last executing test programs: 10m14.98225642s ago: executing program 32 (id=227): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r0, 0x0) 9m40.93486126s ago: executing program 33 (id=920): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x22020400) move_mount(r0, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) 9m34.884925293s ago: executing program 34 (id=1009): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9m34.507723276s ago: executing program 35 (id=1018): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x49) lseek(r2, 0x800000000000102, 0x2) 9m6.411486535s ago: executing program 36 (id=1385): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 8m54.018694911s ago: executing program 37 (id=1518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB='\b\x00;'], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40) 8m40.156038215s ago: executing program 38 (id=1645): syz_emit_ethernet(0x0, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x12cfff}]}}]}, 0x40}}, 0x4008000) 7m44.736581528s ago: executing program 39 (id=2028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 7m7.901014357s ago: executing program 40 (id=2508): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x270}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) 6m29.336590501s ago: executing program 41 (id=2864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2d}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 6m20.083653477s ago: executing program 42 (id=2938): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2160) 5m39.795026037s ago: executing program 43 (id=3386): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x3, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x2}}, 0x2e) 5m39.246187484s ago: executing program 44 (id=3396): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m36.303825458s ago: executing program 4 (id=3416): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r2, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) 5m36.024572677s ago: executing program 4 (id=3420): r0 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x102) lseek(r2, 0x103, 0x1) getdents(r2, 0x0, 0x58) 5m35.904157371s ago: executing program 4 (id=3422): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@noquota}]}, 0x1, 0x440, &(0x7f0000000780)="$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") ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x5207, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) socket(0x2, 0x80805, 0x0) 5m33.207580317s ago: executing program 4 (id=3431): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 5m33.13489879s ago: executing program 4 (id=3432): mkdir(0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 5m32.49869044s ago: executing program 4 (id=3437): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 5m32.427225993s ago: executing program 45 (id=3437): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 5m4.139920507s ago: executing program 8 (id=3623): openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x80b40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m3.975852623s ago: executing program 8 (id=3625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x80, 0x40, 0x42, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 5m3.677215232s ago: executing program 8 (id=3627): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x420, 0x2, 0xfffffffe, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='L@\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m2.129378912s ago: executing program 8 (id=3638): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 5m1.718300785s ago: executing program 8 (id=3642): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) get_mempolicy(&(0x7f0000000000), 0x0, 0x3, &(0x7f0000ffe000/0x1000)=nil, 0x4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, &(0x7f00000000c0)) 5m1.456895604s ago: executing program 8 (id=3644): unshare(0x22020600) r0 = fsopen(&(0x7f0000000300)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 5m1.376827836s ago: executing program 46 (id=3644): unshare(0x22020600) r0 = fsopen(&(0x7f0000000300)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 4m19.772025717s ago: executing program 9 (id=3931): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000002345f3870000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) 4m18.953884654s ago: executing program 9 (id=3937): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) 4m18.839141028s ago: executing program 6 (id=3941): socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m18.782112509s ago: executing program 6 (id=3942): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r3, r1, 0x4, r1}, 0x10) 4m18.726813271s ago: executing program 6 (id=3943): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 4m18.722440611s ago: executing program 9 (id=3944): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m18.656628353s ago: executing program 9 (id=3945): r0 = syz_clone(0x8000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) ptrace(0x8, r0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace(0x4207, r0) 4m18.643774283s ago: executing program 6 (id=3946): unshare(0x28000600) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) 4m18.364317852s ago: executing program 7 (id=3949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000400)=[{&(0x7f00000006c0)="f0", 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 4m18.346665593s ago: executing program 9 (id=3951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001800000007000000000000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 4m18.189521188s ago: executing program 7 (id=3953): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x10, 0x9, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 4m18.092486951s ago: executing program 9 (id=3954): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x62040200) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00010000ac00eb00240012800b000100697036746e"], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) socket$kcm(0xa, 0x2, 0x3a) 4m18.089303521s ago: executing program 6 (id=3956): syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x101800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000026000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc89e, 0xf000, 0x4, 0x1d4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0) 4m17.043537415s ago: executing program 6 (id=3959): unshare(0x60000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="081286dd0001280004000003a60c6eec00be004429fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 4m12.471817411s ago: executing program 7 (id=3964): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xfc00) close_range(r0, 0xffffffffffffffff, 0x0) 4m12.238119428s ago: executing program 7 (id=3965): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x2, 0x3}}, 0x20) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m12.18949235s ago: executing program 7 (id=3966): timer_create(0x8, &(0x7f0000000240)={0x0, 0x18, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x8000}, 0xe) io_setup(0x239f, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x6621, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x1, 0x15c}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) io_cancel(r2, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x0) 4m11.606060269s ago: executing program 7 (id=3967): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x12, 0x17, 0xa4, &(0x7f0000000580)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m2.881741168s ago: executing program 47 (id=3954): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x62040200) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00010000ac00eb00240012800b000100697036746e"], 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) socket$kcm(0xa, 0x2, 0x3a) 4m1.87463534s ago: executing program 48 (id=3959): unshare(0x60000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="081286dd0001280004000003a60c6eec00be004429fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 3m56.362215307s ago: executing program 49 (id=3967): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x12, 0x17, 0xa4, &(0x7f0000000580)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.786661657s ago: executing program 1 (id=7722): syz_open_dev$evdev(0x0, 0xfffffffffffffffc, 0x822b01) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x80000000000006}, 0x0, 0x5bd20da1, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 4.07976589s ago: executing program 1 (id=7736): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0x9) recvfrom$inet(r2, 0x0, 0x0, 0x2, 0x0, 0x0) 3.257379646s ago: executing program 2 (id=7748): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x2b8, 0xffffffff, 0xffffffff, 0x2b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'\x00', 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f000700000000000a"], 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000360000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r4, 0x29, 0xce, &(0x7f0000000000), &(0x7f0000000100)=0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000005c0), 0x0}, 0x20) 3.221944787s ago: executing program 2 (id=7749): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0xd, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x337, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f00000005c0)="50fbdf", 0x3, 0x44, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008040)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/115, 0x73}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000008c0)=""/108, 0x6c}, {&(0x7f0000000a40)=""/248, 0xf8}, {&(0x7f0000000b40)=""/250, 0xfa}], 0x3}, 0x8ebc}, {{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x49ae0f7a}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000007f00)}, 0x7}], 0x6, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a9d4045f8010000004bd295857d6312d7a479f9025c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5e5176e584c970207f23b0073ca0000", 0xfffffffffffffffc, 0x48801, 0x0, 0x4a) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) 3.221669437s ago: executing program 1 (id=7750): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) shutdown(r1, 0x1) 3.166346549s ago: executing program 0 (id=7751): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c788a5", 0x3) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.811585601s ago: executing program 1 (id=7755): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) 2.297209197s ago: executing program 2 (id=7761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) 2.117621283s ago: executing program 1 (id=7763): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r2}, {r1, 0x630d}, {r2, 0xe70d2fe16baa60be}], 0x3, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x10000, 0x0, 0x0) 1.828474572s ago: executing program 5 (id=7766): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0x1dd4, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1d9c, 0x2, [@TCA_CGROUP_ACT={0x1d98, 0x1, [@m_connmark={0x88, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe50, 0x5, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x7ffffffc, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xe50, 0xb, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x456, 0x4, 0x6, 0x1}, 0xb9, 0xf3}, [{0x8bc, 0x1, 0x6, 0x4, 0x100, 0xfffffffd}, {0x0, 0x68, 0xfffffff8, 0x6, 0x5, 0x4}, {0xbb05, 0x97af, 0x3, 0x2, 0x4, 0x6}, {0x6, 0x1, 0x3, 0x2c27f2d1, 0x0, 0x559a}, {0x0, 0x8, 0x2, 0x1, 0x2, 0x5}, {0x10000, 0x1000, 0x7f, 0x8, 0x3, 0x6}, {0x4, 0x2c4, 0x7ab, 0x4, 0x7}, {0xa92, 0x3, 0xb, 0x0, 0x1, 0x5}, {0x7fff, 0xe, 0xa524, 0x40, 0x5, 0x101}, {0xb, 0x8, 0xfffffff8, 0x1000, 0xd72, 0x4}, {0x9, 0x8000000, 0x0, 0x2, 0x2, 0x3ff}, {0x7, 0x3, 0x6, 0xcea, 0xff, 0x80000001}, {0x1800000, 0x9, 0x3, 0x7ff, 0x1, 0x4}, {0xfffffffd, 0xfffffffd, 0x9, 0x0, 0xd1, 0x61b}, {0xfffffff1, 0x80, 0x7, 0x1, 0x4, 0x1000}, {0xdab4, 0x3b6, 0x8000, 0x9, 0x1}, {0x2, 0x400, 0x0, 0x9, 0x7, 0x2}, {0xffffffff, 0x245, 0x63, 0x80000001, 0xc00000, 0xa}, {0xfffffffc, 0x10000, 0x80000001, 0x8, 0x8, 0x5}, {0x80000001, 0x1, 0x5e67, 0x0, 0xff, 0x9}, {0x6, 0x5, 0x1a, 0x618, 0x2, 0x1}, {0x9, 0x9, 0x5, 0x6, 0x4, 0x8}, {0x1, 0x7, 0xf, 0x1, 0x2, 0x1}, {0x9, 0xa, 0x3, 0x2, 0x6, 0x9}, {0x495f, 0xfe, 0x9bb3, 0x2, 0xfffffffa, 0x7}, {0x9, 0x10001, 0xc, 0x76, 0x6, 0x4}, {0x8c, 0x4, 0x8f29, 0x0, 0xffff8001, 0x7}, {0xfff, 0xffff, 0xc, 0xe4, 0x6, 0x7}, {0x7, 0x8, 0xffff8001, 0x100, 0x7}, {0x4, 0xbe8b, 0x4, 0x6, 0x1, 0x3}, {0x5, 0xad4, 0x2, 0x9, 0xb1a8, 0x5}, {0x9, 0x3, 0xb6e, 0xfff, 0x200, 0x9}, {0x4, 0x8000, 0x8, 0x5, 0x6}, {0x4, 0x2, 0x6, 0x3, 0x3, 0x1}, {0x7, 0x3e, 0x6, 0x8, 0x7, 0x7}, {0x6, 0x401, 0x4, 0x9, 0x3}, {0xa, 0x40, 0x9, 0xf, 0x5, 0xf}, {0x12b8c98e, 0xfff, 0x7fffffff, 0x3, 0xe, 0x7fff}, {0x6, 0x8, 0x118, 0xe6c6, 0x6, 0x9738}, {0x3, 0x9, 0x7ff, 0x3, 0xffffffff, 0x9}, {0x8, 0x6, 0x7, 0x7, 0x2, 0x8}, {0x80000000, 0x5ce23415, 0x24, 0xfff, 0xff, 0x2}, {0x100, 0x1000, 0xca6, 0x0, 0xfffffff7, 0xa1}, {0x1, 0x8, 0x7, 0x5, 0xfffffff7, 0x3a}, {0x84c, 0x81, 0x7, 0x1, 0x1, 0x7f}, {0x9, 0x200, 0x700000, 0x1, 0x3, 0x5}, {0x6, 0x2, 0x7, 0x6, 0xfffffffb, 0x7}, {0x0, 0x6, 0xf, 0x9, 0x5, 0xd5a}, {0xfffffff7, 0x7, 0xffffff7f, 0x5, 0x8, 0x2}, {0x5, 0x8, 0x3, 0x26, 0x3, 0x400}, {0x0, 0x6, 0x6, 0x7, 0x101, 0x222}, {0x1f, 0x800, 0x3, 0xe6b, 0x0, 0xfffffff7}, {0x8, 0x4, 0x6, 0x0, 0x2, 0x5}, {0x0, 0x2, 0x2, 0x7, 0x400, 0x7}, {0x200, 0x3, 0x8000, 0x65, 0x1000, 0x40}, {0x10, 0xa, 0x4, 0x10, 0x1, 0x5}, {0x9, 0x9, 0xe95, 0x4, 0xd}, {0xe0, 0x2, 0x80000001, 0x4, 0x1a49, 0x6}, {0x2, 0x4, 0x4, 0x10, 0xfffff0ac, 0x3}, {0xbb, 0x4, 0x4, 0x1, 0x7fffffff, 0x6}, {0xffffffff, 0xffff, 0x6, 0xe4, 0x0, 0x6}, {0xfffffff9, 0x2, 0x1, 0xc, 0x8, 0x800}, {0x6, 0x4, 0x5, 0x1, 0x1, 0x4}, {0xe, 0x6, 0x1, 0x8, 0x9, 0x9}, {0x7, 0xc6, 0x3ff, 0xe7e3, 0x5, 0x9}, {0xea48, 0xfffffffd, 0x10000, 0x6, 0x3, 0x5}, {0x4, 0xffff, 0x1ff, 0x8, 0x4, 0xfffffff0}, {0xb, 0x3b3, 0x1, 0x101, 0xe11, 0x5}, {0x3, 0x4, 0x6, 0xff, 0xff, 0x7}, {0x0, 0x2, 0x8, 0x4, 0x7, 0x4}, {0x7, 0xb, 0x44df, 0x9, 0x6, 0x5d5ab339}, {0x6, 0x6, 0x40, 0x2, 0x9, 0x1ff}, {0x7, 0xffffffff, 0x4, 0x10001, 0xffffffff, 0x7}, {0x81, 0xa, 0x3, 0x8, 0xd33, 0x6}, {0x2, 0x4, 0x9ab, 0xb4, 0x5, 0xb577}, {0x0, 0xffff, 0x6, 0x7fff, 0x0, 0x5}, {0xd, 0x6, 0xaa10, 0xfffff477, 0x0, 0xff}, {0x2, 0xfffffffa, 0x4, 0x90, 0x9, 0x3e}, {0x2, 0x80000000, 0x4, 0x4, 0x90, 0x2}, {0x4, 0x1, 0x6, 0x4, 0x4, 0x7}, {0x5, 0x6, 0x4, 0xb80c, 0x5, 0x4cf1}, {0x8001, 0x4, 0x8, 0x9, 0x0, 0x6}, {0x40, 0x9, 0x18c, 0x100, 0x2, 0x9}, {0x3, 0x4, 0x9, 0x7f, 0x7, 0x179}, {0x0, 0x7, 0x2, 0x80, 0x401, 0x8}, {0x7, 0x0, 0x10001, 0xf6, 0x64f57d4f, 0x10f00000}, {0x7, 0x200, 0x200, 0x9, 0x5, 0x4512}, {0xd3, 0x0, 0x8, 0x2, 0x8, 0x101}, {0x6b0c, 0x9, 0x7, 0x3ff, 0x4}, {0x5f, 0x4, 0xffffffff, 0x0, 0x0, 0x7}, {0x4, 0x4, 0x1200000, 0x7, 0x800, 0x6}, {0x1, 0x6, 0x80, 0xef8, 0x0, 0x5}, {0x40000, 0x6, 0x1, 0x1, 0x2, 0xd09}, {0x8000, 0x9, 0xfffffffd, 0x100, 0x6, 0xfffffff7}, {0x9, 0x2, 0x9, 0x1, 0x3, 0xbe2}, {0x4, 0xa, 0x0, 0x0, 0x6, 0x6}, {0x3ff, 0x5, 0x1, 0x7000, 0x4e, 0x8}, {0xd6, 0x9, 0x10000, 0x8, 0xff, 0x2}, {0xb, 0x1, 0x1f36, 0x8ff4, 0xfff, 0x6}, {0x0, 0x516607, 0x2, 0x3, 0x3, 0xffffffff}, {0xffff4b03, 0x5, 0x10, 0x1, 0x3, 0x6}, {0x7, 0x0, 0x6, 0x8000, 0x10, 0xa}, {0x2, 0x6c, 0xffffffff, 0x2, 0x94, 0x9}, {0x3, 0x40, 0xfffffffa, 0x6, 0x0, 0xef0}, {0x8, 0x8, 0x64, 0x10, 0x49, 0x80}, {0x9, 0xc, 0x8000, 0x7, 0x3, 0x140}, {0x7, 0x7, 0xf16, 0x7ff, 0x3, 0x7}, {0x1ff, 0x9, 0x1, 0x9, 0x4e, 0xffffffff}, {0x4, 0x2, 0xffffffff, 0xe559, 0xc16, 0x4}, {0xfffff802, 0x1, 0x4, 0x1, 0x6}, {0x2, 0xf, 0x10, 0x3, 0xafae, 0x3}, {0x10000, 0x4, 0x6, 0x2, 0x6, 0xa4}, {0x0, 0x4, 0x0, 0x4, 0x1000, 