last executing test programs: 7m18.987436662s ago: executing program 0 (id=161): set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000140)='S', 0x1) sendfile(r1, r0, 0x0, 0x80000002) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) statx(0xffffffffffffffff, 0x0, 0x1000, 0x8a614fbd48385d1, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x140c, 0x200, 0x70bd2c, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) 7m18.801549808s ago: executing program 0 (id=169): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x100) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) 7m18.778706869s ago: executing program 0 (id=170): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009f40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@deltfilter={0xb74, 0x2d, 0x2, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffff}, {0xd, 0x1}, {0x0, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0xb48, 0x2, [@TCA_FW_ACT={0xb44, 0x4, [@m_tunnel_key={0xb40, 0x5, 0x0, 0x0, {{0xf}, {0x4}, {0xb0e, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xb74}, 0x1, 0x0, 0x0, 0x44}, 0x0) writev(r0, &(0x7f000000cac0)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b39", 0x1c}], 0x1) 7m18.765038469s ago: executing program 0 (id=171): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x6, 0x801, &(0x7f0000001540)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x546b}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e25}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x892}, 0x2000000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r2) r3 = syz_clone(0x8202000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) syz_open_procfs(r3, &(0x7f0000000240)='fdinfo/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x4010, 0xffffffffffffffff, 0xec772000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@netfilter={0x1, 0x0, 0x10, 0x1}}, 0x20) 7m18.676746902s ago: executing program 0 (id=174): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000390400000000fdff050000008000", @ANYRES32=r3, @ANYBLOB="01980000e00000002800128008000100677265001c00028006000e0002"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) 7m17.292663856s ago: executing program 0 (id=178): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0xffffff37}, &(0x7f0000000300)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r3) faccessat2(r4, &(0x7f0000000880)='\x00', 0x1, 0x1100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x1, 0x80, 0xfffffff8, 0x7, {{0x10, 0x4, 0x1, 0x8, 0x40, 0x68, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0xfd, 0x1, 0xa, [{@remote, 0x4ae}, {@multicast2, 0xffffffff}, {@remote, 0xf}]}, @ssrr={0x89, 0xf, 0x26, [@rand_addr=0x64010100, @remote, @broadcast]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f0000000000)=0x5, 0x4) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r0}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) getgid() getsockopt$inet_tcp_buf(r8, 0x6, 0xe, &(0x7f00000008c0)=""/244, &(0x7f00000009c0)=0xf4) r10 = socket(0x1d, 0x2, 0x2) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @exit, @call={0x85, 0x0, 0x0, 0x8d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @generic={0x8, 0x8, 0xf, 0x9, 0xb3b6}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0xa, 0x3, 0x1, 0xffffffffffffffc0, 0x8}], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x93, &(0x7f0000000340)=""/147, 0x41000, 0x12, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0xffff, 0x2}, 0x10, 0x3d7a, r9, 0x9, &(0x7f0000000600)=[r11, 0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x2, 0x6, 0x4}, {0x3, 0x1, 0x2, 0x9}, {0xfffffe01, 0x1, 0xd, 0x9}, {0x3, 0x4, 0x7}, {0x3, 0x1, 0x10, 0x3}, {0x3, 0x4, 0x1, 0x7}, {0x5, 0x4, 0xf, 0x5}, {0x5, 0x4, 0xe, 0xb}, {0x1, 0x4, 0x7, 0x7}], 0x10, 0x4}, 0x94) 7m17.272011696s ago: executing program 32 (id=178): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007"], 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0xffffff37}, &(0x7f0000000300)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r3, r3) faccessat2(r4, &(0x7f0000000880)='\x00', 0x1, 0x1100) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x1, 0x80, 0xfffffff8, 0x7, {{0x10, 0x4, 0x1, 0x8, 0x40, 0x68, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0xfd, 0x1, 0xa, [{@remote, 0x4ae}, {@multicast2, 0xffffffff}, {@remote, 0xf}]}, @ssrr={0x89, 0xf, 0x26, [@rand_addr=0x64010100, @remote, @broadcast]}]}}}}}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f0000000000)=0x5, 0x4) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r0}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) getgid() getsockopt$inet_tcp_buf(r8, 0x6, 0xe, &(0x7f00000008c0)=""/244, &(0x7f00000009c0)=0xf4) r10 = socket(0x1d, 0x2, 0x2) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @exit, @call={0x85, 0x0, 0x0, 0x8d}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @generic={0x8, 0x8, 0xf, 0x9, 0xb3b6}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0xa, 0x3, 0x1, 0xffffffffffffffc0, 0x8}], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x93, &(0x7f0000000340)=""/147, 0x41000, 0x12, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0xe, 0xffff, 0x2}, 0x10, 0x3d7a, r9, 0x9, &(0x7f0000000600)=[r11, 0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x2, 0x6, 0x4}, {0x3, 0x1, 0x2, 0x9}, {0xfffffe01, 0x1, 0xd, 0x9}, {0x3, 0x4, 0x7}, {0x3, 0x1, 0x10, 0x3}, {0x3, 0x4, 0x1, 0x7}, {0x5, 0x4, 0xf, 0x5}, {0x5, 0x4, 0xe, 0xb}, {0x1, 0x4, 0x7, 0x7}], 0x10, 0x4}, 0x94) 5m22.96604388s ago: executing program 3 (id=973): bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x20000001) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x7c}}, 0x8091) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20048844}, 0x48800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x1, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000002000010023bd7000000000000a008040000000070000000014000200fc00000000000000000010000000010008000d000200000008000e00f8ff"], 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) 5m22.845169614s ago: executing program 3 (id=975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = semget$private(0x0, 0x3, 0x2d0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f00000000c0)=""/40) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x168}}, 0x0) 5m22.816589535s ago: executing program 3 (id=976): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000001480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@nogrpid}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41eb5b9f, 0x1, @perf_config_ext={0x92, 0x80000000000000}, 0x106a10, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4020000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0xa7a409bcc92d3d07, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f00000011c0)={0x0, 0x0, 0x1, 0x3}) 5m22.541124344s ago: executing program 3 (id=980): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6220, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x10910, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[], 0x48) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x6a, 0x10, 0x0, &(0x7f0000000080)) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@gettaction={0x20, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x2004c080) r3 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x1, r3, 0x0) futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='v', 0x1, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/23}) r5 = fsopen(&(0x7f0000000380)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) 5m21.977841041s ago: executing program 3 (id=993): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x251, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8083, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) timer_create(0x0, 0x0, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x401a, &(0x7f0000000040)={[{@oldalloc}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x400}}]}, 0x2, 0xc13, &(0x7f0000003bc0)="$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") syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") 5m21.336630072s ago: executing program 3 (id=1003): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x40, 0x7, 0x0, 0x6c, 0x0, 0x4, 0x10, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x4, @perf_config_ext={0x9, 0xfffffffffffffff7}, 0x100113, 0x5, 0x6, 0x7, 0x2, 0x5, 0x9, 0x0, 0x7000000, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40041}, 0x0) getgroups(0x0, 0x0) setgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x5, 0x1, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) io_uring_setup(0x70c3, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f4897b}, 0xc) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f48d7b}, 0xc) 5m21.320133062s ago: executing program 33 (id=1003): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x40, 0x7, 0x0, 0x6c, 0x0, 0x4, 0x10, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x4, @perf_config_ext={0x9, 0xfffffffffffffff7}, 0x100113, 0x5, 0x6, 0x7, 0x2, 0x5, 0x9, 0x0, 0x7000000, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40041}, 0x0) getgroups(0x0, 0x0) setgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x5, 0x1, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) io_uring_setup(0x70c3, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f4897b}, 0xc) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x9ea8bb2a1f48d7b}, 0xc) 4m28.467599842s ago: executing program 6 (id=1401): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = gettid() tkill(r0, 0x14) r1 = io_uring_setup(0x77ba, &(0x7f0000000100)={0x0, 0xfa57, 0x400, 0x0, 0x29e}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x25, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x208446, &(0x7f0000000080)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0xfffffffffffffffe}}, {@block_validity}, {@jqfmt_vfsold}, {@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@dax_never}, {@jqfmt_vfsold}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x1, 0x444, &(0x7f00000005c0)="$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") 4m28.392799375s ago: executing program 6 (id=1403): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r3 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x110, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r4 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x2b) ioctl$TCXONC(r0, 0x5608, 0x3) 4m28.392409965s ago: executing program 6 (id=1404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c000180140001"], 0x138}}, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002003a00080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x168}}, 0x0) 4m28.368072586s ago: executing program 6 (id=1405): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x6340, 0x1000, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000010) r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 4m28.278728509s ago: executing program 6 (id=1407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x7c, 0x10, 0x403, 0x303, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7f}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}]}, 0x7c}}, 0x8000) remap_file_pages(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2000003, 0x1, 0x10000) 4m28.109676724s ago: executing program 6 (id=1415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x431}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 4m28.109315904s ago: executing program 34 (id=1415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSBRK(r1, 0x5427) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x20000000, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x431}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 2m54.47428807s ago: executing program 5 (id=2601): syz_open_dev$sg(0x0, 0x0, 0x202) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000dc0)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @ipv4={'\x00', '\xff\xff', @empty}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004010000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=ANY=[@ANYBLOB="b4000000000000001e1000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000000000008500000021000000b7000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000540)=0x7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31830000000000000000190000000c00018008000100070000"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') mq_notify(r4, &(0x7f0000000cc0)={0x0, 0xc, 