4637] dirty 0 [ 83.834931][ T4637] writeback 0 [ 83.838372][ T4637] workingset_refault_anon 5130 [ 83.843338][ T4637] workingset_refault_file 1802 [ 83.848901][ T4637] swap 667648 [ 83.852275][ T4637] swapcached 47632384 [ 83.856403][ T4637] pgpgin 95723 [ 83.859849][ T28] audit: type=1326 audit(1776221831.611:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fce6c819 code=0x7ffc0000 [ 83.890047][ T4637] pgpgout 95721 [ 83.895563][ T4637] pgfault 78411 [ 83.899631][ T4637] pgmajfault 760 [ 83.903446][ T4637] inactive_anon 0 [ 83.907783][ T28] audit: type=1326 audit(1776221831.611:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fce6c819 code=0x7ffc0000 [ 83.937131][ T3322] ================================================================== [ 83.945259][ T3322] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 83.955893][ T3322] [ 83.958326][ T3322] read-write to 0xffffffff86c07a00 of 8 bytes by interrupt on cpu 0: [ 83.967017][ T3322] tick_do_update_jiffies64+0x113/0x1c0 [ 83.972677][ T3322] tick_nohz_handler+0x8d/0x3d0 [ 83.977647][ T3322] __hrtimer_run_queues+0x276/0x4f0 [ 83.983121][ T3322] hrtimer_interrupt+0x261/0x850 [ 83.988086][ T3322] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 83.994184][ T3322] sysvec_apic_timer_interrupt+0x32/0x80 [ 83.999929][ T3322] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 84.006182][ T3322] [ 84.008713][ T3322] read to 0xffffffff86c07a00 of 8 bytes by task 3322 on cpu 1: [ 84.016427][ T3322] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 84.022814][ T3322] count_shadow_nodes+0x6a/0x230 [ 84.028127][ T3322] do_shrink_slab+0x60/0x630 [ 84.032912][ T3322] shrink_slab+0x538/0x880 [ 84.037520][ T3322] shrink_node+0x6bc/0x2130 [ 84.042567][ T3322] do_try_to_free_pages+0x408/0xc80 [ 84.044163][ T4637] active_anon 0 [ 84.048054][ T3322] try_to_free_mem_cgroup_pages+0x1f5/0x410 [ 84.048096][ T3322] try_charge_memcg+0x37e/0xa10 [ 84.048112][ T3322] __mem_cgroup_charge+0x65/0x150 [ 84.048127][ T3322] filemap_add_folio+0x110/0x350 [ 84.048146][ T3322] page_cache_ra_unbounded+0x20e/0x420 [ 84.052038][ T4637] inactive_file 0 [ 84.057845][ T3322] page_cache_ra_order+0x153/0x220 [ 84.057882][ T3322] do_sync_mmap_readahead+0x33d/0x350 [ 84.057903][ T3322] filemap_fault+0x369/0xb70 [ 84.057921][ T3322] __do_fault+0xbc/0x200 [ 84.057937][ T3322] handle_mm_fault+0x11e2/0x3020 [ 84.063370][ T4637] active_file 4096 [ 84.068161][ T3322] do_user_addr_fault+0x62f/0x1050 [ 84.068202][ T3322] exc_page_fault+0x62/0xa0 [ 84.068226][ T3322] asm_exc_page_fault+0x26/0x30 [ 84.068243][ T3322] [ 84.068247][ T3322] value changed: 0x00000000ffffab65 -> 0x00000000ffffab66 [ 84.068257][ T3322] [ 84.068261][ T3322] Reported by Kernel Concurrency Sanitizer on: [ 84.068275][ T3322] CPU: 1 UID: 0 PID: 3322 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 84.073386][ T4637] unevictable 0 [ 84.079285][ T3322] Tainted: [W]=WARN [ 84.079296][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 84.079308][ T3322] ================================================================== [ 84.079821][ T28] audit: type=1326 audit(1776221831.611:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01fce6c819 code=0x7ffc0000 [ 84.130110][ T4637] hierarchical_memory_limit 314572800 [ 84.215610][ T4637] hierarchical_memsw_limit 9223372036854771712 [ 84.222083][ T4637] total_cache 0 [ 84.225776][ T4637] total_rss 4096 [ 84.229495][ T4637] total_shmem 0 [ 84.233018][ T4637] total_mapped_file 0 [ 84.237668][ T4637] total_dirty 0 [ 84.241272][ T4637] total_writeback 0 [ 84.245777][ T4637] total_workingset_refault_anon 5130 [ 84.251132][ T4637] total_workingset_refault_file 1802 [ 84.256839][ T4637] total_swap 667648 [ 84.260793][ T4637] total_swapcached 47632384 [ 84.265365][ T4637] total_pgpgin 95723 [ 84.269433][ T4637] total_pgpgout 95721 [ 84.273476][ T4637] total_pgfault 78411 [ 84.278133][ T4637] total_pgmajfault 760 [ 84.282222][ T4637] total_inactive_anon 0 [ 84.286534][ T4637] total_active_anon 0 [ 84.290689][ T4637] total_inactive_file 0 [ 84.295210][ T4637] total_active_file 4096 [ 84.299724][ T4637] total_unevictable 0 [ 84.303982][ T4637] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.319,pid=4636,uid=0 [ 84.319945][ T4637] Memory cgroup out of memory: Killed process 4636 (syz.2.319) total-vm:96212kB, anon-rss:1228kB, file-rss:22152kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0