0x6f17}, {0x2, 0x4, 0xd9, 0x7fffffff, 0x3, 0x805}, {0xf17, 0x4, 0x40, 0x5, 0x1, 0xff}, {0x0, 0x80000001, 0xb44f, 0xfffffffa, 0x0, 0x8a5}, {0x8000, 0x7ff, 0x5, 0x3, 0x4, 0x600}, {0x4b, 0xad, 0x8, 0x669, 0x1ff, 0x3}, {0x2, 0xa45, 0x1000, 0x0, 0xa, 0x1}, {0x4, 0x1, 0x8, 0x2, 0xe0, 0x4}, {0x4, 0xffd, 0x5, 0x3, 0x7fffffff, 0xfffffffb}, {0x8, 0x4, 0x4, 0x6, 0x1, 0x5}, {0x6, 0x0, 0xffffdbdc, 0x2, 0x9, 0x140000}, {0x2, 0x1, 0xdc, 0x8, 0x80000000, 0x569}, {0x0, 0x8, 0xffffffff, 0xa, 0x80000001, 0xa}, {0xfffffbff, 0x10, 0x8, 0x101, 0xfffffffa, 0x8000}, {0xa9c, 0x6, 0x1ff, 0x8, 0x1d, 0x3}, {0x2, 0xfffff16c, 0x5, 0x3, 0x5, 0x7ff}], [{0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2d451479be6868cc, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0xa02f5fe57b5d7768}, {0x3}, {0x2}, {0x0, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x6, 0x1}, {0x4}, {0x7}, {0x1}, {0x3}, {0x2}, {}, {0x2}, {}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x2220886d9e210a2}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x3}, {0x5}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x1dd4}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.819029782s ago: executing program 2 (id=7767): r0 = socket$inet(0x2, 0x3, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvfrom(r0, 0x0, 0x0, 0x10002, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x4, 0x34482, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x0, 0x0, 0x800000, 0x2, 0x200005, 0xcb, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) 1.691187737s ago: executing program 3 (id=7769): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) r1 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0xfdef}, {0x0, 0xe00}], 0x10000000000000fb) 1.642678648s ago: executing program 5 (id=7770): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.638147108s ago: executing program 0 (id=7771): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe80, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001b00)=[{0x0}, {&(0x7f0000000b00)}], 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8000) 1.625705959s ago: executing program 3 (id=7772): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, 0xffffffffffffffff, 0x546aa000) r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x143484) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, 0x0) 1.58996294s ago: executing program 3 (id=7773): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) ioctl$FIONCLEX(r1, 0x5450) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x2, 0xf0, 0x3}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x63, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xf}, {0xfff1, 0x9}, {0x2, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.545006261s ago: executing program 5 (id=7783): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x26}, 0x94) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc, 0xa109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x22, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f00000000c0)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 737.751827ms ago: executing program 2 (id=7774): io_uring_setup(0x1b80, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x1, 0x6}, {0x0, 0x0, 0x400000003, 0x4}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 737.616927ms ago: executing program 0 (id=7775): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000002c0)={r4, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r4, {0xe, 0x1}}}, 0x24}}, 0x4) 737.045477ms ago: executing program 5 (id=7785): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) creat(&(0x7f0000000440)='./file0\x00', 0x40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc881, 0xc000, 0x0, 0xc1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x71e7, 0x7721, 0x33, 0x0, 0x0) 736.796177ms ago: executing program 1 (id=7776): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) 715.831377ms ago: executing program 5 (id=7777): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xc}, {0x2, 0xe}, {0xfff2, 0x4}}}, 0x24}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001800400", @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 686.951688ms ago: executing program 5 (id=7778): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fchmod(r1, 0x50) 608.954181ms ago: executing program 3 (id=7779): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r0, 0x111, 0x3, 0x0, &(0x7f0000000080)) 575.551052ms ago: executing program 3 (id=7780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 535.613683ms ago: executing program 0 (id=7781): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r5, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) 509.491944ms ago: executing program 3 (id=7782): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c788a5", 0x3) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 477.208495ms ago: executing program 0 (id=7784): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0xc8d0, &(0x7f0000000280)=ANY=[@ANYRES32=0x0], 0x1, 0x314, &(0x7f00000002c0)="$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") pipe(&(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 208.973464ms ago: executing program 0 (id=7786): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) 0s ago: executing program 2 (id=7787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) kernel console output (not intermixed with test programs): all=202 compat=0 ip=0x7f094435ce59 code=0x7fc00000 [ 568.321821][T25079] sctp: [Deprecated]: syz.0.6363 (pid 25079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 568.321821][T25079] Use struct sctp_sack_info instead [ 568.394748][T25088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6364'. [ 568.887350][T25105] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 569.101933][T25112] netlink: 'syz.2.6372': attribute type 3 has an invalid length. [ 569.134663][T25112] netlink: 'syz.2.6372': attribute type 7 has an invalid length. [ 569.152233][T25112] netlink: 198320 bytes leftover after parsing attributes in process `syz.2.6372'. [ 569.232434][T25123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6376'. [ 569.250791][T25123] netlink: 'syz.3.6376': attribute type 30 has an invalid length. [ 569.284090][T25124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6376'. [ 569.312695][T25124] netlink: 'syz.3.6376': attribute type 30 has an invalid length. [ 569.711326][T25147] netlink: 'syz.5.6394': attribute type 8 has an invalid length. [ 569.737020][T25147] netlink: 'syz.5.6394': attribute type 7 has an invalid length. [ 569.759803][T25147] netlink: 194488 bytes leftover after parsing attributes in process `syz.5.6394'. [ 571.771690][T25239] hsr0: entered promiscuous mode [ 571.861651][T25242] syzkaller0: entered allmulticast mode [ 571.867582][T25242] syzkaller0: entered promiscuous mode [ 571.875721][T25242] syzkaller0 (unregistering): left allmulticast mode [ 571.882767][T25242] syzkaller0 (unregistering): left promiscuous mode [ 572.485620][ T4709] IPVS: starting estimator thread 0... [ 572.520783][ T6280] vlan2: left allmulticast mode [ 572.525706][ T6280] geneve0: left allmulticast mode [ 572.534258][ T6280] vlan2: left promiscuous mode [ 572.539645][ T6280] geneve0: left promiscuous mode [ 572.544975][ T6280] bridge0: port 3(vlan2) entered disabled state [ 572.552385][ T6280] bridge_slave_1: left allmulticast mode [ 572.558177][ T6280] bridge_slave_1: left promiscuous mode [ 572.566205][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.574356][ T6280] bridge_slave_0: left allmulticast mode [ 572.580136][ T6280] bridge_slave_0: left promiscuous mode [ 572.585941][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.589019][T25254] IPVS: using max 2352 ests per chain, 117600 per kthread [ 572.605290][ T6280] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 572.613738][ T6280] ip6gre1 (unregistering): left promiscuous mode [ 572.631880][ T6280] bond1 (unregistering): (slave gretap1): Releasing active interface [ 572.653023][ T6280] bond4 (unregistering): (slave geneve2): Releasing active interface [ 572.744058][ T6280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.779581][ T6280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.793201][ T6280] bond0 (unregistering): Released all slaves [ 572.803193][ T6280] bond1 (unregistering): Released all slaves [ 572.819746][T25272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6436'. [ 572.825000][ T6280] bond2 (unregistering): Released all slaves [ 572.829973][T25272] netlink: 'syz.1.6436': attribute type 30 has an invalid length. [ 572.846687][ T6280] bond3 (unregistering): Released all slaves [ 572.857482][ T6280] bond4 (unregistering): Released all slaves [ 572.870300][T25276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6436'. [ 572.889111][T25276] netlink: 'syz.1.6436': attribute type 30 has an invalid length. [ 572.918314][ T6290] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.943457][ T6290] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.979437][ T6280] hsr_slave_0: left promiscuous mode [ 573.001476][ T6280] hsr_slave_1: left promiscuous mode [ 573.020381][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.041336][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.110339][T25288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6443'. [ 573.187959][ T6280] team0 (unregistering): Port device team_slave_1 removed [ 573.228624][ T6280] team0 (unregistering): Port device team_slave_0 removed [ 573.336344][ T6290] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.371559][ T6290] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.665526][T25316] netlink: 'syz.3.6454': attribute type 1 has an invalid length. [ 573.741083][T25309] loop1: detected capacity change from 0 to 512 [ 573.811528][T25309] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 573.890304][T25309] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 574.033905][T25367] netlink: 'syz.3.6467': attribute type 8 has an invalid length. [ 574.059255][T25367] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.6467'. [ 574.935470][T25458] validate_nla: 1 callbacks suppressed [ 574.935501][T25458] netlink: 'syz.5.6476': attribute type 83 has an invalid length. [ 575.535005][T25485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6487'. [ 575.626380][T25491] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6491'. [ 576.593819][T25500] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6493'. [ 576.748726][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 576.748744][ T28] audit: type=1400 audit(2000000827.839:2592): avc: denied { map } for pid=25514 comm="syz.0.6499" path="socket:[75450]" dev="sockfs" ino=75450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 576.758901][T25516] netlink: 'syz.0.6499': attribute type 13 has an invalid length. [ 576.786589][T25516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6499'. [ 576.808698][ T30] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.818405][T25516] netlink: 'syz.0.6499': attribute type 13 has an invalid length. [ 576.830339][ T30] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.853407][T25516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6499'. [ 576.863277][ T30] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.872250][ T30] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 576.992026][T25525] netlink: 'syz.1.6502': attribute type 1 has an invalid length. [ 577.026161][T25525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.085079][T25525] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 577.297513][T25563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6517'. [ 577.359320][T25561] xt_time: unknown flags 0xc [ 577.386676][T25573] loop1: detected capacity change from 0 to 512 [ 577.394625][T25573] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 577.575683][T25585] netlink: 'syz.1.6527': attribute type 10 has an invalid length. [ 577.587303][T25587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6528'. [ 577.616320][T25585] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.624557][T25587] netlink: 'syz.2.6528': attribute type 30 has an invalid length. [ 577.645967][T25592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6528'. [ 577.656947][T25585] bond0: (slave team0): Enslaving as an active interface with an up link [ 577.665871][T25592] netlink: 'syz.2.6528': attribute type 30 has an invalid length. [ 577.701310][ T6286] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.727807][ T6286] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.744023][ T6286] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.753491][ T6286] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 578.367613][T25619] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.374771][T25619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.440412][T25619] bond1: left promiscuous mode [ 578.456756][T25619] ip6erspan0: left promiscuous mode [ 578.465720][T25619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 578.490869][T25621] dummy0: entered allmulticast mode [ 578.522543][T25620] dummy0: left allmulticast mode [ 578.569190][ T6286] bond2: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 578.584891][T25633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6545'. [ 578.595025][T25633] netlink: 'syz.5.6545': attribute type 30 has an invalid length. [ 578.605616][T25632] netlink: 'syz.1.6546': attribute type 2 has an invalid length. [ 578.635338][T25634] netlink: 'syz.5.6545': attribute type 30 has an invalid length. [ 578.677056][T25636] xt_connbytes: Forcing CT accounting to be enabled [ 579.608390][T25686] __nla_validate_parse: 4 callbacks suppressed [ 579.608411][T25686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6570'. [ 579.626907][T25688] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6572'. [ 579.726411][T25698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6577'. [ 579.770010][T25701] 8021q: adding VLAN 0 to HW filter on device bond4 [ 579.817678][T25701] bond4: (slave veth13): Enslaving as an active interface with a down link [ 579.857176][T25701] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 579.886843][T25701] bond4: (slave batadv2): making interface the new active one [ 579.896035][T25701] batadv2: entered promiscuous mode [ 579.901643][T25701] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 580.163074][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6586'. [ 580.194002][T25727] validate_nla: 2 callbacks suppressed [ 580.194032][T25727] netlink: 'syz.0.6586': attribute type 30 has an invalid length. [ 580.215278][T25732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6586'. [ 580.244611][T25732] netlink: 'syz.0.6586': attribute type 30 has an invalid length. [ 580.335657][T25739] netlink: 'syz.3.6591': attribute type 16 has an invalid length. [ 580.353081][T25739] netlink: 'syz.3.6591': attribute type 17 has an invalid length. [ 580.498807][T25739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.515427][T25739] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.539158][T25739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.611656][T25739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.636697][T25739] batadv_slave_1: left promiscuous mode [ 580.656388][T25739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.678565][T25739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 580.702435][T25739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.720905][T25739] veth1_vlan: left promiscuous mode [ 580.730812][T25739] veth0_vlan: left promiscuous mode [ 580.736805][T25739] veth0_vlan: entered promiscuous mode [ 580.746245][T25739] veth1_vlan: entered promiscuous mode [ 580.754217][T25739] veth1_macvtap: left promiscuous mode [ 580.760787][T25739] veth0_macvtap: left promiscuous mode [ 580.773534][T25739] veth0_macvtap: entered promiscuous mode [ 580.777421][T25760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6603'. [ 580.781240][T25739] veth1_macvtap: entered promiscuous mode [ 580.811359][T25739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 580.821928][T25739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 580.831338][T25739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 580.841849][T25739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 580.854840][T25739] bond1: left promiscuous mode [ 580.860572][T25739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 580.885818][T25739] veth0_to_bridge: entered promiscuous mode [ 580.910494][T25739] geneve2: left promiscuous mode [ 580.916299][T25739] geneve2: left allmulticast mode [ 580.923517][T25770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6607'. [ 580.943877][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.951022][ T6280] bridge0: port 1(bridge_slave_0) entered listening state [ 580.966184][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.973292][ T6280] bridge0: port 2(bridge_slave_1) entered listening state [ 580.993710][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6608'. [ 581.003540][T25773] netlink: 'syz.2.6608': attribute type 30 has an invalid length. [ 581.009910][ T970] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 581.020275][ T970] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 581.044483][T25775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6608'. [ 581.054527][T25775] netlink: 'syz.2.6608': attribute type 30 has an invalid length. [ 581.072954][ T970] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 581.081965][ T970] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 581.939729][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6623'. [ 581.950683][T25814] netlink: 'syz.1.6623': attribute type 30 has an invalid length. [ 581.994393][T25814] netlink: 'syz.1.6623': attribute type 30 has an invalid length. [ 582.139876][T25832] syz_tun: entered allmulticast mode [ 582.155997][T25831] syz_tun: left allmulticast mode [ 582.236788][T25843] pimreg: entered allmulticast mode [ 582.247048][T25843] veth1_to_bond: entered allmulticast mode [ 582.254582][T25843] pimreg: left allmulticast mode [ 582.304706][T25851] netlink: 'syz.0.6639': attribute type 30 has an invalid length. [ 582.334694][T25842] veth1_to_bond: left allmulticast mode [ 582.356847][T25852] netlink: 'syz.0.6639': attribute type 30 has an invalid length. [ 582.538554][ T28] audit: type=1400 audit(2000000833.629:2593): avc: denied { name_bind } for pid=25875 comm="syz.2.6650" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 582.950242][T25895] dummy0: entered allmulticast mode [ 582.974410][T25894] dummy0: left allmulticast mode [ 583.298530][T25916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.325848][T25916] bond2: (slave veth13): Enslaving as an active interface with a down link [ 583.348333][T25916] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 583.357125][T25916] bond2: (slave batadv1): making interface the new active one [ 583.365993][T25916] batadv1: entered promiscuous mode [ 583.371416][T25916] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 583.950744][T25931] 8021q: adding VLAN 0 to HW filter on device bond5 [ 583.970668][T25931] macvlan2: entered promiscuous mode [ 583.976168][T25931] macvlan2: entered allmulticast mode [ 583.983151][T25931] bond5: entered promiscuous mode [ 583.988471][T25931] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 583.997182][T25931] bond5: left promiscuous mode [ 584.450740][T25969] loop1: detected capacity change from 0 to 1024 [ 584.463904][T25969] EXT4-fs: Ignoring removed bh option [ 584.495345][T25969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.526031][ T28] audit: type=1400 audit(2000000835.619:2594): avc: denied { write } for pid=25968 comm="syz.1.6689" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 584.585910][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.713562][ T28] audit: type=1400 audit(2000000835.809:2595): avc: denied { create } for pid=26000 comm="syz.1.6704" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 584.736560][T26001] __nla_validate_parse: 12 callbacks suppressed [ 584.736581][T26001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6704'. [ 584.762863][ T28] audit: type=1400 audit(2000000835.839:2596): avc: denied { shutdown } for pid=26002 comm="syz.5.6705" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 586.847412][T26106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6741'. [ 586.857786][T26106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6741'. [ 586.937037][T26112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6743'. [ 587.096656][T26120] loop1: detected capacity change from 0 to 256 [ 587.113187][T26120] vfat: Unknown parameter '' [ 587.193639][ T28] audit: type=1400 audit(2000000838.289:2597): avc: denied { read } for pid=26127 comm="syz.1.6751" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 587.226244][ T28] audit: type=1400 audit(2000000838.289:2598): avc: denied { open } for pid=26127 comm="syz.1.6751" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 587.346840][T26136] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.350746][T26137] validate_nla: 5 callbacks suppressed [ 587.350762][T26137] netlink: 'syz.1.6754': attribute type 16 has an invalid length. [ 587.370404][T26137] netlink: 'syz.1.6754': attribute type 17 has an invalid length. [ 587.380132][T26139] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6755'. [ 587.550647][T26137] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.557779][T26137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.833286][T26217] netlink: 'syz.0.6786': attribute type 39 has an invalid length. [ 588.954345][T26228] netlink: 'syz.2.6790': attribute type 1 has an invalid length. [ 588.984829][T26228] 8021q: adding VLAN 0 to HW filter on device bond7 [ 589.019598][T26239] netlink: 'syz.1.6793': attribute type 1 has an invalid length. [ 589.034859][T26239] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6793'. [ 589.248998][ T28] audit: type=1326 audit(2000000840.339:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26253 comm="syz.3.6800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 589.291598][ T28] audit: type=1326 audit(2000000840.339:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26253 comm="syz.3.6800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 589.320857][ T28] audit: type=1326 audit(2000000840.339:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26253 comm="syz.3.6800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 589.346844][T26248] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.350985][T26257] loop1: detected capacity change from 0 to 256 [ 589.388377][ T28] audit: type=1326 audit(2000000840.339:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26253 comm="syz.3.6800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 589.408742][T26257] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 589.445950][T26257] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 589.450672][ T28] audit: type=1326 audit(2000000840.339:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26253 comm="syz.3.6800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 589.483882][ T28] audit: type=1326 audit(2000000840.339:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26253 comm="syz.3.6800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 589.538293][T26248] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.554496][ T28] audit: type=1326 audit(2000000840.339:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26253 comm="syz.3.6800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 589.604912][ T28] audit: type=1326 audit(2000000840.339:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26253 comm="syz.3.6800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 589.631182][ T28] audit: type=1326 audit(2000000840.339:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26253 comm="syz.3.6800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 589.662283][ T28] audit: type=1326 audit(2000000840.339:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26253 comm="syz.3.6800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 589.694088][T26248] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.807904][T26248] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.849382][T26276] netlink: 'syz.1.6807': attribute type 1 has an invalid length. [ 589.883385][T26279] netlink: 'syz.5.6808': attribute type 1 has an invalid length. [ 589.897546][T26276] 8021q: adding VLAN 0 to HW filter on device bond4 [ 589.916802][T26279] netlink: 5 bytes leftover after parsing attributes in process `syz.5.6808'. [ 589.998747][ T970] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.044656][ T30] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.058590][ T30] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.085493][ T30] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.113023][T26288] netlink: 'syz.0.6812': attribute type 4 has an invalid length. [ 590.150700][T26288] netlink: 'syz.0.6812': attribute type 4 has an invalid length. [ 590.201568][T26293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6815'. [ 590.436116][T26288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.448228][T26288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.472405][T26309] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6821'. [ 590.524344][T26305] dummy0: entered allmulticast mode [ 590.540632][T26303] dummy0: left allmulticast mode [ 590.547415][ T970] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.566678][ T970] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.586056][ T970] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.597261][ T970] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.606725][ T970] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.615867][ T970] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.625956][ T970] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.646081][ T970] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.668337][T26320] netlink: 'syz.0.6822': attribute type 1 has an invalid length. [ 590.702310][T26320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 590.740753][T26320] bond4: (slave ip6erspan0): making interface the new active one [ 590.750136][T26320] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 590.942049][T26347] all: renamed from bridge_slave_1 [ 591.079705][ T6286] batadv2: left promiscuous mode [ 591.197075][T26379] bond5: entered promiscuous mode [ 591.203113][T26379] 8021q: adding VLAN 0 to HW filter on device bond5 [ 591.274639][T26379] 8021q: adding VLAN 0 to HW filter on device bond5 [ 591.291375][T26379] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 591.302391][T26379] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 591.315281][T26379] bond5: (slave vti0): making interface the new active one [ 591.322862][T26379] vti0: entered promiscuous mode [ 591.329985][T26379] bond5: (slave vti0): Enslaving as an active interface with an up link [ 591.338722][T26385] syz_tun: entered allmulticast mode [ 591.377293][T26384] pimreg: entered allmulticast mode [ 591.390374][T26383] pimreg: left allmulticast mode [ 591.395699][T26383] syz_tun: left allmulticast mode [ 591.543515][T26408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6853'. [ 591.553060][T26408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6853'. [ 591.573818][T26402] bond5: entered promiscuous mode [ 591.579165][T26402] 8021q: adding VLAN 0 to HW filter on device bond5 [ 591.605246][T26402] bond5: (slave bridge5): making interface the new active one [ 591.613009][T26402] bridge5: entered promiscuous mode [ 591.622520][T26402] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 591.744183][T26429] loop1: detected capacity change from 0 to 512 [ 591.762504][T26429] EXT4-fs: Ignoring removed nomblk_io_submit option [ 591.795624][T26429] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 591.830161][T26429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c01d, mo2=0102] [ 591.860876][T26429] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 591.889979][T26429] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 591.919791][T26429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 591.969340][T26429] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.6859: dx entry: limit 65535 != root limit 120 [ 591.997810][T26429] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.6859: Corrupt directory, running e2fsck is recommended [ 592.029547][T26429] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.6859: path /376/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 592.101124][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.369696][T26444] validate_nla: 4 callbacks suppressed [ 592.369717][T26444] netlink: 'syz.5.6873': attribute type 27 has an invalid length. [ 592.408221][T26444] batadv_slave_1: left promiscuous mode [ 592.429146][T26444] geneve2: left promiscuous mode [ 592.434995][T26444] ip6erspan0: left promiscuous mode [ 592.442972][T26444] geneve3: left promiscuous mode [ 592.452313][T26444] geneve3: left allmulticast mode [ 592.461643][T26444] bond2: left promiscuous mode [ 592.468860][T26444] team1: left promiscuous mode [ 592.475798][T26444] team1: left allmulticast mode [ 592.588398][ T49] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.600299][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.609552][ T49] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 45456 - 0 [ 592.633056][T26454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.643999][T26454] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.656674][T26454] batman_adv: batadv0: Interface activated: dummy0 [ 592.670677][T26454] batadv0: mtu less than device minimum [ 592.678815][T26454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 592.690002][T26454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 592.701016][T26454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 592.712167][T26454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 592.723562][T26454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 592.734610][T26454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 592.745550][T26454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 592.756507][T26454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 592.767469][T26454] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 592.784530][T26454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 592.817057][T26454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.838421][T26454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.865751][T26454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 592.877486][T26454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 592.890555][T26454] veth1_vlan: left promiscuous mode [ 592.896835][T26454] veth0_vlan: left promiscuous mode [ 592.902966][T26454] veth0_vlan: entered promiscuous mode [ 592.910828][T26454] veth1_vlan: entered promiscuous mode [ 592.919525][T26454] veth1_macvtap: left promiscuous mode [ 592.925803][T26454] veth0_macvtap: left promiscuous mode [ 592.932634][T26454] veth0_macvtap: entered promiscuous mode [ 592.939921][T26454] veth1_macvtap: entered promiscuous mode [ 