0x1, @thr={&(0x7f0000000ac0)="8db15e93c5d879447f21fc3e4d29e67e3a541d3e707f662c82524d35c33a969a322725049bfc9705526faca8a8f1d52a694ff3bbb31cd1fa5a4a6cd6901f5b48ddc3208d85b709cb0c6260402dd6a7a82d8b2ff64247d70eefacda2c0933414fde751b59cfb0b32cb7022129d12d44c42059fc9954f2200b64b9ea065bd7379ae342b07d7f1a54038ecd781d53ea5a41e327577fdab04bb438b7e164688892f5a6b080d9ec142e26c6d3035b728168d4c55b28bd879e362861b140a25baaa6587b7404", 0x0}}) read$msr(r4, &(0x7f0000000d40)=""/43, 0x2b) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000140)) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d46642c7266646e6b3de4f87e99b19c9e31814dcc41d60441682741999457611cdf53301ea499e3e185be0f8f63b4d865b1ca0fe126f74663f826381e88241c9d4b2a0073c6e7b3c8450ea103d7b175adc5aac123f173853767aa79253cd5ab123a26d4dd7e20975d48687f27fbdd3499dab912da8e6f91fcad817a00d269c718b54dbcbcf248fcd9b04fb1f7a572783dc68e57e4c13a37ddd83511dbcedb6d9e408471b304", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x200040c4) shmat(0x0, &(0x7f000068d000/0x4000)=nil, 0x7000) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000b00), 0x1, 0x47e, &(0x7f0000000640)="$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") fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) mknodat$null(0xffffffffffffff9c, 0x0, 0x1d4e, 0x103) shmat(0x0, &(0x7f0000be5000/0x7000)=nil, 0x3000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10092, &(0x7f0000000280)={[{@nobh}]}, 0x1, 0x260, &(0x7f0000000e40)="$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") r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x900, 0x12) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x3, 0x2, {0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x2}}}, 0x32) 2m54.101938702s ago: executing program 5 (id=2605): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xdfbd5000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="b40200000000001161174c0000000000850000002700000095000000000000004322207f5b9d680874e8dc8c5c9265ced41417862555b50684ce84a7fce1574510ed6540e18e2e0084f0c2c73e11a3e87bb9ee8ed3b5d1657d812d72020d79845c5c0989466b84d54188a25ddd3061579031a74f2018f54e4f66ee29f734df89a483d1561d7c86c1a95fd83fe4395615f4eda249c5702d03208822b1f508fb3ea04aeb85b4d61df6786b"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) 2m54.013689895s ago: executing program 5 (id=2606): socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0xc, 0x6e}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa00x0}) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000380)=ANY=[], 0x119) read(r4, &(0x7f0000001280)=""/7, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000240)="1c0000001e005f0214fffffffffffff8070000001d00000000000000", 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="01000100ff"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 2m52.6181038s ago: executing program 5 (id=2632): socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x3, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_pidfd_open(r2, 0x0) wait4(r2, 0x0, 0x40000000, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc040ff0b, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) unshare(0x400) pwrite64(r0, 0x0, 0x0, 0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2m52.237868181s ago: executing program 5 (id=2643): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x54, r0, 0xa7a409bcc92d3d07, 0x72bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4e}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m37.156340171s ago: executing program 35 (id=2643): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x54, r0, 0xa7a409bcc92d3d07, 0x72bd25, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4e}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x62}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 22.189458041s ago: executing program 4 (id=5852): socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0xa5}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 22.130029264s ago: executing program 4 (id=5854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) 22.033679307s ago: executing program 4 (id=5857): unshare(0x22020480) r0 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000100)=0x6) 21.91380428s ago: executing program 4 (id=5858): socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 21.856506832s ago: executing program 4 (id=5861): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000a80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000040)=""/240, 0x46, 0xf0, 0x6}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) preadv(r2, &(0x7f0000000100), 0xa, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x1f, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x9}, 0x8) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000ac0)={0x0, 0x7, 0x6}) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000001300)={r9, 0x2, 0x0, [0x7, 0x3, 0x77, 0x6e7b76aa, 0x3], [0x9efa, 0xfffffffffffffffd, 0x2, 0x7, 0x5, 0x2, 0xf1d, 0x6, 0xfffffffffffffe00, 0x8001, 0x5, 0x9c9, 0x1, 0x4, 0x4, 0x2, 0x3, 0x3, 0x1, 0xffffffffffffffff, 0xc, 0x8000000000000000, 0x1, 0x6785, 0x1000, 0x25, 0x200, 0xfffffffffffffffa, 0x100000001, 0x6, 0x2, 0x10000, 0x2, 0x9, 0xcf4d, 0x5, 0x8, 0x3, 0x3, 0x3, 0x6, 0x3401, 0x31f, 0x2, 0x3, 0x2, 0x97c5, 0x1, 0x8, 0x3, 0x0, 0x10, 0x0, 0x8, 0x5, 0x8000000000000001, 0x4000000000000000, 0x121d, 0x7, 0x8, 0xfffffffffffffffe, 0xc, 0x101, 0x3, 0x2, 0x100, 0x8, 0xffffffffffffffff, 0x8b, 0x0, 0x460d8c17, 0x2, 0x9, 0x800, 0xe, 0x551, 0x7, 0x1141, 0x3, 0x9, 0xffff, 0x7, 0x4, 0x7, 0x2, 0x0, 0x7f, 0x7fff, 0x2, 0x7ff, 0x7fffffffffffffff, 0x800000003, 0x10000, 0x3, 0x0, 0x9, 0x3, 0x8001, 0xcd, 0x4, 0x614d, 0x100000001, 0x3, 0x59e, 0x8, 0x3, 0x9, 0x5, 0xfffffffffffffffa, 0x7fff, 0x93c3, 0x8000000000000001, 0xf, 0x2, 0xce0, 0x8, 0x1, 0xffffffff, 0x30000000000000, 0x10000, 0x9]}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xd}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 21.654534349s ago: executing program 4 (id=5866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 19.982994501s ago: executing program 8 (id=5904): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f9fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 19.905814133s ago: executing program 1 (id=5906): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 19.905559233s ago: executing program 8 (id=5907): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200447ac, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001000)="98", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000680)="449f6aed247d197178c52d7eb85ff4a6e16fa6c282d8c3961e8d6c0082d2a25713fcbe0b0dfc6642ddb8617cead45f7b95c5989ddccf5460087b3e23cd11c12178f5a69a0ec4d95afb9b948c7527c466ab2093c578ac513b364476aa18fca150e57783c6fdb38f6b13d1a98ec11e7241280ee08a24c6a460c92ec8568aa3cf3af8fd16492e39dfca628c9bd0d9ea070b64", 0x91}, {&(0x7f0000000780)="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", 0x133}], 0x2}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="bae4", 0x2}, {&(0x7f00000000c0)="d825079a98f00eedab87b0af330c7e2d626924216763b5579a3c85b2d1d46bc5b3ec13932a25cc7486d10c7a582a9d573d6807ca73ae27ac0c656b8ff80c5277da81f2bd35f1070706da1c17f225db1a5b84ae6628b081dafe87bf4de0728e1c2b76e0c0d91e622fc1c716", 0x6b}], 0x2}}], 0x3, 0x4004) 19.841357465s ago: executing program 8 (id=5908): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) 19.747008229s ago: executing program 7 (id=5909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000130a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x4000040) 19.606442133s ago: executing program 2 (id=5910): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)}], 0x1}}], 0x1, 0x0) 19.469889887s ago: executing program 7 (id=5911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)={0x2c, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x800) 19.469532178s ago: executing program 7 (id=5912): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007980)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/69, 0x45}, {&(0x7f0000001ec0)=""/169, 0xa9}, {&(0x7f0000001f80)=""/244, 0xf4}, {&(0x7f0000002080)=""/3, 0x3}, {&(0x7f00000020c0)=""/184, 0xb8}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000002200)=""/155, 0x9b}, {&(0x7f00000022c0)=""/140, 0x8c}, {&(0x7f0000002380)=""/241, 0xf1}], 0xa, &(0x7f0000002540)=""/43, 0x2b}, 0x5}, {{&(0x7f0000002580)=@alg, 0x80, &(0x7f0000002780)=[{&(0x7f0000002600)=""/49, 0x31}, {&(0x7f0000002640)=""/95, 0x5f}, {&(0x7f00000026c0)=""/47, 0x2f}, {&(0x7f0000002700)=""/86, 0x56}], 0x4, &(0x7f00000027c0)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f00000037c0)=""/41, 0x29}, {&(0x7f0000003800)=""/254, 0xfe}, {&(0x7f0000003900)}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/163, 0xa3}, {&(0x7f0000004a00)=""/119, 0x77}, {&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/194, 0xc2}, {&(0x7f0000004c40)=""/172, 0xac}, {&(0x7f0000004d00)=""/4096, 0x1000}], 0xa, &(0x7f0000005dc0)=""/177, 0xb1}, 0xc0}, {{&(0x7f0000005e80)=@isdn, 0x80, &(0x7f0000007900)=[{&(0x7f0000005f00)=""/52, 0x34}, {&(0x7f0000005f40)=""/44, 0x2c}, {&(0x7f0000005f80)=""/111, 0x6f}, {&(0x7f0000006000)=""/160, 0xa0}, {&(0x7f00000060c0)=""/198, 0xc6}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f00000077c0)=""/89, 0x59}, {&(0x7f0000007840)=""/167, 0xa7}], 0x8}, 0x3}], 0x5, 0x10003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 19.308530323s ago: executing program 2 (id=5913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a3200000000080004400000000009"], 0x78}}, 0x0) 19.262931944s ago: executing program 1 (id=5914): sendmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000440)="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", 0x587}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 19.241008194s ago: executing program 8 (id=5915): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 19.149774388s ago: executing program 1 (id=5916): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8091}, 0x40) 19.149478457s ago: executing program 8 (id=5917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 19.06628904s ago: executing program 1 (id=5918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) socket$inet(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000001240)='+}\\)>&^}\x00', 0xa0882, &(0x7f00000001c0)={@align=0x2, {0xa, 0x4, 0x7, 0xf80000000000}}, 0xf6, 0x0, 0x0}) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, 0x0, &(0x7f00000003c0)) socket$kcm(0x10, 0x2, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f0000000040)={@remote, r7}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f800800014000e7ffff07000340"], 0x88}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r8) r9 = getpid() sendmsg$unix(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(r8, &(0x7f0000000400), 0x12) 19.034005131s ago: executing program 8 (id=5919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) write$tun(r0, &(0x7f0000003240)=ANY=[@ANYBLOB="0800080002000200b6e7140002004c1c017f006600000102"], 0x18d) 19.004463092s ago: executing program 2 (id=5920): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 18.890890436s ago: executing program 2 (id=5921): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x1, 0xf0, 0x3}, 0xff}, 0x18) 18.848973007s ago: executing program 1 (id=5922): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7, 0x407ffffffffffe, 0x800000000000002}, 0x8001, 0x1, 0x1, 0x0, 0x6, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r5 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@private2, 0x18}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 18.712706261s ago: executing program 2 (id=5923): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 18.661920933s ago: executing program 1 (id=5924): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 18.596685735s ago: executing program 7 (id=5925): sendmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000440)="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", 0x587}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 18.516879987s ago: executing program 2 (id=5926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) 18.516538967s ago: executing program 7 (id=5927): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 16.350643256s ago: executing program 7 (id=5928): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_pauseparam={0x13, 0x80, 0x6, 0x7f}}) 3.126573822s ago: executing program 36 (id=5919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) write$tun(r0, &(0x7f0000003240)=ANY=[@ANYBLOB="0800080002000200b6e7140002004c1c017f006600000102"], 