592.952248][T26454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.966664][T26454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.980025][T26454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.988614][T26454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 593.016321][T26454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 593.030045][T26454] veth0_to_bridge: entered promiscuous mode [ 593.046627][T26454] bridge0: port 3(batadv1) entered blocking state [ 593.053200][T26454] bridge0: port 3(batadv1) entered forwarding state [ 593.072766][T26454] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 593.088974][T26454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 593.100431][T26454] 8021q: adding VLAN 0 to HW filter on device team1 [ 593.111742][T26454] 8021q: adding VLAN 0 to HW filter on device bond3 [ 593.148521][T26454] 8021q: adding VLAN 0 to HW filter on device bond4 [ 593.164933][T26454] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 593.171461][T26475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6876'. [ 593.181130][T26454] 8021q: adding VLAN 0 to HW filter on device bond5 [ 593.233981][T26476] bond3: (slave syz_tun): Removing an active aggregator [ 593.242778][T26476] bond3: (slave syz_tun): Releasing backup interface [ 593.275168][T26476] bond0: (slave team0): Releasing backup interface [ 593.302269][T26476] bond2: (slave dummy0): Releasing active interface [ 593.310335][T26476] bond2: (slave veth9): making interface the new active one [ 593.345926][T26476] bridge_slave_1: left allmulticast mode [ 593.366578][T26476] bridge_slave_1: left promiscuous mode [ 593.376597][T26476] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.400743][T26476] bond0: (slave bond_slave_0): Releasing backup interface [ 593.428881][T26476] bond0: (slave bond_slave_1): Releasing backup interface [ 593.448493][T26476] team0: Port device team_slave_0 removed [ 593.462455][T26476] team0: Port device team_slave_1 removed [ 593.474350][T26476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.491074][T26476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.502901][T26476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.510528][T26476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.521486][ T49] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 45456 - 0 [ 593.541913][ T49] netdevsim netdevsim5 netdevsim1: set [1, 2] type 2 family 0 port 57990 - 0 [ 593.551914][ T49] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 45456 - 0 [ 593.561160][ T49] netdevsim netdevsim5 netdevsim2: set [1, 2] type 2 family 0 port 57990 - 0 [ 593.573022][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.580207][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.590898][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.598073][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.853308][ T49] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 45456 - 0 [ 593.863350][ T49] netdevsim netdevsim5 netdevsim3: set [1, 2] type 2 family 0 port 57990 - 0 [ 593.882030][ T49] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.896983][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.910898][ T49] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 57990 - 0 [ 593.999613][T26496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.013141][T26529] netlink: 'syz.2.6890': attribute type 4 has an invalid length. [ 594.014724][T26496] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.057759][T26522] netlink: 'syz.2.6890': attribute type 4 has an invalid length. [ 594.112174][ T49] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.122251][ T49] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.277649][T26496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.328079][T26496] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.362494][ T49] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.380110][ T49] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.540961][T26496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.571101][T26496] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.589467][ T6280] bond4: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 594.614594][T26496] team0: Port device netdevsim0 removed [ 594.625709][T26496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.636220][T26496] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.669075][ T6280] batadv1: left promiscuous mode [ 594.738541][T26581] netlink: 'syz.5.6909': attribute type 4 has an invalid length. [ 594.755490][ T6280] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.773723][ T6280] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.789346][T26585] netlink: 'syz.5.6909': attribute type 4 has an invalid length. [ 594.800641][ T6280] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.810906][ T6280] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.835248][ T6280] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.857363][ T6280] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.280391][T26581] bridge0: port 3(batadv1) entered disabled state [ 595.286975][T26581] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.294347][T26581] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.317854][T26581] batman_adv: batadv0: Interface deactivated: dummy0 [ 595.364649][T26581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.374736][T26581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.714295][ T6280] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.722865][ T6280] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.731214][ T6280] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.740408][ T6280] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.749428][ T6280] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 57990 - 0 [ 595.770782][ T6280] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.796296][ T6280] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.810275][ T6280] netdevsim netdevsim5 netdevsim1: unset [1, 2] type 2 family 0 port 57990 - 0 [ 595.833726][ T6280] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.851765][ T6280] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.861078][ T6280] netdevsim netdevsim5 netdevsim2: unset [1, 2] type 2 family 0 port 57990 - 0 [ 595.870932][ T6280] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.889131][ T6280] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.908712][ T6280] netdevsim netdevsim5 netdevsim3: unset [1, 2] type 2 family 0 port 57990 - 0 [ 596.032614][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 596.032644][ T28] audit: type=1400 audit(2000000847.129:2690): avc: denied { write } for pid=26634 comm="syz.5.6934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 596.189471][T26642] netlink: 'syz.5.6936': attribute type 4 has an invalid length. [ 596.208386][T26642] netlink: 'syz.5.6936': attribute type 4 has an invalid length. [ 596.320676][T26655] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6942'. [ 596.367246][T26660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6944'. [ 596.872169][ T28] audit: type=1400 audit(2000000847.969:2691): avc: denied { mounton } for pid=26692 comm="syz.5.6955" path="/file0" dev="ramfs" ino=78963 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 597.498624][ T28] audit: type=1400 audit(2000000848.589:2692): avc: denied { watch watch_reads } for pid=26714 comm="syz.3.6964" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 598.677154][ T28] audit: type=1326 audit(2000000849.769:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.3.6977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 598.759045][ T28] audit: type=1326 audit(2000000849.769:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.3.6977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 598.814308][ T28] audit: type=1326 audit(2000000849.809:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.3.6977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 598.872907][ T28] audit: type=1326 audit(2000000849.809:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.3.6977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 598.951658][ T28] audit: type=1326 audit(2000000849.809:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.3.6977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 599.000992][ T28] audit: type=1326 audit(2000000849.809:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.3.6977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 599.032418][ T28] audit: type=1326 audit(2000000849.809:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26746 comm="syz.3.6977" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0771fce59 code=0x7ffc0000 [ 599.431699][T26784] netlink: 'syz.3.6989': attribute type 10 has an invalid length. [ 599.466334][T26784] team0 (unregistering): Port device team_slave_0 removed [ 599.483329][T26784] team0 (unregistering): Port device team_slave_1 removed [ 599.657975][T26789] 8021q: VLANs not supported on gre0 [ 599.837853][T26802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6997'. [ 599.975367][T26816] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7001'. [ 600.151920][T26825] bridge0: port 3(vlan0) entered blocking state [ 600.167105][T26825] bridge0: port 3(vlan0) entered disabled state [ 600.187823][T26825] vlan0: entered allmulticast mode [ 600.206322][T26825] vlan0: entered promiscuous mode [ 600.497660][T26829] bond6: (slave dummy0): Releasing active interface [ 600.521702][T26829] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.532984][T26829] bridge_slave_1: left allmulticast mode [ 600.541001][T26829] bridge_slave_1: left promiscuous mode [ 600.551136][T26829] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.570761][T26829] bond0: (slave bond_slave_0): Releasing backup interface [ 600.584884][T26829] bond0: (slave bond_slave_1): Releasing backup interface [ 600.595459][T26829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.604532][T26829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.623145][T26829] net_ratelimit: 59 callbacks suppressed [ 600.623233][T26829] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 600.740442][T26846] netlink: 'syz.1.7016': attribute type 27 has an invalid length. [ 601.080724][T26860] netlink: 'syz.3.7019': attribute type 4 has an invalid length. [ 601.131399][T26861] netlink: 'syz.3.7019': attribute type 4 has an invalid length. [ 601.214433][T26863] netlink: 'syz.5.7020': attribute type 39 has an invalid length. [ 601.486048][T26846] bond5: left promiscuous mode [ 601.505106][T26846] vti0: left promiscuous mode [ 601.632825][T26850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.658566][T26850] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.686095][T26850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.772048][T26850] veth1_vlan: left promiscuous mode [ 601.778133][T26850] veth0_vlan: left promiscuous mode [ 601.784542][T26850] veth0_vlan: entered promiscuous mode [ 601.794159][T26850] veth1_vlan: entered promiscuous mode [ 601.803968][T26850] veth1_macvtap: left promiscuous mode [ 601.810350][T26850] veth0_macvtap: left promiscuous mode [ 601.817110][T26850] veth0_macvtap: entered promiscuous mode [ 601.824051][T26850] veth1_macvtap: entered promiscuous mode [ 601.834440][T26850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 601.848378][T26850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.865384][T26850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 601.930531][T26850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 601.945725][T26850] 8021q: adding VLAN 0 to HW filter on device bond5 [ 601.955791][T26850] 8021q: adding VLAN 0 to HW filter on device eth0 [ 601.964849][T26850] 8021q: adding VLAN 0 to HW filter on device eth1 [ 601.973503][T26850] 8021q: adding VLAN 0 to HW filter on device eth2 [ 601.982326][T26850] 8021q: adding VLAN 0 to HW filter on device eth3 [ 602.043657][T26864] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.050809][T26864] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.083880][T26864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.093436][T26864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.151260][ T6288] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.160798][ T6288] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 57668 - 0 [ 602.170526][ T6288] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 602.198767][ T6288] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.215202][ T6288] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 57668 - 0 [ 602.240209][ T6288] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 602.257363][T26879] 8021q: VLANs not supported on gre0 [ 602.264604][ T6288] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.289677][ T6288] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 57668 - 0 [ 602.323147][ T6288] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 602.334705][T26885] 9p: Bad value for 'rfdno' [ 602.352371][ T6288] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.380132][ T6288] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 57668 - 0 [ 602.410177][ T6288] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 602.502483][T26890] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7027'. [ 602.922351][T26915] netlink: 'syz.2.7035': attribute type 10 has an invalid length. [ 603.058201][T26923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7040'. [ 603.073012][T26923] netlink: 'syz.1.7040': attribute type 7 has an invalid length. [ 603.083286][T26923] netlink: 'syz.1.7040': attribute type 8 has an invalid length. [ 603.091602][T26923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7040'. [ 603.461745][T26945] netlink: 'syz.2.7048': attribute type 10 has an invalid length. [ 603.571480][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 603.571499][ T28] audit: type=1400 audit(2000000854.669:2755): avc: denied { setattr } for pid=26952 comm="syz.5.7052" name="SMC6" dev="sockfs" ino=78546 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 604.023904][ T28] audit: type=1326 audit(2000000855.109:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.1.7055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 604.059117][ T28] audit: type=1326 audit(2000000855.149:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.1.7055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 604.063237][T26969] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7057'. [ 604.093216][ T28] audit: type=1326 audit(2000000855.149:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.1.7055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 604.123118][ T28] audit: type=1326 audit(2000000855.109:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.1.7055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 604.202959][ T28] audit: type=1326 audit(2000000855.149:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.1.7055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 604.270717][ T28] audit: type=1326 audit(2000000855.149:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.1.7055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 604.339077][ T28] audit: type=1326 audit(2000000855.149:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.1.7055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 604.405773][ T28] audit: type=1326 audit(2000000855.149:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.1.7055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 604.464098][ T28] audit: type=1326 audit(2000000855.149:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26963 comm="syz.1.7055" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 604.601061][T26986] team0: Port device netdevsim0 removed [ 604.622452][T26992] loop1: detected capacity change from 0 to 2048 [ 604.669319][T26992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.756780][T26992] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 604.829059][T26992] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 604.852188][T26992] EXT4-fs (loop1): This should not happen!! Data will be lost [ 604.852188][T26992] [ 604.867302][T26992] EXT4-fs (loop1): Total free blocks count 0 [ 604.867336][T27003] sit0: entered promiscuous mode [ 604.873713][T26992] EXT4-fs (loop1): Free/Dirty block details [ 604.887959][T26992] EXT4-fs (loop1): free_blocks=2415919104 [ 604.893924][T26992] EXT4-fs (loop1): dirty_blocks=64 [ 604.899742][T26992] EXT4-fs (loop1): Block reservation details [ 604.905789][T26992] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 604.912711][T27003] netlink: 'syz.2.7071': attribute type 1 has an invalid length. [ 604.934648][T27003] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7071'. [ 604.973231][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 604.990398][T20117] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 605.085771][T27020] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 605.171551][T27024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.193003][T27024] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.208634][T27024] batman_adv: batadv0: Interface activated: dummy0 [ 605.223140][T27024] batadv0: mtu less than device minimum [ 605.231603][T27024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 605.242721][T27024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 605.253722][T27024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 605.264812][T27024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 605.275980][T27024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 605.287147][T27024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 605.298055][T27024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 605.309105][T27024] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 605.329627][T27024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.346373][T27024] veth0_to_bridge: left promiscuous mode [ 605.369104][T27024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.396719][T27024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.426953][T27024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 605.438302][T27024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 605.452308][T27024] veth1_vlan: left promiscuous mode [ 605.458747][T27024] veth0_vlan: left promiscuous mode [ 605.464992][T27024] veth0_vlan: entered promiscuous mode [ 605.475434][T27024] veth1_vlan: entered promiscuous mode [ 605.486766][T27024] veth1_macvtap: left promiscuous mode [ 605.493449][T27024] veth0_macvtap: left promiscuous mode [ 605.499924][T27024] veth0_macvtap: entered promiscuous mode [ 605.506352][T27024] veth1_macvtap: entered promiscuous mode [ 605.515798][T27024] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 605.524371][T27024] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 605.533079][T27024] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 605.555157][T27024] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 605.576002][T27041] netlink: 'syz.0.7085': attribute type 1 has an invalid length. [ 605.588534][T27024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.600704][T27024] veth0_to_bridge: entered promiscuous mode [ 605.610051][T27024] bridge0: port 3(batadv1) entered blocking state [ 605.616575][T27024] bridge0: port 3(batadv1) entered forwarding state [ 605.623640][T27024] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 605.633814][T27024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 605.645511][T27024] 8021q: adding VLAN 0 to HW filter on device team1 [ 605.658839][T27024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 605.685655][T27024] 8021q: adding VLAN 0 to HW filter on device bond4 [ 605.696389][T27024] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 605.704755][T27024] 8021q: adding VLAN 0 to HW filter on device bond5 [ 605.742603][T27024] veth0_to_team: entered promiscuous mode [ 605.754095][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.761410][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.772890][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.780165][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.827726][ T6286] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.836612][ T6286] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.846282][ T6286] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 33711 - 0 [ 605.863146][T27041] 8021q: adding VLAN 0 to HW filter on device bond6 [ 605.875762][T27044] bond6: (slave veth1_to_team): Enslaving as a backup interface with a down link [ 605.886002][ T6286] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.896864][ T6286] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.906062][ T6286] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 33711 - 0 [ 605.922130][ T6286] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.931026][ T6286] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.940836][ T6286] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 33711 - 0 [ 605.950898][ T6286] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.961922][ T6286] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.979155][ T6286] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 33711 - 0 [ 605.983879][T27049] syz.5.7097 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 606.070772][ T12] net_ratelimit: 52 callbacks suppressed [ 606.070793][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 606.091049][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 606.143850][T27054] syz.5.7097 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 606.162914][T27054] CPU: 1 UID: 0 PID: 27054 Comm: syz.5.7097 Tainted: G W syzkaller #0 PREEMPT(full) [ 606.162954][T27054] Tainted: [W]=WARN [ 606.162988][T27054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.163003][T27054] Call Trace: [ 606.163011][T27054] [ 606.163020][T27054] __dump_stack+0x1d/0x30 [ 606.163051][T27054] dump_stack_lvl+0x95/0xd0 [ 606.163151][T27054] dump_stack+0x15/0x1b [ 606.163176][T27054] dump_header+0x80/0x240 [ 606.163273][T27054] oom_kill_process+0x295/0x350 [ 606.163320][T27054] out_of_memory+0x97d/0xb80 [ 606.163365][T27054] try_charge_memcg+0x62f/0xa10 [ 606.163453][T27054] charge_memcg+0x6d/0x120 [ 606.163610][T27054] __mem_cgroup_charge+0x28/0xb0 [ 606.163646][T27054] handle_mm_fault+0x1061/0x2e70 [ 606.163679][T27054] ? _raw_spin_lock+0x52/0xa0 [ 606.163747][T27054] __get_user_pages+0x1290/0x1f10 [ 606.163832][T27054] __mm_populate+0x242/0x390 [ 606.163863][T27054] vm_mmap_pgoff+0x23b/0x2d0 [ 606.163950][T27054] ksys_mmap_pgoff+0xc1/0x310 [ 606.164034][T27054] ? __x64_sys_mmap+0x49/0x70 [ 606.164072][T27054] x64_sys_call+0x14df/0x3020 [ 606.164168][T27054] do_syscall_64+0x12c/0x3b0 [ 606.164206][T27054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.164230][T27054] RIP: 0033:0x7f7c5134ce59 [ 606.164249][T27054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.164271][T27054] RSP: 002b:00007f7c4fd86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 606.164369][T27054] RAX: ffffffffffffffda RBX: 00007f7c515c6090 RCX: 00007f7c5134ce59 [ 606.164386][T27054] RDX: 000000000000000b RSI: 0000000000b36000 RDI: 0000200000000000 [ 606.164403][T27054] RBP: 00007f7c513e2d6f R08: ffffffffffffffff R09: 00000000f8e77000 [ 606.164421][T27054] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 606.164438][T27054] R13: 00007f7c515c6128 R14: 00007f7c515c6090 R15: 00007ffe1734bf78 [ 606.164491][T27054] [ 606.164577][T27054] memory: usage 307200kB, limit 307200kB, failcnt 320 [ 606.457126][T27066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7092'. [ 606.624483][T27054] memory+swap: usage 279288kB, limit 9007199254740988kB, failcnt 0 [ 606.655627][T27054] kmem: usage 276704kB, limit 9007199254740988kB, failcnt 0 [ 606.679584][T27054] Memory cgroup stats for /syz5: [ 606.679798][T27054] cache 65536 [ 606.698120][ T68] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 606.708540][T27054] rss 1708032 [ 606.712490][ T68] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 606.723693][T27071] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7094'. [ 606.759010][T27054] shmem 65536 [ 606.773512][T27054] mapped_file 0 [ 606.784715][T27054] dirty 0 [ 606.791188][T27054] writeback 0 [ 606.794644][T27054] workingset_refault_anon 4552 [ 606.801406][T27054] workingset_refault_file 0 [ 606.805997][T27054] swap 323584 [ 606.812057][T27054] swapcached 23871488 [ 606.817001][T27054] pgpgin 158867 [ 606.820718][T27054] pgpgout 158425 [ 606.824305][T27054] pgfault 231495 [ 606.827863][T27054] pgmajfault 440 [ 606.831941][T27054] inactive_anon 192512 [ 606.836031][T27054] active_anon 1617920 [ 606.840238][T27054] inactive_file 0 [ 606.843904][T27054] active_file 0 [ 606.847426][T27054] unevictable 0 [ 606.851450][T27054] hierarchical_memory_limit 314572800 [ 606.856955][T27054] hierarchical_memsw_limit 9223372036854771712 [ 606.863409][T27054] total_cache 65536 [ 606.867710][T27054] total_rss 1708032 [ 606.871842][T27054] total_shmem 65536 [ 606.875667][T27054] total_mapped_file 0 [ 606.881296][T27054] total_dirty 0 [ 606.884793][T27054] total_writeback 0 [ 606.888617][T27054] total_workingset_refault_anon 4552 [ 606.894576][T27054] total_workingset_refault_file 0 [ 606.909202][T27054] total_swap 323584 [ 606.913052][T27054] total_swapcached 23871488 [ 606.917597][T27054] total_pgpgin 158867 [ 606.928153][T27054] total_pgpgout 158425 [ 606.939992][T27054] total_pgfault 231495 [ 606.945563][T27054] total_pgmajfault 440 [ 606.957061][T27054] total_inactive_anon 192512 [ 606.968021][T27054] total_active_anon 1617920 [ 606.974480][T27054] total_inactive_file 0 [ 606.986963][T27054] total_active_file 0 [ 606.992040][T27054] total_unevictable 0 [ 606.996182][T27054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.4131,pid=18001,uid=0 [ 607.012243][T27054] Memory cgroup out of memory: Killed process 18001 (syz.5.4131) total-vm:96012kB, anon-rss:1232kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 607.030593][T27049] syz.5.7097 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 607.059651][T27049] CPU: 0 UID: 0 PID: 27049 Comm: syz.5.7097 Tainted: G W syzkaller #0 PREEMPT(full) [ 607.059691][T27049] Tainted: [W]=WARN [ 607.059700][T27049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 607.059716][T27049] Call Trace: [ 607.059724][T27049] [ 607.059814][T27049] __dump_stack+0x1d/0x30 [ 607.059845][T27049] dump_stack_lvl+0x95/0xd0 [ 607.059871][T27049] dump_stack+0x15/0x1b [ 607.059892][T27049] dump_header+0x80/0x240 [ 607.059919][T27049] oom_kill_process+0x295/0x350 [ 607.060023][T27049] out_of_memory+0x97d/0xb80 [ 607.060057][T27049] try_charge_memcg+0x62f/0xa10 [ 607.060174][T27049] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 607.060259][T27049] __alloc_frozen_pages_noprof+0x18a/0x350 [ 607.060287][T27049] alloc_pages_mpol+0xb3/0x260 [ 607.060316][T27049] alloc_pages_noprof+0x8f/0x140 [ 607.060383][T27049] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 607.060424][T27049] __kvmalloc_node_noprof+0x3d4/0x640 [ 607.060498][T27049] ? futex_hash_allocate+0x190/0x9a0 [ 607.060563][T27049] ? futex_hash_allocate+0x190/0x9a0 [ 607.060660][T27049] futex_hash_allocate+0x190/0x9a0 [ 607.060696][T27049] ? cap_task_prctl+0x13f/0x6b0 [ 607.060726][T27049] futex_hash_prctl+0xd8/0xf0 [ 607.060823][T27049] __se_sys_prctl+0x4f4/0x1400 [ 607.060853][T27049] __x64_sys_prctl+0x67/0x80 [ 607.060883][T27049] x64_sys_call+0x2533/0x3020 [ 607.060971][T27049] do_syscall_64+0x12c/0x3b0 [ 607.061048][T27049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.061081][T27049] RIP: 0033:0x7f7c5134ce59 [ 607.061102][T27049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.061195][T27049] RSP: 002b:00007f7c4fda7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 607.061222][T27049] RAX: ffffffffffffffda RBX: 00007f7c515c5fa0 RCX: 00007f7c5134ce59 [ 607.061239][T27049] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 607.061255][T27049] RBP: 00007f7c513e2d6f R08: 0000000000000000 R09: 0000000000000000 [ 607.061269][T27049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.061283][T27049] R13: 00007f7c515c6038 R14: 00007f7c515c5fa0 R15: 00007ffe1734bf78 [ 607.061303][T27049] [ 607.061517][T27049] memory: usage 307200kB, limit 307200kB, failcnt 483 [ 607.199238][T27083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7099'. [ 607.239565][T27049] memory+swap: usage 307348kB, limit 9007199254740988kB, failcnt 0 [ 607.266355][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 607.300596][T27049] kmem: usage 305404kB, limit 9007199254740988kB, failcnt 0 [ 607.301101][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 607.326352][T27049] Memory cgroup stats for /syz5: [ 607.391468][T27049] cache 65536 [ 607.422032][T27049] rss 1708032 [ 607.429916][T27049] shmem 65536 [ 607.437232][T27049] mapped_file 0 [ 607.445531][T27049] dirty 0 [ 607.451925][T27049] writeback 0 [ 607.458859][T27049] workingset_refault_anon 4552 [ 607.469920][T27049] workingset_refault_file 0 [ 607.479479][T27049] swap 151552 [ 607.486840][T27049] swapcached 23871488 [ 607.495334][T27049] pgpgin 158867 [ 607.502977][T27049] pgpgout 158425 [ 607.510401][T27049] pgfault 231496 [ 607.517972][T27049] pgmajfault 440 [ 607.526512][T27049] inactive_anon 192512 [ 607.535586][T27049] active_anon 1617920 [ 607.544148][T27049] inactive_file 0 [ 607.552331][T27049] active_file 0 [ 607.559272][T27049] unevictable 0 [ 607.567288][T27049] hierarchical_memory_limit 314572800 [ 607.573693][T27049] hierarchical_memsw_limit 9223372036854771712 [ 607.580266][T27049] total_cache 65536 [ 607.584110][T27049] total_rss 1708032 [ 607.587928][T27049] total_shmem 65536 [ 607.592943][T27049] total_mapped_file 0 [ 607.597065][T27049] total_dirty 0 [ 607.622786][T27049] total_writeback 0 [ 607.627730][T27049] total_workingset_refault_anon 4552 [ 607.634372][T27049] total_workingset_refault_file 0 [ 607.640058][T27049] total_swap 151552 [ 607.643973][T27049] total_swapcached 23871488 [ 607.647113][T27090] netlink: 'syz.0.7102': attribute type 10 has an invalid length. [ 607.648848][T27049] total_pgpgin 158867 [ 607.648862][T27049] total_pgpgout 158425 [ 607.665399][T27049] total_pgfault 231496 [ 607.671998][T27049] total_pgmajfault 440 [ 607.676384][T27049] total_inactive_anon 192512 [ 607.681850][T27049] total_active_anon 1617920 [ 607.686478][T27049] total_inactive_file 0 [ 607.690912][T27049] total_active_file 0 [ 607.694930][T27049] total_unevictable 0 [ 607.699899][T27049] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.7097,pid=27048,uid=0 [ 607.706526][T27090] team0: Device macvtap0 failed to register rx_handler [ 607.714732][T27049] Memory cgroup out of memory: Killed process 27048 (syz.5.7097) total-vm:96216kB, anon-rss:2888kB, file-rss:22264kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 607.841328][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 607.855874][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 608.297875][T27114] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7110'. [ 608.379073][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 608.393622][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 608.436021][T27121] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7114'. [ 608.769144][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 608.769234][ T28] audit: type=1326 audit(2000000859.859:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27149 