0x18d) 2.364363686s ago: executing program 37 (id=5924): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$inet6(0xa, 0x5, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 656.20618ms ago: executing program 38 (id=5926): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) 0s ago: executing program 39 (id=5928): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000640)=@ethtool_pauseparam={0x13, 0x80, 0x6, 0x7f}}) kernel console output (not intermixed with test programs): 657][T13926] bridge_slave_1: entered allmulticast mode [ 366.639194][T13926] bridge_slave_1: entered promiscuous mode [ 366.647601][T10145] tipc: Left network mode [ 366.664390][T14002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3152'. [ 366.687410][T13926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.698445][T13926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.717950][T10145] hsr_slave_0: left promiscuous mode [ 366.727866][T10145] hsr_slave_1: left promiscuous mode [ 366.788540][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 366.788555][ T28] audit: type=1400 audit(1780637270.800:6533): avc: denied { write } for pid=14005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.823076][T14024] loop8: detected capacity change from 0 to 512 [ 366.908025][T14024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.908066][T13926] team0: Port device team_slave_0 added [ 366.909243][T13926] team0: Port device team_slave_1 added [ 366.926402][T14024] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.942695][ T28] audit: type=1400 audit(1780637270.950:6534): avc: denied { write } for pid=14028 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 366.987162][T13926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.994722][T13926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.021621][T13926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.029808][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 367.033520][T13926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.048376][T13926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.074765][T13926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.074877][T14008] SELinux: failed to load policy [ 367.093325][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 367.122896][T13926] hsr_slave_0: entered promiscuous mode [ 367.129533][T13926] hsr_slave_1: entered promiscuous mode [ 367.135963][T13926] debugfs: 'hsr0' already exists in 'hsr' [ 367.137162][T12795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.141960][T13926] Cannot create hsr debugfs directory [ 367.311828][T10145] IPVS: stop unused estimator thread 0... [ 367.377807][ T28] audit: type=1400 audit(1780637271.390:6535): avc: denied { write } for pid=14048 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.518502][ T28] audit: type=1400 audit(1780637271.530:6536): avc: denied { write } for pid=14066 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 367.974355][T14073] FAULT_INJECTION: forcing a failure. [ 367.974355][T14073] name failslab, interval 1, probability 0, space 0, times 0 [ 367.987441][T14073] CPU: 0 UID: 0 PID: 14073 Comm: syz.1.3163 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 367.987474][T14073] Tainted: [W]=WARN [ 367.987482][T14073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.987493][T14073] Call Trace: [ 367.987509][T14073] [ 367.987516][T14073] __dump_stack+0x1d/0x30 [ 367.987543][T14073] dump_stack_lvl+0x95/0xd0 [ 367.987565][T14073] dump_stack+0x15/0x1b [ 367.987584][T14073] should_fail_ex+0x263/0x280 [ 367.987605][T14073] should_failslab+0x8c/0xb0 [ 367.987648][T14073] kmem_cache_alloc_noprof+0x66/0x3f0 [ 367.987675][T14073] ? security_inode_alloc+0x37/0x100 [ 367.987705][T14073] ? __pfx_sock_alloc_inode+0x10/0x10 [ 367.987776][T14073] security_inode_alloc+0x37/0x100 [ 367.987872][T14073] inode_init_always_gfp+0x4a0/0x4e0 [ 367.987900][T14073] ? __pfx_sock_alloc_inode+0x10/0x10 [ 367.987970][T14073] alloc_inode+0x58/0x170 [ 367.987986][T14073] __sock_create+0x120/0x580 [ 367.988021][T14073] sock_create_kern+0x38/0x50 [ 367.988038][T14073] mptcp_subflow_create_socket+0x84/0x520 [ 367.988100][T14073] __mptcp_nmpc_sk+0xb5/0x3d0 [ 367.988152][T14073] mptcp_sendmsg_fastopen+0x90/0x320 [ 367.988239][T14073] mptcp_sendmsg+0xe96/0x1100 [ 367.988258][T14073] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 367.988286][T14073] ? __pfx_inet_sendmsg+0x10/0x10 [ 367.988381][T14073] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 367.988401][T14073] inet_sendmsg+0xc5/0xd0 [ 367.988428][T14073] ? __pfx_inet_sendmsg+0x10/0x10 [ 367.988517][T14073] ____sys_sendmsg+0x519/0x5b0 [ 367.988550][T14073] ___sys_sendmsg+0x195/0x1e0 [ 367.988584][T14073] __x64_sys_sendmsg+0xd4/0x160 [ 367.988607][T14073] x64_sys_call+0x194c/0x3020 [ 367.988652][T14073] do_syscall_64+0x12c/0x3b0 [ 367.988708][T14073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.988726][T14073] RIP: 0033:0x7fc12096ce59 [ 367.988740][T14073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.988758][T14073] RSP: 002b:00007fc11f37d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.988846][T14073] RAX: ffffffffffffffda RBX: 00007fc120be6180 RCX: 00007fc12096ce59 [ 367.988858][T14073] RDX: 00000000200048cc RSI: 0000200000000240 RDI: 0000000000000008 [ 367.988870][T14073] RBP: 00007fc11f37d090 R08: 0000000000000000 R09: 0000000000000000 [ 367.988881][T14073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.988934][T14073] R13: 00007fc120be6218 R14: 00007fc120be6180 R15: 00007ffd3622d508 [ 367.989016][T14073] [ 367.989127][T14073] socket: no more sockets [ 368.533390][T14079] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 368.658559][ T9516] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 368.671889][T14081] cgroup: none used incorrectly [ 368.743544][ T28] audit: type=1400 audit(1780637272.760:6537): avc: denied { map } for pid=14080 comm="syz.1.3165" path="/proc/283/numa_maps" dev="proc" ino=43932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 368.772669][ T9516] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 368.874606][T14093] fido_id[14093]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 369.018980][ T28] audit: type=1400 audit(1780637273.030:6538): avc: denied { write } for pid=14076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.085631][ T28] audit: type=1400 audit(1780637273.090:6539): avc: denied { write } for pid=14111 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 369.087131][T13926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 369.155658][T13926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.260452][T13926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 369.315555][T13926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.345662][T13926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 369.378434][T13926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.387540][T14120] loop8: detected capacity change from 0 to 1764 [ 369.396089][T13926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 369.419562][T14123] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3175'. [ 369.437881][T13926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.632192][T13926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.977707][T13926] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.039427][T10150] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.046523][T10150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.117365][T10150] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.124474][T10150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.338978][T13926] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.552333][T13926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.617459][ T28] audit: type=1400 audit(1780637274.630:6540): avc: denied { write } for pid=14128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.392250][T14155] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 371.426456][T14155] lo speed is unknown, defaulting to 1000 [ 371.523925][T14156] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3178'. [ 371.905807][ T28] audit: type=1400 audit(1780637275.920:6541): avc: denied { write } for pid=14162 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.952027][T14163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3179'. [ 373.408890][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.424028][T14170] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 373.430584][T14170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 373.447930][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.479858][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.496331][T14170] vhci_hcd vhci_hcd.0: Device attached [ 373.529274][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.547213][T14174] vhci_hcd: connection closed [ 373.547878][T10150] vhci_hcd vhci_hcd.8: stop threads [ 373.569312][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.584483][T14180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3181'. [ 373.594625][T10150] vhci_hcd vhci_hcd.8: release socket [ 373.602318][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.617672][T10150] vhci_hcd vhci_hcd.8: disconnect device [ 373.635457][ T28] audit: type=1400 audit(1780637277.650:6542): avc: denied { write } for pid=14166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.659239][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.673459][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.681004][ T23] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 373.687387][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.697281][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.707356][T13926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.718590][ T28] audit: type=1400 audit(1780637277.730:6543): avc: denied { write } for pid=14190 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.743940][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.759790][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.772166][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.789924][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.802914][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.830075][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.849780][ T227] hid-generic 0022:3C00:06F8.0007: unknown main item tag 0x0 [ 373.868205][ T227] hid-generic 0022:3C00:06F8.0007: hidraw0: HID v0.09 Device [syz1] on syz0 [ 373.919589][T14207] fido_id[14207]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 373.935053][T13926] veth0_vlan: entered promiscuous mode [ 373.954570][ T28] audit: type=1400 audit(1780637277.970:6544): avc: denied { write } for pid=14194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.961440][T13926] veth1_vlan: entered promiscuous mode [ 374.021485][ T28] audit: type=1400 audit(1780637278.030:6545): avc: denied { write } for pid=14214 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.082989][T13926] veth0_macvtap: entered promiscuous mode [ 374.108432][T13926] veth1_macvtap: entered promiscuous mode [ 374.144664][T13926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.175952][T13926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.208377][T10141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.208603][ T28] audit: type=1400 audit(1780637278.220:6546): avc: denied { write } for pid=14220 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.229734][T10141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.269938][T10141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.289717][T10141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.305497][ T28] audit: type=1400 audit(1780637278.290:6547): avc: denied { write } for pid=14234 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.610392][T14244] vlan2: entered promiscuous mode [ 374.630724][T14244] bridge0: entered promiscuous mode [ 374.659574][T14248] loop8: detected capacity change from 0 to 1764 [ 374.816714][T14250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3190'. [ 374.831805][T14252] netlink: 'syz.2.3191': attribute type 4 has an invalid length. [ 375.395376][T14252] loop2: detected capacity change from 0 to 764 [ 375.832383][T14264] loop2: detected capacity change from 0 to 512 [ 375.864101][T14262] loop8: detected capacity change from 0 to 8192 [ 375.883170][T14262] FAT-fs (loop8): bogus logical sector size 0 [ 375.889375][T14262] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 375.898675][T14262] FAT-fs (loop8): Can't find a valid FAT filesystem [ 375.921300][T14271] 9p: Could not find request transport: fk [ 375.982281][T14279] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3199'. [ 375.998032][T14281] FAULT_INJECTION: forcing a failure. [ 375.998032][T14281] name failslab, interval 1, probability 0, space 0, times 0 [ 375.998064][T14281] CPU: 0 UID: 0 PID: 14281 Comm: syz.7.3200 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 375.998121][T14281] Tainted: [W]=WARN [ 375.998127][T14281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.998137][T14281] Call Trace: [ 375.998142][T14281] [ 375.998150][T14281] __dump_stack+0x1d/0x30 [ 375.998196][T14281] dump_stack_lvl+0x95/0xd0 [ 375.998294][T14281] dump_stack+0x15/0x1b [ 375.998310][T14281] should_fail_ex+0x263/0x280 [ 375.998328][T14281] ? kobject_uevent_env+0x1c0/0x570 [ 375.998385][T14281] should_failslab+0x8c/0xb0 [ 375.998410][T14281] __kmalloc_cache_noprof+0x5f/0x400 [ 375.998512][T14281] kobject_uevent_env+0x1c0/0x570 [ 375.998583][T14281] ? devres_release_all+0x28b/0x2d0 [ 375.998704][T14281] kobject_uevent+0x1d/0x30 [ 375.998723][T14281] device_del+0x70f/0x790 [ 375.998776][T14281] device_destroy+0x66/0xa0 [ 375.998795][T14281] vcs_remove_sysfs+0x21/0x60 [ 375.998811][T14281] vc_deallocate+0x106/0x280 [ 375.998828][T14281] vt_disallocate+0x162/0x1a0 [ 375.998882][T14281] vt_ioctl+0x1223/0x18d0 [ 375.998897][T14281] ? tty_jobctrl_ioctl+0x29c/0x810 [ 375.998998][T14281] tty_ioctl+0x7d7/0xb80 [ 375.999015][T14281] ? __pfx_tty_ioctl+0x10/0x10 [ 375.999031][T14281] __se_sys_ioctl+0xce/0x140 [ 375.999105][T14281] __x64_sys_ioctl+0x43/0x50 [ 375.999126][T14281] x64_sys_call+0x1563/0x3020 [ 375.999144][T14281] do_syscall_64+0x12c/0x3b0 [ 375.999209][T14281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.999227][T14281] RIP: 0033:0x7f82e706ce59 [ 375.999271][T14281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.999286][T14281] RSP: 002b:00007f82e5ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.999303][T14281] RAX: ffffffffffffffda RBX: 00007f82e72e5fa0 RCX: 00007f82e706ce59 [ 375.999315][T14281] RDX: 0000000000000003 RSI: 0000000000005608 RDI: 0000000000000003 [ 375.999325][T14281] RBP: 00007f82e5ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 375.999336][T14281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.999352][T14281] R13: 00007f82e72e6038 R14: 00007f82e72e5fa0 R15: 00007fff932f3e88 [ 375.999367][T14281] [ 375.999536][T14262] loop8: detected capacity change from 0 to 512 [ 376.000157][T14279] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3199'. [ 376.009313][T14262] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 376.033822][T14264] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3193: corrupted inode contents [ 376.282202][T14264] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 376.299717][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 376.315295][ C0] EXT4-fs (loop2): initial error at time 1780637280: ext4_do_update_inode:5690: inode 16 [ 376.325129][ C0] EXT4-fs (loop2): last error at time 1780637280: ext4_do_update_inode:5690: inode 16 [ 376.337946][T14264] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.3193: mark_inode_dirty error [ 376.349749][T14264] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 376.349971][T14264] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3193: corrupted inode contents [ 376.371314][T14264] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 376.372749][T14264] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.3193: mark_inode_dirty error [ 376.395884][T14264] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 376.396684][T14264] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3193: corrupted inode contents [ 376.417858][T14264] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 376.418006][T14264] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 376.435853][T14264] loop2: lost filesystem error report for type 5 error -117 [ 376.436041][T14264] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.3193: corrupted inode contents [ 376.459026][T14264] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 376.459173][T14264] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.3193: mark_inode_dirty error [ 376.496213][T14264] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 376.496352][T14264] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 376.613659][T14264] loop2: lost filesystem error report for type 5 error -117 [ 376.614104][T14264] EXT4-fs (loop2): 1 truncate cleaned up [ 376.646964][T10142] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 376.668637][T14264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.710422][T10142] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:26: Failed to release dquot type 1 [ 376.724753][T14300] lo speed is unknown, defaulting to 1000 [ 376.735931][T14264] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.758278][ T3378] hid-generic 0103:0004:0000.0008: hidraw0: HID v0.05 Device [syz0] on syz1 [ 376.787248][T14304] loop7: detected capacity change from 0 to 164 [ 376.795056][T14308] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3209'. [ 376.886080][T14312] loop8: detected capacity change from 0 to 1024 [ 376.892887][T14312] EXT4-fs: Ignoring removed oldalloc option [ 376.898867][T14312] EXT4-fs: Ignoring removed oldalloc option [ 376.914225][T14312] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 376.947965][ T28] audit: type=1400 audit(1780637280.940:6548): avc: denied { create } for pid=14316 comm="syz.4.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 376.989137][T14312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.037755][ T28] audit: type=1400 audit(1780637281.050:6549): avc: denied { write } for pid=14311 comm="syz.8.3211" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 377.075535][T14322] bridge_slave_0: left allmulticast mode [ 377.083229][ T28] audit: type=1400 audit(1780637281.080:6550): avc: denied { execute } for pid=14311 comm="syz.8.3211" path="/71/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 377.112612][T14322] bridge_slave_0: left promiscuous mode [ 377.118784][T13926] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.126043][T14322] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.139771][T14325] 9p: Could not find request transport: Fd [ 377.140069][T14322] bridge_slave_1: left allmulticast mode [ 377.151278][T14322] bridge_slave_1: left promiscuous mode [ 377.157004][T14322] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.164654][ T28] audit: type=1400 audit(1780637281.140:6551): avc: denied { write } for pid=14316 comm="syz.4.3213" path="socket:[45358]" dev="sockfs" ino=45358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 377.199272][T14322] bond0: (slave bond_slave_0): Releasing backup interface [ 377.216268][T14322] bond0: (slave bond_slave_1): Releasing backup interface [ 377.232506][T14322] team0: Port device team_slave_0 removed [ 377.244706][T14322] team0: Port device team_slave_1 removed [ 377.253810][T14322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.265891][T14322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.280521][T14322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.291198][T14322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.308072][T14322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 377.365444][T14317] team0: Mode changed to "loadbalance" [ 377.461197][T14312] lo speed is unknown, defaulting to 1000 [ 377.577495][T14338] loop2: detected capacity change from 0 to 2048 [ 377.675025][T14338] loop2: p2 p3 p7 [ 377.712239][T12795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.917642][T14344] rdma_rxe: rxe_newlink: failed to add lo [ 378.057133][T14347] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3220'. [ 378.238350][T14349] lo speed is unknown, defaulting to 1000 [ 378.547990][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 378.561351][ T5661] udevd[5661]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 378.584044][ T3282] udevd[3282]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 378.940492][T14357] loop8: detected capacity change from 0 to 1764 [ 378.954647][T14361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3226'. [ 379.106956][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3226'. [ 379.365502][T14366] 9p: Could not find request transport: Fd [ 379.458648][T14372] loop2: detected capacity change from 0 to 2048 [ 379.488536][T14372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.517565][T14372] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.576989][ T28] audit: type=1400 audit(1780637283.590:6552): avc: denied { setopt } for pid=14371 comm="syz.2.3229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 379.611161][T14380] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 379.617305][ T28] audit: type=1400 audit(1780637283.590:6553): avc: denied { write } for pid=14371 comm="syz.2.3229" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 379.662704][T14380] EXT4-fs (loop7): 1 truncate cleaned up [ 379.672892][T14380] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.727781][T14363] set_capacity_and_notify: 1 callbacks suppressed [ 379.727806][T14363] loop4: detected capacity change from 0 to 512 [ 379.752142][T14363] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 379.763440][T10147] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:31: bg 0: block 345: padding at end of block bitmap is not set [ 379.779202][ T8293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.779512][T10147] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 379.798179][T14363] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 379.800476][T10147] EXT4-fs (loop2): This should not happen!! Data will be lost [ 379.800476][T10147] [ 379.809835][T13926] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 379.810190][T13926] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.881920][ T28] audit: type=1400 audit(1780637283.890:6554): avc: denied { create } for pid=14393 comm="syz.8.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 379.918501][T14398] loop2: detected capacity change from 0 to 128 [ 379.927835][T14398] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 379.940607][ T28] audit: type=1400 audit(1780637283.930:6555): avc: denied { bind } for pid=14396 comm="syz.1.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 379.962711][T14398] FAT-fs (loop2): Filesystem has been set read-only [ 379.971043][ T28] audit: type=1400 audit(1780637283.930:6556): avc: denied { map_create } for pid=14392 comm="syz.2.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 379.992985][T14398] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 54) [ 380.003779][T14363] loop4: detected capacity change from 0 to 128 [ 380.013722][T14401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3238'. [ 380.031399][T14363] EXT4-fs: Ignoring removed nobh option [ 380.059977][T14363] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.074549][T14363] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.094272][T14363] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #2: comm syz.4.3227: No space for directory leaf checksum. Please run e2fsck -D. [ 380.110286][T14363] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3227: checksumming directory block 0 [ 380.118094][T14416] netlink: 'syz.1.3242': attribute type 2 has an invalid length. [ 380.149044][T12700] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.168961][ T28] audit: type=1400 audit(1780637284.180:6557): avc: denied { prog_load } for pid=14417 comm="syz.2.