comm="syz.5.7125" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c5134ce59 code=0x0 [ 609.002919][T27162] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7129'. [ 609.037142][ T28] audit: type=1326 audit(2000000861.132:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27163 comm="syz.1.7130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f094435ce59 code=0x0 [ 609.748145][T27195] geneve2: entered promiscuous mode [ 609.757133][T27195] geneve2: entered allmulticast mode [ 609.958744][T27212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7150'. [ 609.975071][T27214] loop1: detected capacity change from 0 to 512 [ 609.993316][T27214] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 610.028591][T27214] EXT4-fs (loop1): 1 truncate cleaned up [ 610.050226][T27214] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.073458][ T28] audit: type=1400 audit(2000000862.172:2800): avc: denied { write } for pid=27213 comm="syz.1.7151" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 610.336092][T27226] syz.1.7151 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 610.346870][T27226] CPU: 0 UID: 0 PID: 27226 Comm: syz.1.7151 Tainted: G W syzkaller #0 PREEMPT(full) [ 610.346911][T27226] Tainted: [W]=WARN [ 610.346919][T27226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.346934][T27226] Call Trace: [ 610.346941][T27226] [ 610.346951][T27226] __dump_stack+0x1d/0x30 [ 610.346980][T27226] dump_stack_lvl+0x95/0xd0 [ 610.347078][T27226] dump_stack+0x15/0x1b [ 610.347101][T27226] dump_header+0x80/0x240 [ 610.347127][T27226] oom_kill_process+0x295/0x350 [ 610.347170][T27226] out_of_memory+0x97d/0xb80 [ 610.347278][T27226] try_charge_memcg+0x62f/0xa10 [ 610.347327][T27226] charge_memcg+0x6d/0x120 [ 610.347358][T27226] __mem_cgroup_charge+0x28/0xb0 [ 610.347467][T27226] handle_mm_fault+0x1061/0x2e70 [ 610.347499][T27226] ? _raw_spin_lock+0x52/0xa0 [ 610.347545][T27226] __get_user_pages+0x1290/0x1f10 [ 610.347591][T27226] __mm_populate+0x242/0x390 [ 610.347625][T27226] vm_mmap_pgoff+0x23b/0x2d0 [ 610.347695][T27226] ksys_mmap_pgoff+0xc1/0x310 [ 610.347723][T27226] ? __x64_sys_mmap+0x49/0x70 [ 610.347761][T27226] x64_sys_call+0x14df/0x3020 [ 610.347790][T27226] do_syscall_64+0x12c/0x3b0 [ 610.347827][T27226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.347903][T27226] RIP: 0033:0x7f094435ce59 [ 610.347923][T27226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.347946][T27226] RSP: 002b:00007f0942d8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 610.347971][T27226] RAX: ffffffffffffffda RBX: 00007f09445d6090 RCX: 00007f094435ce59 [ 610.348051][T27226] RDX: 000000000000000b RSI: 0000000000b36000 RDI: 0000200000000000 [ 610.348067][T27226] RBP: 00007f09443f2d6f R08: ffffffffffffffff R09: 00000000f8e77000 [ 610.348084][T27226] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000000 [ 610.348099][T27226] R13: 00007f09445d6128 R14: 00007f09445d6090 R15: 00007ffdd0ddec68 [ 610.348141][T27226] [ 610.557731][T27226] memory: usage 234280kB, limit 307200kB, failcnt 2005 [ 610.576927][T27226] memory+swap: usage 291852kB, limit 9007199254740988kB, failcnt 0 [ 610.598207][T27226] kmem: usage 201608kB, limit 9007199254740988kB, failcnt 0 [ 610.617685][T27226] Memory cgroup stats for /syz1: [ 610.617941][T27226] cache 4931584 [ 610.635793][T27238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7160'. [ 610.639689][T27226] rss 8974336 [ 610.664378][T27226] shmem 4915200 [ 610.674571][T27226] mapped_file 4096 [ 610.683705][T27226] dirty 0 [ 610.692781][T27226] writeback 0 [ 610.702320][T27226] workingset_refault_anon 2326 [ 610.715120][T27226] workingset_refault_file 547 [ 610.734595][T27226] swap 63881216 [ 610.777453][T27226] swapcached 84725760 [ 610.803025][T27226] pgpgin 354382 [ 610.827369][T27226] pgpgout 350713 [ 610.841136][T27226] pgfault 291078 [ 610.868599][T27246] netlink: 'syz.5.7163': attribute type 10 has an invalid length. [ 610.889776][T27226] pgmajfault 3194 [ 610.897852][T27246] veth0_macvtap: left promiscuous mode [ 610.899987][T27226] inactive_anon 9326592 [ 610.911427][T27226] active_anon 5681152 [ 610.915559][T27226] inactive_file 20480 [ 610.920248][T27226] active_file 0 [ 610.925016][T27226] unevictable 0 [ 610.928547][T27226] hierarchical_memory_limit 314572800 [ 610.934199][T27226] hierarchical_memsw_limit 9223372036854771712 [ 610.938032][T27246] veth0_macvtap: entered promiscuous mode [ 610.940469][T27226] total_cache 4931584 [ 610.940480][T27226] total_rss 8974336 [ 610.940488][T27226] total_shmem 4915200 [ 610.940496][T27226] total_mapped_file 4096 [ 610.940505][T27226] total_dirty 0 [ 610.940515][T27226] total_writeback 0 [ 610.940533][T27226] total_workingset_refault_anon 2326 [ 610.940544][T27226] total_workingset_refault_file 547 [ 610.940635][T27226] total_swap 63881216 [ 610.940646][T27226] total_swapcached 84725760 [ 610.940657][T27226] total_pgpgin 354382 [ 610.940668][T27226] total_pgpgout 350713 [ 610.940677][T27226] total_pgfault 291078 [ 610.940688][T27226] total_pgmajfault 3194 [ 610.940697][T27226] total_inactive_anon 9326592 [ 610.940707][T27226] total_active_anon 5681152 [ 610.972651][T27246] team0: Device macvtap0 failed to register rx_handler [ 610.995605][T27226] total_inactive_file 20480 [ 610.995624][T27226] total_active_file 0 [ 610.995636][T27226] total_unevictable 0 [ 610.995720][T27226] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7151,pid=27213,uid=0 [ 610.995890][T27226] Memory cgroup out of memory: Killed process 27213 (syz.1.7151) total-vm:96216kB, anon-rss:9892kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 611.072054][T27246] veth0_macvtap: left promiscuous mode [ 611.157037][ T28] audit: type=1400 audit(2000000863.252:2801): avc: denied { mounton } for pid=27252 comm="syz.2.7167" path="/" dev="configfs" ino=1099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 611.235385][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.316970][T27268] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7173'. [ 611.580760][ T49] net_ratelimit: 10 callbacks suppressed [ 611.580780][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 611.600845][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 611.648140][T27293] loop1: detected capacity change from 0 to 512 [ 611.663284][T27293] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 611.675665][T27293] EXT4-fs (loop1): 1 truncate cleaned up [ 611.686349][T27293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.724684][ T28] audit: type=1400 audit(2000000863.822:2802): avc: denied { write } for pid=27291 comm="syz.1.7184" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 611.746779][ T28] audit: type=1400 audit(2000000863.822:2803): avc: denied { write } for pid=27291 comm="syz.1.7184" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 611.769735][ T28] audit: type=1400 audit(2000000863.822:2804): avc: denied { write } for pid=27291 comm="syz.1.7184" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 611.797916][ T28] audit: type=1400 audit(2000000863.822:2805): avc: denied { write } for pid=27291 comm="syz.1.7184" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 611.828256][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.102792][T27314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7193'. [ 612.150682][ T68] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 612.165116][ T68] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 612.701061][ T68] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 612.715441][ T68] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 613.259475][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 613.273919][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 613.829558][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 613.844102][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 614.117870][T27380] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7217'. [ 614.777495][T27434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7240'. [ 614.927618][T27447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7246'. [ 615.587629][ T28] audit: type=1400 audit(2000000867.682:2806): avc: denied { accept } for pid=27484 comm="syz.2.7261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 615.890767][T27501] loop1: detected capacity change from 0 to 128 [ 616.031904][ T28] audit: type=1400 audit(2000000868.122:2807): avc: denied { connect } for pid=27499 comm="syz.1.7267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 616.105342][ T28] audit: type=1400 audit(2000000868.202:2808): avc: denied { listen } for pid=27507 comm="syz.1.7270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 616.200540][ T28] audit: type=1400 audit(2000000868.302:2809): avc: denied { ioctl } for pid=27509 comm="syz.3.7271" path="socket:[81510]" dev="sockfs" ino=81510 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 616.929055][ T49] net_ratelimit: 10 callbacks suppressed [ 616.929135][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 616.949231][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 617.052712][ T28] audit: type=1326 audit(2000000869.152:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.1.7277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 617.130734][ T28] audit: type=1326 audit(2000000869.182:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.1.7277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 617.144632][T27534] netlink: 'syz.0.7280': attribute type 1 has an invalid length. [ 617.194126][T27534] 8021q: adding VLAN 0 to HW filter on device bond7 [ 617.194541][ T28] audit: type=1326 audit(2000000869.182:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.1.7277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 617.248987][ T28] audit: type=1326 audit(2000000869.182:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.1.7277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 617.251269][T27534] vlan3: entered allmulticast mode [ 617.279605][ T28] audit: type=1326 audit(2000000869.182:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.1.7277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 617.305701][ T28] audit: type=1326 audit(2000000869.182:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27525 comm="syz.1.7277" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094435ce59 code=0x7ffc0000 [ 617.331466][T27534] bond7: entered allmulticast mode [ 617.352785][T27534] bond7: (slave geneve2): making interface the new active one [ 617.360407][T27534] geneve2: entered allmulticast mode [ 617.367361][T27534] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 617.376976][ T30] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.404646][ T30] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.425348][ T30] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.444121][ T30] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.464666][T27541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27541 comm=syz.0.7282 [ 617.509273][T27541] netlink: 'syz.0.7282': attribute type 1 has an invalid length. [ 617.530513][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 617.544872][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 617.573030][T27541] 8021q: adding VLAN 0 to HW filter on device bond8 [ 617.627426][T27545] bond8: (slave vlan4): Opening slave failed [ 618.159112][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 618.173563][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 618.422871][T27566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7291'. [ 618.452372][T27566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7291'. [ 618.732056][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 618.746689][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 618.806724][T27584] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7298'. [ 619.290242][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 619.304663][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 619.683879][T27601] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.715138][T27601] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.743025][T27601] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 33711 - 0 [ 619.900742][T27601] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.935095][T27601] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.960331][T27601] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 33711 - 0 [ 620.142260][T27601] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.168359][T27601] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.189151][T27601] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 33711 - 0 [ 620.318174][T27601] team0: Port device netdevsim0 removed [ 620.378744][T27601] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.417918][T27601] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.459474][T27601] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 33711 - 0 [ 620.620622][ T30] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.644321][ T30] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 33711 - 0 [ 620.674287][ T30] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 620.712538][ T30] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.730147][ T30] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 33711 - 0 [ 620.750882][ T30] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 620.784357][ T30] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.804875][ T30] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 33711 - 0 [ 620.827193][ T30] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 620.864143][ T30] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.884089][ T30] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 33711 - 0 [ 620.908099][ T30] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 622.026192][T27647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7320'. [ 622.419488][ T49] net_ratelimit: 10 callbacks suppressed [ 622.419629][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 622.439973][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 622.999895][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 623.014526][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 623.237088][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 623.237106][ T28] audit: type=1326 audit(2000000875.332:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27677 comm="syz.2.7334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f612a3ece59 code=0x0 [ 623.589434][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 623.603814][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 623.946320][T27709] loop1: detected capacity change from 0 to 512 [ 623.953893][T27709] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 623.968847][T27709] EXT4-fs (loop1): 1 truncate cleaned up [ 623.977965][T27709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.007633][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.139100][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 624.153536][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 624.674270][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 624.688673][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 626.372071][T27764] geneve5: entered promiscuous mode [ 626.377987][T27764] geneve5: entered allmulticast mode [ 626.412516][T27778] batadv_slave_0: entered promiscuous mode [ 626.435391][T27772] batadv_slave_0: left promiscuous mode [ 627.245216][T27837] bond2: left promiscuous mode [ 627.251394][T27837] team1: left promiscuous mode [ 627.256281][T27837] team1: left allmulticast mode [ 627.262851][T27837] bond3: left promiscuous mode [ 627.270730][T27837] bond5: left promiscuous mode [ 627.275769][T27837] bridge5: left promiscuous mode [ 627.290649][T27837] vlan3: left allmulticast mode [ 627.296615][T27837] bond7: left allmulticast mode [ 627.304197][T27837] geneve2: left allmulticast mode [ 627.324274][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.337484][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.355744][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.376535][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.819342][ T6286] net_ratelimit: 10 callbacks suppressed [ 627.819363][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 627.839480][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 628.399002][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 628.413496][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 628.969440][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 628.983966][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 629.286352][ T28] audit: type=1400 audit(2000000881.382:2834): avc: denied { recv } for pid=27861 comm="syz.5.7401" saddr=10.128.0.163 src=45042 daddr=10.128.1.28 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 629.328626][T27884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7410'. [ 629.338851][T27884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7410'. [ 629.509004][ T6288] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 629.523577][ T6288] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 630.038985][ T6288] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 630.053346][ T6288] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 630.130984][T27860] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.149025][T27860] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.200895][T27886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7421'. [ 630.214494][T27886] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7421'. [ 630.243632][T27860] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.269163][T27860] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.341778][T27860] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.359550][T27860] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.421893][T27860] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.446627][T27860] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.574062][ T49] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.588267][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.609330][ T49] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.621424][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.647220][ T49] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.666871][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.694918][ T49] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.716930][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.884486][T27933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7428'. [ 630.902295][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7428'. [ 630.930332][T27942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7434'. [ 630.940477][T27942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7434'. [ 631.030595][T27949] sit0: left promiscuous mode [ 631.036831][T27949] batadv_slave_1: left promiscuous mode [ 631.052068][T27949] geneve4: left promiscuous mode [ 631.428713][T27979] xt_hashlimit: size too large, truncated to 1048576 [ 631.968901][T27997] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7454'. [ 631.987824][T27997] bridge0: port 3(batadv1) entered disabled state [ 631.994413][T27997] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.001538][T27997] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.033182][T28002] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7454'. [ 632.043416][T28002] bridge0: port 3(batadv1) entered blocking state [ 632.050073][T28002] bridge0: port 3(batadv1) entered forwarding state [ 632.057119][T28002] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.064323][T28002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.071663][T28002] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.078815][T28002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.095027][T28002] bridge0: port 3(batadv1) entered disabled state [ 632.101576][T28002] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.108759][T28002] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.279062][ T12] batman_adv: batadv1: IGMP Querier appeared [ 632.285119][ T12] batman_adv: batadv1: MLD Querier appeared [ 632.521898][T28019] bridge0: port 3(gretap0) entered blocking state [ 632.560195][T28019] bridge0: port 3(gretap0) entered disabled state [ 632.648091][T28019] gretap0: entered allmulticast mode [ 632.869150][T28019] gretap0: entered promiscuous mode [ 633.149325][ T6286] net_ratelimit: 10 callbacks suppressed [ 633.149369][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 633.169363][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 633.689058][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 633.703545][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 633.900574][ T12] bridge_slave_1: left allmulticast mode [ 633.906446][ T12] bridge_slave_1: left promiscuous mode [ 633.912391][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.932001][ T12] bridge_slave_0: left allmulticast mode [ 633.937699][ T12] bridge_slave_0: left promiscuous mode [ 633.944532][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.955115][T28046] loop1: detected capacity change from 0 to 512 [ 634.008443][T28046] EXT4-fs: Ignoring removed nobh option [ 634.055161][T28046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.074016][T28046] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.099161][ T28] audit: type=1400 audit(2000000886.192:2835): avc: denied { execute } for pid=28055 comm="syz.5.7477" path="/file0" dev="ramfs" ino=83506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 634.176609][ T12] hsr_slave_0: left promiscuous mode [ 634.190729][ T12] hsr_slave_1: left promiscuous mode [ 634.211859][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.232738][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.249043][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 634.263565][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 634.282252][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.293723][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.305161][ T12] veth1_macvtap: left promiscuous mode [ 634.311130][ T12] veth0_macvtap: left promiscuous mode [ 634.318829][ T12] veth1_vlan: left promiscuous mode [ 634.340452][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.436378][ T12] team0 (unregistering): Port device team_slave_1 removed [ 634.463001][ T12] team0 (unregistering): Port device team_slave_0 removed [ 634.809134][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 634.823503][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 635.429135][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 635.443690][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 635.531240][T28090] __nla_validate_parse: 1 callbacks suppressed [ 635.531383][T28090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7490'. [ 635.642010][T28090] ip6gretap0: entered promiscuous mode [ 635.653780][T28090] ip6gretap0: entered allmulticast mode [ 635.915268][T28105] loop1: detected capacity change from 0 to 512 [ 635.956873][T28105] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 635.997256][T28105] EXT4-fs (loop1): bad block size 32768 [ 636.083366][T28100] netlink: 277 bytes leftover after parsing attributes in process `syz.1.7492'. [ 636.152250][ T28] audit: type=1400 audit(2000000888.252:2836): avc: denied { write } for pid=28109 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 636.276957][ T28] audit: type=1400 audit(2000000888.372:2837): avc: denied { write } for pid=28128 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.985208][T28161] netlink: 'syz.1.7507': attribute type 1 has an invalid length. [ 638.113942][T28167] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 638.169977][T28167] bond6: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 638.196141][T28167] bond6: (slave vxcan3): making interface the new active one [ 638.229676][T28167] bond6: (slave vxcan3): Enslaving as an active interface with an up link [ 638.244065][T28172] IPv6: sit4: Disabled Multicast RS [ 638.261381][T28172] sit4: entered allmulticast mode [ 638.302116][T28161] bond6: (slave vxcan5): The slave device specified does not support setting the MAC address [ 638.355268][T28161] bond6: (slave vxcan5): Enslaving as a backup interface with an up link [ 638.391347][T28174] netlink: 'syz.2.7513': attribute type 5 has an invalid length. [ 638.446576][T28178] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7515'. [ 638.480002][T28178] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7515'. [ 638.509205][T28178] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7515'. [ 638.526061][T28141] kexec: Could not allocate control_code_buffer [ 638.595203][T28184] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7518'. [ 638.615265][T28186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7519'. [ 638.629080][ T6280] net_ratelimit: 10 callbacks suppressed [ 638.629099][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 638.649217][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 638.664784][T28186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7519'. [ 639.190060][ T68] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 639.204684][ T68] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 639.695150][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7540'. [ 639.729246][T28237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7540'. [ 639.768981][ T970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 639.783347][ T970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.359693][ T970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 640.374234][ T970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 640.949002][ T970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 640.963593][ T970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 641.053194][T28267] netlink: 'syz.2.7549': attribute type 1 has an invalid length. [ 641.061691][T28265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7550'. [ 641.094866][T28267] 8021q: adding VLAN 0 to HW filter on device bond8 [ 641.182741][T28278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7555'. [ 641.229358][T28278] 8021q: adding VLAN 0 to HW filter on device bond9 [ 641.277353][T28278] veth17: entered promiscuous mode [ 641.299094][T28278] bond9: (slave veth17): Enslaving as an active interface with an up link [ 641.410089][T28291] 9p: Bad value for 'rfdno' [ 641.442985][T28299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7562'. [ 641.452128][T28299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7562'. [ 641.843036][T28321] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.866242][T28321] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 33711 - 0 [ 641.889824][T28321] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 641.921244][T26868] page_pool_release_retry() stalled pool shutdown: id 332, 1 inflight 60 sec [ 641.965962][T28321] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.996696][T28321] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 33711 - 0 [ 642.018281][T28321] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 642.128404][T28321] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.148442][T28321] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33711 - 0 [ 642.149664][T28326] 9p: Bad value for 'rfdno' [ 642.190431][T28321] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 642.328626][T28321] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.349734][T28321] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 33711 - 0 [ 642.373172][T28321] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 642.462068][ T970] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.470588][ T970] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 33711 - 0 [ 642.483330][ T970] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 642.522616][ T6286] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.531066][ T6286] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 33711 - 0 [ 642.541408][ T6286] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 642.563165][ T6286] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.576947][ T6286] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 33711 - 0 [ 642.589826][ T6286] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 642.603404][ T6286] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.632296][T28339] loop1: detected capacity change from 0 to 512 [ 642.643989][ T6286] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 33711 - 0 [ 642.655107][ T6286] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 642.664198][T28339] EXT4-fs (loop1): orphan cleanup on readonly fs [ 642.670824][T28339] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.7579: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 642.688869][T28339] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 642.693744][T28339] EXT4-fs error (device loop1): ext4_quota_enable:7228: comm syz.1.7579: Bad quota inode: 4, type: 1 [ 642.702856][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 642.702881][ C0] EXT4-fs (loop1): last error at time 2000000894: ext4_ext_check_inode:521: inode 4 [ 642.749049][T28339] loop1: lost filesystem error report for type 5 error -117 [ 642.749254][T28339] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 642.802816][T28339] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 642.822750][T28339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 642.873667][T28339] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 643.455921][T28339] EXT4-fs warning (device loop1): ext4_multi_mount_protect:328: MMP startup interrupted, failing mount [ 643.455921][T28339] [ 643.479450][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.762432][T28365] bond9: entered promiscuous mode [ 643.901222][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7595'. [ 643.925488][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.936939][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7595'. [ 643.950600][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.967715][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7595'. [ 643.977130][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.985590][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.101645][ T6286] net_ratelimit: 10 callbacks suppressed [ 644.101666][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 644.121759][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 644.691002][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 644.705455][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.046271][T28422] netlink: 'syz.5.7611': attribute type 1 has an invalid length. [ 645.072307][T28422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 645.239130][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.254600][ T49] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.393562][T28452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7624'. [ 645.404846][T28452] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7624'. [ 645.662000][ T28] audit: type=1326 audit(2000000897.762:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28478 comm="syz.2.7634" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f612a3ece59 code=0x0 [ 645.667655][T28477] bridge0: port 3(gretap0) entered blocking state [ 645.693592][T28477] bridge0: port 3(gretap0) entered forwarding state [ 645.701824][T28477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.710871][T28477] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.721231][T28477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.746257][T28477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.754602][T28477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.765109][T28477] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 645.776389][T28477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 645.786979][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 645.787897][T28477] hsr0: left promiscuous mode [ 645.801554][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 645.807443][T28477] veth1_vlan: left promiscuous mode [ 645.826498][T28477] veth0_vlan: left promiscuous mode [ 645.832201][T28477] veth0_vlan: entered promiscuous mode [ 645.839990][T28477] veth1_vlan: entered promiscuous mode [ 645.848464][T28477] veth1_macvtap: left promiscuous mode [ 645.854749][T28477] veth0_macvtap: left promiscuous mode [ 645.861259][T28477] veth0_macvtap: entered promiscuous mode [ 645.867612][T28477] veth1_macvtap: entered promiscuous mode [ 645.876891][T28477] veth0_to_bridge: entered promiscuous mode [ 645.886017][T28477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 645.900305][T28477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 645.912241][T28477] 8021q: adding VLAN 0 to HW filter on device team1 [ 645.920266][T28477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 645.934107][T28477] 8021q: adding VLAN 0 to HW filter on device bond4 [ 645.943889][T28477] 8021q: adding VLAN 0 to HW filter on device bond5 [ 645.970330][T28477] 8021q: adding VLAN 0 to HW filter on device bond6 [ 645.970430][ T6280] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 645.979166][T28477] 8021q: adding VLAN 0 to HW filter on device eth0 [ 645.996865][T28477] 8021q: adding VLAN 0 to HW filter on device eth1 [ 646.005497][T28477] 8021q: adding VLAN 0 to HW filter on device eth2 [ 646.013890][T28477] 8021q: adding VLAN 0 to HW filter on device eth3 [ 646.022474][T28477] 8021q: adding VLAN 0 to HW filter on device bond7 [ 646.033148][T28477] 8021q: adding VLAN 0 to HW filter on device bond8 [ 646.042436][T28477] 8021q: adding VLAN 0 to HW filter on device bond9 [ 646.056200][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.063329][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.072726][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.079980][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.128342][ T68] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.139383][ T68] bond1: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 646.157525][ T68] bond1: (slave veth7): making interface the new active one [ 646.167565][ T68] bond1: active interface up! [ 646.217462][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.270006][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.286367][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.322499][T28487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7637'. [ 646.333893][ T6288] bond6: (slave veth1_to_team): link status definitely up, 10000 Mbps full duplex [ 646.340703][ T970] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 646.365913][ T6288] bond6: active interface up! [ 646.522104][T28495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7641'. [ 646.591289][T28510] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7645'. [ 646.612936][T28512] netlink: 'syz.3.7646': attribute type 2 has an invalid length. [ 646.660635][T28512] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7646'. [ 646.893150][ T28] audit: type=1400 audit(2000000898.992:2839): avc: denied { write } for pid=28514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 646.964002][T28532] netlink: 277 bytes leftover after parsing attributes in process `syz.2.7649'. [ 646.974401][ T28] audit: type=1400 audit(2000000899.072:2840): avc: denied { write } for pid=28534 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.378569][ T28] audit: type=1400 audit(2000000899.472:2841): avc: denied { write } for pid=28545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.460054][T28563] loop1: detected capacity change from 0 to 164 [ 647.498032][ T28] audit: type=1400 audit(2000000899.592:2842): avc: denied { write } for pid=28564 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.526531][T28563] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 647.551871][T28563] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 648.264009][T28578] batadv_slave_0: entered promiscuous mode [ 648.279693][T28578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7660'. [ 648.305381][T28578] batadv_slave_0 (unregistering): left promiscuous mode [ 648.327940][T28578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.403001][T28580] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7661'. [ 648.425170][T28580] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7661'. [ 648.448546][T28580] netlink: 'syz.5.7661': attribute type 6 has an invalid length. [ 648.465518][T28580] netlink: 'syz.5.7661': attribute type 5 has an invalid length. [ 648.482020][T28580] netlink: 43 bytes leftover after parsing attributes in process `syz.5.7661'. [ 649.450680][ T6290] net_ratelimit: 11 callbacks suppressed [ 649.450727][ T6290] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 649.470925][ T6290] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 650.030101][ T6290] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 650.044470][ T6290] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 650.589093][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 650.603551][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 650.809032][ T28] audit: type=1400 audit(2000000902.902:2843): avc: denied { shutdown } for pid=28630 comm="syz.5.7679" lport=37136 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 650.955846][T28639] tipc: Started in network mode [ 650.968731][T28639] tipc: Node identity 4, cluster identity 4711 [ 650.976440][T28639] tipc: Node number set to 4 [ 651.169649][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 651.184189][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.644552][T28656] loop1: detected capacity change from 0 to 1024 [ 651.744130][ T6290] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 651.751325][T28656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.758600][ T6290] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 651.838971][T28656] sg_write: data in/out 422879/882 bytes for SCSI command 0x0-- guessing data in; [ 651.838971][T28656] program syz.1.7689 not setting count and/or reply_len properly [ 651.972741][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.056745][T28675] geneve4: entered promiscuous mode [ 652.062357][T28675] geneve4: entered allmulticast mode [ 653.203142][T28727] 9p: Bad value for 'rfdno' [ 653.275524][T28731] 8021q: adding VLAN 0 to HW filter on device bond3 [ 653.300151][T28731] bond3: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 653.642735][T28770] 9p: Bad value for 'rfdno' [ 653.768519][T28777] 9p: Bad value for 'rfdno' [ 653.964924][T28786] tipc: Started in network mode [ 653.975905][T28786] tipc: Node identity 4, cluster identity 4711 [ 653.991305][T28786] tipc: Node number set to 4 [ 654.161572][ T28] audit: type=1326 audit(2000001162.261:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28791 comm="syz.0.7737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3af188ce59 code=0x0 [ 654.725318][T28816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7746'. [ 654.740602][T28816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7746'. [ 654.829055][ T6286] net_ratelimit: 12 callbacks suppressed [ 654.829108][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 654.849214][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 655.389014][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 655.403473][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 655.594337][T28853] batadv_slave_0: entered promiscuous mode [ 655.602607][T28847] loop1: detected capacity change from 0 to 512 [ 655.632897][T28847] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 655.632899][T28853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7759'. [ 655.651898][T28847] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.7755: bad orphan inode 131083 [ 655.670017][T28847] loop1: lost filesystem error report for type 5 error -117 [ 655.670747][T28847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.674280][T28853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.763300][T28853] batadv0: mtu less than device minimum [ 655.784217][T28853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 655.795280][T28853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 655.806201][T28853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 655.817222][T28853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 655.828028][T28853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 655.963396][T28853] batadv_slave_0 (unregistering): left promiscuous mode [ 655.990797][T28853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.016188][T20117] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.083013][T28865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7762'. [ 656.382498][T28884] netlink: 'syz.3.7768': attribute type 39 has an invalid length. [ 656.401025][T28884] hsr_slave_0: left promiscuous mode [ 656.409380][T28884] hsr_slave_1: left promiscuous mode [ 656.548446][T28895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7773'. [ 657.421929][T28904] batadv_slave_0: entered promiscuous mode [ 657.428858][T28904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7775'. [ 657.439159][T28904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.466200][T28904] batadv_slave_0 (unregistering): left promiscuous mode [ 657.481701][T28904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.519847][T28914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7779'. [ 657.582808][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7780'. [ 657.599088][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7780'. [ 657.815456][ T28] audit: type=1326 audit(2000001165.911:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.7784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af188ce59 code=0x7ffc0000 [ 657.868288][ T28] audit: type=1326 audit(2000001165.911:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.7784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af188ce59 code=0x7ffc0000 [ 657.902020][ T28] audit: type=1326 audit(2000001165.911:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.7784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af188ce59 code=0x7ffc0000 [ 657.948884][ T28] audit: type=1326 audit(2000001165.911:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.7784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3af188bcc7 code=0x7ffc0000 [ 657.977666][ T28] audit: type=1326 audit(2000001165.911:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.7784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af188ce59 code=0x7ffc0000 [ 658.005724][ T28] audit: type=1326 audit(2000001165.911:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.7784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af188ce59 code=0x7ffc0000 [ 658.035197][ T28] audit: type=1326 audit(2000001165.911:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.7784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af188ce59 code=0x7ffc0000 [ 658.061600][ T28] audit: type=1326 audit(2000001165.911:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.7784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f3af188ce59 code=0x7ffc0000 [ 658.089083][ T28] audit: type=1326 audit(2000001165.941:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.7784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af188ce59 code=0x7ffc0000 [ 658.116262][ T28] audit: type=1326 audit(2000001165.941:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28922 comm="syz.0.7784" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3af188ce59 code=0x7ffc0000 [ 658.185393][T28925] ================================================================== [ 658.193537][T28925] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 658.202179][T28925] [ 658.204525][T28925] write to 0xffff88810ee5b8e0 of 8 bytes by task 28924 on cpu 1: [ 658.212266][T28925] shmem_file_splice_read+0x40e/0x5a0 [ 658.217801][T28925] splice_direct_to_actor+0x26e/0x670 [ 658.223204][T28925] do_splice_direct+0x119/0x1a0 [ 658.228098][T28925] do_sendfile+0x382/0x650 [ 658.232536][T28925] __x64_sys_sendfile64+0x105/0x150 [ 658.237756][T28925] x64_sys_call+0x2dc4/0x3020 [ 658.242462][T28925] do_syscall_64+0x12c/0x3b0 [ 658.247075][T28925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.252997][T28925] [ 658.255336][T28925] write to 0xffff88810ee5b8e0 of 8 bytes by task 28925 on cpu 0: [ 658.263172][T28925] shmem_file_splice_read+0x40e/0x5a0 [ 658.268593][T28925] splice_direct_to_actor+0x26e/0x670 [ 658.273999][T28925] do_splice_direct+0x119/0x1a0 [ 658.278890][T28925] do_sendfile+0x382/0x650 [ 658.283344][T28925] __x64_sys_sendfile64+0x105/0x150 [ 658.288804][T28925] x64_sys_call+0x2dc4/0x3020 [ 658.293502][T28925] do_syscall_64+0x12c/0x3b0 [ 658.298370][T28925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.304360][T28925] [ 658.306686][T28925] value changed: 0x000000000000713a -> 0x0000000000007146 [ 658.313795][T28925] [ 658.316128][T28925] Reported by Kernel Concurrency Sanitizer on: [ 658.322291][T28925] CPU: 0 UID: 0 PID: 28925 Comm: syz.3.7782 Tainted: G W syzkaller #0 PREEMPT(full) [ 658.333248][T28925] Tainted: [W]=WARN [ 658.337230][T28925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 658.347300][T28925] ================================================================== [ 658.435808][T28931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7788'. [ 660.068997][ T30] net_ratelimit: 30 callbacks suppressed [ 660.069017][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 660.089214][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 660.609080][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 660.623432][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.139095][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 661.153426][ T6286] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 661.669068][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 661.683595][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 662.199020][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 662.213401][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 665.299044][ T6280] net_ratelimit: 10 callbacks suppressed [ 665.299065][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 665.319108][ T6280] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 665.839203][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 665.853557][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.369198][ T6288] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 666.383869][ T6288] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 666.899038][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 666.913372][ T30] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 667.429049][ T6288] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 667.443374][ T6288] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-304); Ignoring new local tt entry: 01:00:5e:00:00:01