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 380.193274][T14420] netlink: 'syz.8.3245': attribute type 8 has an invalid length. [ 380.288801][T14427] gretap1: entered allmulticast mode [ 380.307916][T14426] FAULT_INJECTION: forcing a failure. [ 380.307916][T14426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.328883][T14427] team0: Port device gretap1 added [ 380.331814][T14426] CPU: 0 UID: 0 PID: 14426 Comm: syz.4.3244 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 380.331891][T14426] Tainted: [W]=WARN [ 380.331897][T14426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.331910][T14426] Call Trace: [ 380.331916][T14426] [ 380.331925][T14426] __dump_stack+0x1d/0x30 [ 380.331968][T14426] dump_stack_lvl+0x95/0xd0 [ 380.331987][T14426] dump_stack+0x15/0x1b [ 380.332047][T14426] should_fail_ex+0x263/0x280 [ 380.332068][T14426] should_fail+0xb/0x20 [ 380.332084][T14426] should_fail_usercopy+0x1a/0x20 [ 380.332105][T14426] _copy_to_user+0x20/0xa0 [ 380.332143][T14426] simple_read_from_buffer+0xb5/0x130 [ 380.332270][T14426] proc_fail_nth_read+0x10e/0x150 [ 380.332299][T14426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.332323][T14426] vfs_read+0x1ab/0x7f0 [ 380.332389][T14426] ? __rcu_read_unlock+0x4e/0x70 [ 380.332412][T14426] ? __fget_files+0x184/0x1c0 [ 380.332432][T14426] ? mutex_lock+0x57/0x90 [ 380.332500][T14426] ksys_read+0xdc/0x1a0 [ 380.332531][T14426] __x64_sys_read+0x40/0x50 [ 380.332557][T14426] x64_sys_call+0x2886/0x3020 [ 380.332598][T14426] do_syscall_64+0x12c/0x3b0 [ 380.332700][T14426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.332752][T14426] RIP: 0033:0x7f781a13d68e [ 380.332789][T14426] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.332806][T14426] RSP: 002b:00007f7818badfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.332827][T14426] RAX: ffffffffffffffda RBX: 00007f7818bae6c0 RCX: 00007f781a13d68e [ 380.332917][T14426] RDX: 000000000000000f RSI: 00007f7818bae0a0 RDI: 0000000000000008 [ 380.332930][T14426] RBP: 00007f7818bae090 R08: 0000000000000000 R09: 0000000000000000 [ 380.332943][T14426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.332956][T14426] R13: 00007f781a3f6128 R14: 00007f781a3f6090 R15: 00007ffd55d8a688 [ 380.332974][T14426] [ 380.515990][T14438] loop4: detected capacity change from 0 to 512 [ 380.538489][T14438] journal_path: Lookup failure for './file/file0/..//file0' [ 380.546344][T14438] EXT4-fs: error: could not find journal device path [ 381.522098][T14456] loop7: detected capacity change from 0 to 512 [ 381.644830][T14463] loop8: detected capacity change from 0 to 512 [ 381.727567][T14461] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3257'. [ 381.738438][T14461] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3257'. [ 381.764620][T14455] 9p: Could not find request transport: Fd [ 381.869468][T14456] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.882973][T14456] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.906353][ T8293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.044136][T14479] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 382.057783][T14481] loop8: detected capacity change from 0 to 128 [ 382.117459][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 382.117474][ T28] audit: type=1400 audit(1780637286.130:6562): avc: denied { listen } for pid=14478 comm="syz.1.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.199779][ T28] audit: type=1400 audit(1780637286.130:6563): avc: denied { getopt } for pid=14478 comm="syz.1.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.237625][T14491] FAULT_INJECTION: forcing a failure. [ 382.237625][T14491] name failslab, interval 1, probability 0, space 0, times 0 [ 382.253339][T14491] CPU: 0 UID: 0 PID: 14491 Comm: syz.8.3266 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 382.253454][T14491] Tainted: [W]=WARN [ 382.253460][T14491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 382.253471][T14491] Call Trace: [ 382.253477][T14491] [ 382.253486][T14491] __dump_stack+0x1d/0x30 [ 382.253509][T14491] dump_stack_lvl+0x95/0xd0 [ 382.253554][T14491] dump_stack+0x15/0x1b [ 382.253569][T14491] should_fail_ex+0x263/0x280 [ 382.253588][T14491] should_failslab+0x8c/0xb0 [ 382.253612][T14491] __kmalloc_cache_node_noprof+0x6b/0x470 [ 382.253719][T14491] ? page_pool_create_percpu+0x4d/0x690 [ 382.253741][T14491] page_pool_create_percpu+0x4d/0x690 [ 382.253764][T14491] page_pool_create+0x1a/0x30 [ 382.253803][T14491] bpf_test_run_xdp_live+0x1a8/0x1360 [ 382.253945][T14491] ? avc_has_perm+0x101/0x190 [ 382.253990][T14491] ? selinux_file_open+0x2e6/0x330 [ 382.254072][T14491] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 382.254104][T14491] ? _copy_from_user+0x89/0xb0 [ 382.254155][T14491] ? bpf_test_init+0xf4/0x130 [ 382.254220][T14491] bpf_prog_test_run_xdp+0x57b/0xa10 [ 382.254252][T14491] ? __rcu_read_unlock+0x4e/0x70 [ 382.254273][T14491] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 382.254323][T14491] bpf_prog_test_run+0x204/0x340 [ 382.254352][T14491] __sys_bpf+0x52e/0x7e0 [ 382.254402][T14491] __x64_sys_bpf+0x41/0x50 [ 382.254420][T14491] x64_sys_call+0x10cb/0x3020 [ 382.254440][T14491] do_syscall_64+0x12c/0x3b0 [ 382.254506][T14491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.254529][T14491] RIP: 0033:0x7ffbbba6ce59 [ 382.254547][T14491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.254563][T14491] RSP: 002b:00007ffbba4bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.254584][T14491] RAX: ffffffffffffffda RBX: 00007ffbbbce5fa0 RCX: 00007ffbbba6ce59 [ 382.254616][T14491] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 382.254737][T14491] RBP: 00007ffbba4bf090 R08: 0000000000000000 R09: 0000000000000000 [ 382.254748][T14491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.254759][T14491] R13: 00007ffbbbce6038 R14: 00007ffbbbce5fa0 R15: 00007fff830f8f28 [ 382.254786][T14491] [ 382.663220][T14505] tipc: Started in network mode [ 382.671767][T14505] tipc: Node identity e0000001, cluster identity 4711 [ 382.690750][T14505] tipc: Enabling of bearer rejected, failed to enable media [ 382.740237][T14520] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3279'. [ 382.824193][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3286'. [ 382.876114][ T28] audit: type=1400 audit(1780637286.890:6564): avc: denied { ioctl } for pid=14544 comm="syz.7.3291" path="socket:[45742]" dev="sockfs" ino=45742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 382.928669][T14551] sctp: [Deprecated]: syz.7.3291 (pid 14551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.928669][T14551] Use struct sctp_sack_info instead [ 382.956728][T14553] netlink: 'syz.2.3288': attribute type 3 has an invalid length. [ 382.990869][T14554] tipc: Enabled bearer , priority 0 [ 382.999225][T14556] syzkaller0: entered promiscuous mode [ 383.005131][T14556] syzkaller0: entered allmulticast mode [ 383.014821][T14554] tipc: Disabling bearer [ 383.048952][T14558] syzkaller0: entered promiscuous mode [ 383.059766][T14558] syzkaller0: entered allmulticast mode [ 383.140758][T14570] tipc: Started in network mode [ 383.145922][T14570] tipc: Node identity e250c3ce49e9, cluster identity 4711 [ 383.153904][T14570] tipc: Enabled bearer , priority 0 [ 383.183415][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3301'. [ 383.205609][T14570] syzkaller0: entered promiscuous mode [ 383.212793][T14570] syzkaller0: entered allmulticast mode [ 383.220488][T14570] tipc: Resetting bearer [ 383.226695][T14572] syz_tun: entered allmulticast mode [ 383.243062][T14569] tipc: Resetting bearer [ 383.283063][T14569] tipc: Disabling bearer [ 383.294371][T14540] Set syz1 is full, maxelem 65536 reached [ 383.543955][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 383.588140][ T28] audit: type=1400 audit(1780637287.600:6565): avc: denied { node_bind } for pid=14611 comm="syz.8.3316" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 383.665261][ T28] audit: type=1400 audit(1780637287.680:6566): avc: denied { create } for pid=14595 comm="syz.4.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 383.721842][T14616] lo speed is unknown, defaulting to 1000 [ 383.726834][T14623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3319'. [ 383.747387][T14631] netlink: 192 bytes leftover after parsing attributes in process `syz.8.3317'. [ 383.781313][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3317'. [ 384.026691][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 384.045579][T14666] netlink: 'syz.1.3336': attribute type 14 has an invalid length. [ 384.055104][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3336'. [ 384.062660][T14667] syzkaller0: entered promiscuous mode [ 384.069519][T14667] syzkaller0: entered allmulticast mode [ 384.077847][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3336'. [ 384.087349][T14666] netlink: 'syz.1.3336': attribute type 14 has an invalid length. [ 384.334925][T14691] syzkaller0: entered promiscuous mode [ 384.341786][T14691] syzkaller0: entered allmulticast mode [ 384.624221][T14737] syzkaller1: entered allmulticast mode [ 384.660557][T14742] syz_tun: entered allmulticast mode [ 384.695247][T14747] netlink: 'syz.2.3367': attribute type 7 has an invalid length. [ 384.712787][T14747] netlink: 'syz.2.3367': attribute type 7 has an invalid length. [ 384.754872][T14750] syzkaller0: entered promiscuous mode [ 384.764885][T14750] syzkaller0: entered allmulticast mode [ 384.862140][T14764] sch_tbf: burst 46 is lower than device syzkaller0 mtu (1514) ! [ 384.882286][T14764] syzkaller0: entered promiscuous mode [ 384.893444][T14764] syzkaller0: entered allmulticast mode [ 384.944339][T14771] syzkaller0: entered promiscuous mode [ 384.953159][T14771] syzkaller0: entered allmulticast mode [ 384.968008][T14771] tipc: Started in network mode [ 384.985965][T14771] tipc: Node identity 5e2c6ac53432, cluster identity 4711 [ 385.003997][T14771] tipc: Enabled bearer , priority 0 [ 385.018682][T14770] tipc: Resetting bearer [ 385.034040][T14770] tipc: Disabling bearer [ 385.054470][ T28] audit: type=1400 audit(1780637289.070:6567): avc: denied { read } for pid=14781 comm="syz.7.3382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 385.335102][ T28] audit: type=1400 audit(1780637289.350:6568): avc: denied { connect } for pid=14817 comm="syz.8.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 385.401957][T14835] netlink: 'syz.8.3401': attribute type 4 has an invalid length. [ 385.449263][T14842] syzkaller0: entered promiscuous mode [ 385.455002][T14842] syzkaller0: entered allmulticast mode [ 385.915620][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811eccd200: rx timeout, send abort [ 386.249211][T14847] syzkaller1: entered promiscuous mode [ 386.254785][T14847] syzkaller1: entered allmulticast mode [ 386.415669][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b64da00: rx timeout, send abort [ 386.423925][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811eccd200: abort rx timeout. Force session deactivation [ 386.508323][T14856] xt_hashlimit: size too large, truncated to 1048576 [ 386.923892][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b64da00: abort rx timeout. Force session deactivation [ 388.126913][T14789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.205692][T14878] 0: reclassify loop, rule prio 0, protocol 700 [ 388.289796][T14888] syzkaller0: entered promiscuous mode [ 388.295420][T14888] syzkaller0: entered allmulticast mode [ 388.315499][T14894] tipc: Enabled bearer , priority 0 [ 388.324453][T14888] tipc: Resetting bearer [ 388.336446][T14887] tipc: Resetting bearer [ 388.353270][T14887] tipc: Disabling bearer [ 388.365751][T14899] tipc: Cannot configure node identity twice [ 388.453360][T14911] __nla_validate_parse: 5 callbacks suppressed [ 388.453373][T14911] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3431'. [ 388.507256][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3436'. [ 389.295099][T14913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.383746][T14944] syzkaller0: mtu less than device minimum [ 389.396629][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3445'. [ 389.440801][T14958] syzkaller0: entered promiscuous mode [ 389.450410][T14958] syzkaller0: entered allmulticast mode [ 389.465035][T14960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3450'. [ 389.560718][T14969] syzkaller0: entered promiscuous mode [ 389.566475][T14969] syzkaller0: entered allmulticast mode [ 389.967175][T14992] 0: reclassify loop, rule prio 0, protocol 700 [ 390.104299][T14994] syzkaller0: entered promiscuous mode [ 390.109833][T14994] syzkaller0: entered allmulticast mode [ 390.439460][T15009] netlink: 'syz.1.3470': attribute type 7 has an invalid length. [ 390.464973][T15009] netlink: 'syz.1.3470': attribute type 27 has an invalid length. [ 390.683959][T15010] rdma_rxe: rxe_newlink: failed to add lo [ 390.960626][T15020] syzkaller0: entered promiscuous mode [ 390.992654][T15020] syzkaller0: entered allmulticast mode [ 391.062443][T15025] tipc: Enabled bearer , priority 0 [ 391.498319][T15025] syzkaller0: entered promiscuous mode [ 391.555333][T15025] syzkaller0: entered allmulticast mode [ 391.598266][T15025] tipc: Resetting bearer [ 391.632988][T10142] tipc: Resetting bearer [ 391.662983][T15023] tipc: Resetting bearer [ 391.714916][T15023] tipc: Disabling bearer [ 391.834542][T15056] syzkaller0: entered promiscuous mode [ 391.868341][T15056] syzkaller0: entered allmulticast mode [ 392.232883][T15081] loop8: detected capacity change from 0 to 1764 [ 392.382663][T15086] netlink: 'syz.4.3499': attribute type 3 has an invalid length. [ 392.424183][T15094] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3502'. [ 392.441806][T15094] syzkaller1: entered promiscuous mode [ 392.449203][T15094] syzkaller1: entered allmulticast mode [ 392.713726][T15127] netlink: 'syz.1.3515': attribute type 3 has an invalid length. [ 393.568920][T15165] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3525'. [ 393.599053][T15158] syzkaller0: entered promiscuous mode [ 393.604604][T15158] syzkaller0: entered allmulticast mode [ 393.718945][T15177] syzkaller0: entered promiscuous mode [ 393.725866][T15177] syzkaller0: entered allmulticast mode [ 393.784159][T15171] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3529'. [ 393.820194][T15187] loop7: detected capacity change from 0 to 512 [ 393.854000][T15187] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.880980][T15187] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.903058][T15188] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.908292][ T28] audit: type=1400 audit(1780637297.920:6569): avc: denied { getopt } for pid=15195 comm="syz.8.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 393.996434][T15187] SELinux: failed to load policy [ 394.036094][ T8293] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.075207][T15225] syzkaller0: entered promiscuous mode [ 394.091550][T15225] syzkaller0: entered allmulticast mode [ 394.225435][T15245] syzkaller1: entered promiscuous mode [ 394.231731][T15245] syzkaller1: entered allmulticast mode [ 394.396323][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3554'. [ 394.424091][T15257] loop4: detected capacity change from 0 to 764 [ 394.431125][T15257] iso9660: Unknown parameter 'ÿ0x0000000000000000' [ 394.622648][T15265] netlink: 'syz.1.3565': attribute type 4 has an invalid length. [ 396.368519][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3570'. [ 396.390902][T15280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3570'. [ 396.415033][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3570'. [ 396.424314][T15282] syzkaller1: entered promiscuous mode [ 396.428682][T15280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3570'. [ 396.430164][T15282] syzkaller1: entered allmulticast mode [ 396.446014][T10145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.458876][T10145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.474314][T10142] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.496664][T10142] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.507009][T15285] netlink: 'syz.8.3569': attribute type 3 has an invalid length. [ 396.554276][T15286] syzkaller0: entered promiscuous mode [ 396.565332][T15286] syzkaller0: entered allmulticast mode [ 396.665617][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3583'. [ 396.725390][T15311] lo speed is unknown, defaulting to 1000 [ 396.745360][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'. [ 396.768007][T15314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3585'. [ 396.837832][ T28] audit: type=1400 audit(1780637300.850:6570): avc: denied { ioctl } for pid=15324 comm="syz.7.3589" path="socket:[47068]" dev="sockfs" ino=47068 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 396.882225][T15281] Set syz1 is full, maxelem 65536 reached [ 396.928956][ T28] audit: type=1400 audit(1780637300.930:6571): avc: denied { ioctl } for pid=15332 comm="syz.1.3592" path="cgroup:[4026532382]" dev="nsfs" ino=4026532382 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 397.200359][T15355] syz_tun: left allmulticast mode [ 397.205421][T15355] syz_tun: left promiscuous mode [ 397.210636][T15355] bridge0: port 3(syz_tun) entered disabled state [ 397.226795][T15355] bridge_slave_0: left allmulticast mode [ 397.232484][T15355] bridge_slave_0: left promiscuous mode [ 397.238208][T15355] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.249956][T15355] bridge_slave_1: left allmulticast mode [ 397.257528][T15355] bridge_slave_1: left promiscuous mode [ 397.263658][T15355] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.274551][T15355] bond0: (slave bond_slave_0): Releasing backup interface [ 397.290878][T15355] bond0: (slave bond_slave_1): Releasing backup interface [ 397.313436][T15355] team0: Port device team_slave_0 removed [ 397.328119][T15355] team0: Port device team_slave_1 removed [ 397.335407][T15355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.343120][T15355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.353704][T15355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.361513][T15355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.370686][T15355] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 399.648006][T15473] __nla_validate_parse: 4 callbacks suppressed [ 399.648018][T15473] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3646'. [ 399.763953][T15319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 399.827692][T15486] syzkaller0: entered promiscuous mode [ 399.833577][T15486] syzkaller0: entered allmulticast mode [ 400.211599][T15566] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3686'. [ 400.224460][T15566] syzkaller1: entered promiscuous mode [ 400.230061][T15566] syzkaller1: entered allmulticast mode [ 400.266338][T15576] syzkaller1: entered promiscuous mode [ 400.272110][T15576] syzkaller1: entered allmulticast mode [ 400.311706][ T28] audit: type=1400 audit(1780637304.330:6572): avc: denied { accept } for pid=15579 comm="syz.7.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.368086][T15584] syzkaller0: entered promiscuous mode [ 400.373947][T15584] syzkaller0: entered allmulticast mode [ 400.383357][T15584] tipc: Enabled bearer , priority 0 [ 400.395804][T15583] tipc: Resetting bearer [ 400.419503][T15583] tipc: Disabling bearer [ 400.433564][T15597] syzkaller0: entered promiscuous mode [ 400.449451][T15597] syzkaller0: entered allmulticast mode [ 400.495808][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3705'. [ 400.506061][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3705'. [ 400.565724][T15615] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3708'. [ 400.586173][T15615] syzkaller1: entered promiscuous mode [ 400.592136][T15615] syzkaller1: entered allmulticast mode [ 400.787068][T15642] syzkaller0: entered promiscuous mode [ 400.792695][T15642] syzkaller0: entered allmulticast mode [ 400.929966][T15668] syzkaller0: entered promiscuous mode [ 400.935520][T15668] syzkaller0: entered allmulticast mode [ 400.942234][ T28] audit: type=1400 audit(1780637304.950:6573): avc: denied { getopt } for pid=15671 comm="syz.4.3729" lport=53998 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 401.012751][ T28] audit: type=1400 audit(1780637305.030:6574): avc: denied { bind } for pid=15681 comm="syz.4.3733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 401.198596][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3747'. [ 401.208651][T15715] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3747'. [ 401.233212][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3747'. [ 401.234154][ T7874] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.242137][T15715] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3747'. [ 401.257868][ T7874] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.271742][ T7874] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.282048][T10145] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.641580][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3775'. [ 401.664870][T15787] netlink: 'syz.1.3770': attribute type 3 has an invalid length. [ 401.871104][T15831] syzkaller1: entered promiscuous mode [ 401.881090][T15831] syzkaller1: entered allmulticast mode [ 402.021131][T15778] Set syz1 is full, maxelem 65536 reached [ 402.188749][T15874] syzkaller0: entered promiscuous mode [ 402.194348][T15874] syzkaller0: entered allmulticast mode [ 402.428097][T15891] netlink: 'syz.2.3811': attribute type 3 has an invalid length. [ 402.608454][T15892] syzkaller0: entered promiscuous mode [ 402.615100][T15892] syzkaller0: entered allmulticast mode [ 403.164470][T15966] syzkaller0: entered promiscuous mode [ 403.171696][T15966] syzkaller0: entered allmulticast mode [ 403.397231][T15888] Set syz1 is full, maxelem 65536 reached [ 403.529903][T16005] syzkaller0: entered promiscuous mode [ 403.535556][T16005] syzkaller0: entered allmulticast mode [ 403.708372][T16030] netlink: 'syz.7.3869': attribute type 3 has an invalid length. [ 404.082808][T16044] syz_tun: entered allmulticast mode [ 404.094852][T16041] syz_tun: left allmulticast mode [ 404.121851][T16048] syzkaller0: entered promiscuous mode [ 404.127630][T16048] syzkaller0: entered allmulticast mode [ 404.238770][T16064] syz_tun: entered allmulticast mode [ 404.363746][T16070] lo: Caught tx_queue_len zero misconfig [ 404.480326][T16088] netlink: 'syz.7.3895': attribute type 3 has an invalid length. [ 404.961410][T16125] __nla_validate_parse: 23 callbacks suppressed [ 404.961445][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3911'. [ 405.172758][T16155] syz_tun: entered allmulticast mode [ 405.179143][T16154] syz_tun: left allmulticast mode [ 405.198796][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3925'. [ 405.208602][T16157] syz_tun: entered allmulticast mode [ 405.263312][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 405.278583][T16165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3930'. [ 405.316272][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 405.317124][T10145] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.338004][T16165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3930'. [ 405.349530][T10145] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.358660][T10145] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.368869][T10145] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.433824][T16182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15720 sclass=netlink_route_socket pid=16182 comm=syz.7.3937 [ 405.470168][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3938'. [ 405.483989][ T28] audit: type=1400 audit(1780637309.500:6575): avc: denied { bind } for pid=16166 comm="syz.8.3929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 405.683512][T16196] syzkaller0: entered promiscuous mode [ 405.689086][T16196] syzkaller0: entered allmulticast mode [ 405.796740][T16204] syz_tun: entered allmulticast mode [ 405.803846][T16202] syz_tun: left allmulticast mode [ 405.867429][T16218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15720 sclass=netlink_route_socket pid=16218 comm=syz.2.3952 [ 405.999278][T16243] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3962'. [ 406.078696][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3968'. [ 406.112781][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3969'. [ 406.140443][T16262] syzkaller0: entered promiscuous mode [ 406.146048][T16262] syzkaller0: entered allmulticast mode [ 406.896591][T16356] syzkaller0: entered promiscuous mode [ 406.902371][T16356] syzkaller0: entered allmulticast mode [ 406.902691][T16360] netlink: 'syz.2.4013': attribute type 7 has an invalid length. [ 406.914880][T16358] netlink: 'syz.1.4012': attribute type 3 has an invalid length. [ 406.946222][T16360] netlink: 'syz.2.4013': attribute type 7 has an invalid length. [ 407.092635][T16391] netlink: 'syz.1.4026': attribute type 3 has an invalid length. [ 407.101921][T16388] syzkaller1: entered promiscuous mode [ 407.113936][T16388] syzkaller1: entered allmulticast mode [ 407.168821][T16400] syzkaller0: entered promiscuous mode [ 407.174585][T16400] syzkaller0: entered allmulticast mode [ 407.351112][T16425] netlink: 'syz.8.4040': attribute type 3 has an invalid length. [ 407.402730][T16440] syzkaller0: entered promiscuous mode [ 407.408287][T16440] syzkaller0: entered allmulticast mode [ 407.500118][T16452] ip6_vti0: Caught tx_queue_len zero misconfig [ 408.772655][T16604] syzkaller1: entered promiscuous mode [ 408.779578][T16604] syzkaller1: entered allmulticast mode [ 408.994443][T16637] syzkaller1: entered promiscuous mode [ 409.000036][T16637] syzkaller1: entered allmulticast mode [ 409.113111][T16650] syzkaller0: entered promiscuous mode [ 409.118706][T16650] syzkaller0: entered allmulticast mode [ 409.545067][T16690] syzkaller0: entered promiscuous mode [ 409.550635][T16690] syzkaller0: entered allmulticast mode [ 409.679187][T16703] syzkaller0: entered promiscuous mode [ 409.684806][T16703] syzkaller0: entered allmulticast mode [ 409.993428][T16743] __nla_validate_parse: 41 callbacks suppressed [ 409.993445][T16743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4159'. [ 410.009335][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4159'. [ 410.249470][T16781] syzkaller0: entered promiscuous mode [ 410.255075][T16781] syzkaller0: entered allmulticast mode [ 410.389210][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4175'. [ 410.398353][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4175'. [ 410.555499][T16808] syzkaller1: entered promiscuous mode [ 410.561161][T16808] syzkaller1: entered allmulticast mode [ 410.637212][T16810] syzkaller0: entered promiscuous mode [ 410.642754][T16810] syzkaller0: entered allmulticast mode [ 410.713722][T16812] syzkaller1: entered promiscuous mode [ 410.719627][T16812] syzkaller1: entered allmulticast mode [ 410.751756][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4187'. [ 410.761027][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4187'. [ 411.086993][T16850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4200'. [ 411.711453][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4202'. [ 411.731507][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4202'. [ 411.743537][T16858] syzkaller0: entered promiscuous mode [ 411.759239][T16863] netlink: 860 bytes leftover after parsing attributes in process `syz.4.4205'. [ 411.759716][T16858] syzkaller0: entered allmulticast mode [ 411.792922][T16868] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 411.930757][T16875] syzkaller0: entered promiscuous mode [ 411.947974][T16875] syzkaller0: entered allmulticast mode [ 412.059332][T16906] x_tables: duplicate underflow at hook 2 [ 412.126339][T16917] netlink: 'syz.8.4222': attribute type 13 has an invalid length. [ 412.192580][ T28] audit: type=1400 audit(1780637316.210:6576): avc: denied { accept } for pid=16916 comm="syz.8.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 412.514179][T16942] syzkaller0: entered promiscuous mode [ 412.519760][T16942] syzkaller0: entered allmulticast mode [ 412.529091][T10145] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.538284][T10145] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.553607][T10145] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.569619][T10145] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.602645][T10145] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.617490][T10145] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.629627][T10145] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.638747][T10145] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.711831][T16959] syzkaller0: entered promiscuous mode [ 412.717666][T16959] syzkaller0: entered allmulticast mode [ 413.372025][T17039] netlink: 'syz.4.4264': attribute type 4 has an invalid length. [ 413.962152][T17082] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.962200][T17076] syzkaller0: entered promiscuous mode [ 413.976909][T17076] syzkaller0: entered allmulticast mode [ 414.331857][T17122] syzkaller0: entered promiscuous mode [ 414.337571][T17122] syzkaller0: entered allmulticast mode [ 414.471281][T17129] syzkaller0: entered promiscuous mode [ 414.476833][T17129] syzkaller0: entered allmulticast mode [ 414.564556][T17133] syzkaller0: entered promiscuous mode [ 414.570146][T17133] syzkaller0: entered allmulticast mode [ 414.693743][T17150] syzkaller0: entered promiscuous mode [ 414.699392][T17150] syzkaller0: entered allmulticast mode [ 414.903849][T17175] syzkaller0: entered promiscuous mode [ 414.909365][T17175] syzkaller0: entered allmulticast mode [ 415.220929][T17211] syzkaller0: entered promiscuous mode [ 415.226749][T17211] syzkaller0: entered allmulticast mode [ 415.316936][T17232] __nla_validate_parse: 14 callbacks suppressed [ 415.317009][T17232] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4338'. [ 415.501528][T17255] lo speed is unknown, defaulting to 1000 [ 416.266207][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4352'. [ 416.456559][T17283] syzkaller0: entered promiscuous mode [ 416.469906][T17283] syzkaller0: entered allmulticast mode [ 417.518075][T17351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4386'. [ 417.852377][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4399'. [ 417.924641][T17399] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4406'. [ 417.940856][T17401] syzkaller1: entered promiscuous mode [ 417.946414][T17401] syzkaller1: entered allmulticast mode [ 418.146242][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4412'. [ 418.188972][T17420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4416'. [ 418.215075][T17422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4417'. [ 418.287813][T17436] netlink: 'syz.8.4421': attribute type 3 has an invalid length. [ 418.423681][T17451] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4426'. [ 418.555395][T17461] syzkaller1: entered promiscuous mode [ 418.570278][T17461] syzkaller1: entered allmulticast mode [ 418.631663][T17481] netlink: 'syz.2.4439': attribute type 3 has an invalid length. [ 418.709053][T17487] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 418.738577][T17492] syzkaller0: entered promiscuous mode [ 418.744333][T17492] syzkaller0: entered allmulticast mode [ 419.028289][T17500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17500 comm=syz.4.4447 [ 419.241058][T17510] syzkaller1: entered promiscuous mode [ 419.246732][T17510] syzkaller1: entered allmulticast mode [ 419.958671][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4455'. [ 420.055692][ T9518] IPVS: starting estimator thread 0... [ 420.068471][T17546] netlink: 'syz.7.4464': attribute type 30 has an invalid length. [ 420.112143][T17543] syzkaller0: entered promiscuous mode [ 420.118247][T17543] syzkaller0: entered allmulticast mode [ 420.159743][T17547] IPVS: using max 2592 ests per chain, 129600 per kthread [ 420.203165][T17568] syzkaller1: entered promiscuous mode [ 420.208682][T17568] syzkaller1: entered allmulticast mode [ 420.284596][T17570] syzkaller0: entered promiscuous mode [ 420.290145][T17570] syzkaller0: entered allmulticast mode [ 420.322914][T17572] syzkaller0: entered promiscuous mode [ 420.328519][T17572] syzkaller0: entered allmulticast mode [ 420.536913][ T8293] syz_tun (unregistering): left allmulticast mode [ 420.620102][T17600] lo speed is unknown, defaulting to 1000 [ 420.699597][T17620] __nla_validate_parse: 1 callbacks suppressed [ 420.699609][T17620] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4483'. [ 420.715552][T17620] syzkaller1: entered promiscuous mode [ 420.721362][T17620] syzkaller1: entered allmulticast mode [ 420.765667][T17600] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.772972][T17600] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.780216][T17600] bridge_slave_0: entered allmulticast mode [ 420.786596][T17600] bridge_slave_0: entered promiscuous mode [ 420.793385][T17600] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.800552][T17600] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.807679][T17600] bridge_slave_1: entered allmulticast mode [ 420.814245][T17600] bridge_slave_1: entered promiscuous mode [ 420.830608][T17600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.841215][T17600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.859216][T17600] team0: Port device team_slave_0 added [ 420.865729][T17600] team0: Port device team_slave_1 added [ 420.884175][T17600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.891156][T17600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.920281][T17600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.933156][T17600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.940298][T17600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.966313][T17600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.026984][T17629] syzkaller0: entered promiscuous mode [ 421.032566][T17629] syzkaller0: entered allmulticast mode [ 421.052636][T17600] hsr_slave_0: entered promiscuous mode [ 421.058642][T17600] hsr_slave_1: entered promiscuous mode [ 421.064866][T17600] debugfs: 'hsr0' already exists in 'hsr' [ 421.072693][T17600] Cannot create hsr debugfs directory [ 422.095973][T17600] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.194739][T17681] syzkaller0: entered promiscuous mode [ 422.200383][T17681] syzkaller0: entered allmulticast mode [ 423.027715][T17600] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.069593][T17702] netlink: 860 bytes leftover after parsing attributes in process `syz.8.4507'. [ 423.150400][T17600] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.182232][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4513'. [ 423.346883][T17600] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.403090][T17725] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 423.447786][T17600] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 423.468003][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.477727][T17600] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 423.494868][T17738] netlink: 860 bytes leftover after parsing attributes in process `syz.1.4522'. [ 423.506176][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.523234][T17600] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 423.535134][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.547551][T17741] syzkaller0: entered promiscuous mode [ 423.553520][T17741] syzkaller0: entered allmulticast mode [ 423.563752][T17600] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 423.571310][T17744] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4526'. [ 423.582122][T17600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.604631][T17744] syzkaller1: entered promiscuous mode [ 423.610365][T17744] syzkaller1: entered allmulticast mode [ 423.657810][T17600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.670841][T17600] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.680295][T10142] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.687363][T10142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.698829][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.705949][ T7874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.887166][T17600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.950773][T17807] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4541'. [ 423.965851][T17807] syzkaller1: entered promiscuous mode [ 423.972449][T17807] syzkaller1: entered allmulticast mode [ 424.084806][T17600] veth0_vlan: entered promiscuous mode [ 424.094294][T17600] veth1_vlan: entered promiscuous mode [ 424.114173][T17600] veth0_macvtap: entered promiscuous mode [ 424.121087][T17834] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4547'. [ 424.133090][T17600] veth1_macvtap: entered promiscuous mode [ 424.134046][T17834] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4547'. [ 424.145041][T17600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.160180][T17600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.174753][T10147] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.183833][T10147] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.193791][T10147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.202948][T10147] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.285004][T17849] netlink: 'syz.7.4480': attribute type 3 has an invalid length. [ 424.297404][T17847] lo speed is unknown, defaulting to 1000 [ 424.387622][T17855] syzkaller0: entered promiscuous mode [ 424.393208][T17855] syzkaller0: entered allmulticast mode [ 424.407785][T17855] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4552'. [ 424.646034][T17862] syzkaller0: entered promiscuous mode [ 424.651569][T17862] syzkaller0: entered allmulticast mode [ 424.754885][T17864] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4556'. [ 424.765117][T17864] syzkaller1: entered promiscuous mode [ 424.770611][T17864] syzkaller1: entered allmulticast mode [ 424.906521][ T28] audit: type=1400 audit(1780637328.920:6577): avc: denied { shutdown } for pid=17865 comm="syz.1.4557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 424.955332][T17872] lo: entered allmulticast mode [ 424.960367][T17872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.001732][T17876] netlink: 'syz.2.4561': attribute type 3 has an invalid length. [ 425.312202][T17908] syzkaller0: entered promiscuous mode [ 425.317797][T17908] syzkaller0: entered allmulticast mode [ 425.491339][T17925] syzkaller1: entered promiscuous mode [ 425.497267][T17925] syzkaller1: entered allmulticast mode [ 425.717327][T17936] netlink: 'syz.1.4587': attribute type 3 has an invalid length. [ 425.759701][T17934] netlink: 'syz.8.4584': attribute type 1 has an invalid length. [ 425.769873][T17934] netlink: 'syz.8.4584': attribute type 2 has an invalid length. [ 425.882321][T17951] syzkaller0: entered promiscuous mode [ 425.888010][T17951] syzkaller0: entered allmulticast mode [ 425.978914][T17963] __nla_validate_parse: 5 callbacks suppressed [ 425.979005][T17963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4598'. [ 426.005145][T17959] syzkaller0: entered promiscuous mode [ 426.011003][T17959] syzkaller0: entered allmulticast mode [ 426.141659][T17977] netlink: 'syz.7.4599': attribute type 3 has an invalid length. [ 426.150870][T17976] syzkaller0: entered promiscuous mode [ 426.176547][T17976] syzkaller0: entered allmulticast mode [ 426.253613][T17994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4611'. [ 426.323243][T18007] syz_tun: entered allmulticast mode [ 426.392242][T18015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4621'. [ 426.408156][T18009] syzkaller0: entered promiscuous mode [ 426.413973][T18015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4621'. [ 426.422976][T18009] syzkaller0: entered allmulticast mode [ 426.506179][T17965] Set syz1 is full, maxelem 65536 reached [ 426.552957][T18026] syzkaller0: entered promiscuous mode [ 426.570552][T18026] syzkaller0: entered allmulticast mode [ 426.583628][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4627'. [ 426.652401][T18039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4632'. [ 426.662251][T18039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4632'. [ 426.719162][T18046] syz_tun: entered allmulticast mode [ 426.741812][T18043] syz_tun: left allmulticast mode [ 426.768466][T18058] netlink: 'syz.7.4639': attribute type 3 has an invalid length. [ 426.776547][T18058] netlink: 666 bytes leftover after parsing attributes in process `syz.7.4639'. [ 426.799308][T18061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4640'. [ 426.838493][T18069] syzkaller0: entered promiscuous mode [ 426.844387][T18069] syzkaller0: entered allmulticast mode [ 427.032303][T18088] netlink: 'syz.1.4653': attribute type 1 has an invalid length. [ 427.040754][T18088] netlink: 'syz.1.4653': attribute type 2 has an invalid length. [ 427.048628][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4653'. [ 427.181762][T18108] syzkaller0: entered promiscuous mode [ 427.187458][T18108] syzkaller0: entered allmulticast mode [ 427.366261][T18132] xt_hashlimit: size too large, truncated to 1048576 [ 427.510513][T18148] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 427.518198][T18148] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 427.534264][T18150] syzkaller0: entered promiscuous mode [ 427.539971][T18150] syzkaller0: entered allmulticast mode [ 427.627241][T18164] syzkaller1: entered promiscuous mode [ 427.633012][T18164] syzkaller1: entered allmulticast mode [ 427.839228][T18184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 427.846659][T18184] IPv6: NLM_F_CREATE should be set when creating new route [ 427.937982][T10142] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.954171][T10142] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.974043][T10142] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.983942][T10142] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.998176][T10142] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.007627][T10142] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.016700][T10142] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.025713][T10142] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.220870][T18234] syzkaller0: entered promiscuous mode [ 428.226524][T18234] syzkaller0: entered allmulticast mode [ 428.375627][T18248] bridge_slave_0: invalid flags given to default FDB implementation [ 428.532770][T18272] syzkaller0: entered promiscuous mode [ 428.538348][T18272] syzkaller0: entered allmulticast mode [ 428.585014][ T28] audit: type=1400 audit(1780637332.600:6578): avc: denied { bind } for pid=18282 comm="syz.4.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 428.600324][T18285] lo speed is unknown, defaulting to 1000 [ 428.635903][T18286] netlink: 'syz.4.4729': attribute type 7 has an invalid length. [ 428.654560][ T28] audit: type=1400 audit(1780637332.670:6579): avc: denied { setopt } for pid=18282 comm="syz.4.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 428.736554][ T28] audit: type=1400 audit(1780637332.750:6580): avc: denied { bind } for pid=18302 comm="syz.8.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 429.508901][T18291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 429.850210][T18357] syzkaller0: entered promiscuous mode [ 429.855729][T18357] syzkaller0: entered allmulticast mode [ 431.703739][T18514] __nla_validate_parse: 12 callbacks suppressed [ 431.703756][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4777'. [ 431.755427][T18524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4782'. [ 431.769279][T18524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4782'. [ 431.793674][T18532] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4784'. [ 431.837324][T18525] syzkaller0: entered promiscuous mode [ 431.844058][T18525] syzkaller0: entered allmulticast mode [ 431.856707][T18541] syzkaller0: entered promiscuous mode [ 431.862573][T18541] syzkaller0: entered allmulticast mode [ 431.904125][T18550] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18550 comm=syz.2.4791 [ 431.948881][T18561] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4795'. [ 431.949734][T18559] syzkaller0: entered promiscuous mode [ 431.958088][T18561] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4795'. [ 431.963566][T18559] syzkaller0: entered allmulticast mode [ 431.981332][T18562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5129 sclass=netlink_tcpdiag_socket pid=18562 comm=syz.2.4791 [ 432.060176][T18568] syzkaller0: entered promiscuous mode [ 432.065844][T18568] syzkaller0: entered allmulticast mode [ 432.187761][T18576] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4802'. [ 432.199672][T18576] syzkaller1: entered promiscuous mode [ 432.205338][T18576] syzkaller1: entered allmulticast mode [ 432.292769][T18588] syzkaller0: entered promiscuous mode [ 432.298247][T18588] syzkaller0: entered allmulticast mode [ 432.512098][T18594] syzkaller0: entered promiscuous mode [ 432.517600][T18594] syzkaller0: entered allmulticast mode [ 432.524122][T18596] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4810'. [ 432.689491][T18604] syzkaller0: entered promiscuous mode [ 432.700568][T18604] syzkaller0: entered allmulticast mode [ 432.743763][T18616] validate_nla: 1 callbacks suppressed [ 432.743777][T18616] netlink: 'syz.4.4818': attribute type 3 has an invalid length. [ 433.022409][T18655] syzkaller0: entered promiscuous mode [ 433.028208][T18655] syzkaller0: entered allmulticast mode [ 433.136630][T18667] syzkaller0: entered promiscuous mode [ 433.144207][T18667] syzkaller0: entered allmulticast mode [ 433.337819][T18705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4857'. [ 433.424531][T18707] syzkaller0: entered promiscuous mode [ 433.430248][T18707] syzkaller0: entered allmulticast mode [ 433.529943][T18718] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4861'. [ 433.669544][T18732] syzkaller0: entered promiscuous mode [ 433.675536][T18732] syzkaller0: entered allmulticast mode [ 434.167531][T18805] syzkaller1: entered promiscuous mode [ 434.173121][T18805] syzkaller1: entered allmulticast mode [ 434.569227][T18832] syzkaller1: entered promiscuous mode [ 434.574824][T18832] syzkaller1: entered allmulticast mode [ 434.900281][T18860] syzkaller0: entered promiscuous mode [ 434.906018][T18860] syzkaller0: entered allmulticast mode [ 435.719476][T18870] syzkaller0: entered promiscuous mode [ 435.725313][T18870] syzkaller0: entered allmulticast mode [ 435.741477][T18885] syzkaller1: entered promiscuous mode [ 435.751049][T18885] syzkaller1: entered allmulticast mode [ 435.784517][T18888] netlink: 'syz.8.4927': attribute type 3 has an invalid length. [ 436.768734][T18927] netlink: 'syz.8.4943': attribute type 3 has an invalid length. [ 436.772340][T18933] __nla_validate_parse: 6 callbacks suppressed [ 436.772356][T18933] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4945'. [ 436.794408][T18929] syzkaller0: entered promiscuous mode [ 436.802753][T18929] syzkaller0: entered allmulticast mode [ 437.633440][T18943] syzkaller1: entered promiscuous mode [ 437.646847][T18943] syzkaller1: entered allmulticast mode [ 437.823500][T18982] syzkaller1: entered promiscuous mode [ 437.834154][T18982] syzkaller1: entered allmulticast mode [ 438.182860][T19002] syzkaller1: entered promiscuous mode [ 438.198959][T19002] syzkaller1: entered allmulticast mode [ 438.421044][T19031] syzkaller0: entered promiscuous mode [ 438.426599][T19031] syzkaller0: entered allmulticast mode [ 438.592976][T19066] syzkaller1: entered promiscuous mode [ 438.606016][T19066] syzkaller1: entered allmulticast mode [ 438.638260][T19075] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5001'. [ 438.647397][T19075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.755792][T19095] batman_adv: batadv0: Adding interface: dummy0 [ 438.762229][T19095] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.788090][T19095] batman_adv: batadv0: Interface activated: dummy0 [ 438.799487][T19095] batadv0: mtu less than device minimum [ 438.805728][T19095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.816782][T19095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.827635][T19095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.838543][T19095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.849650][T19095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.860425][T19095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.871193][T19095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.882050][T19095] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 438.928644][T19100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.936955][T19100] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.943273][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5013'. [ 438.947474][T19100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.979453][T19100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 438.989905][T19100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.002105][T19100] veth1_vlan: left promiscuous mode [ 439.007800][T19100] veth0_vlan: left promiscuous mode [ 439.013458][T19100] veth0_vlan: entered promiscuous mode [ 439.021464][T19100] veth1_vlan: entered promiscuous mode [ 439.030955][T19100] veth1_macvtap: left promiscuous mode [ 439.039913][T19100] veth0_macvtap: left promiscuous mode [ 439.046032][T19100] veth0_macvtap: entered promiscuous mode [ 439.057252][T19100] veth1_macvtap: entered promiscuous mode [ 439.066290][T19100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.074477][T19100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.082756][T19100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.091103][T19100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.203430][T10141] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.212311][T10141] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.222117][T10141] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.231140][T10141] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.278634][T19112] syzkaller0: entered promiscuous mode [ 439.284199][T19112] syzkaller0: entered allmulticast mode [ 439.290754][T10147] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.299503][T10147] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.308397][T10147] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.317133][T10147] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.561899][T19138] syzkaller0: entered promiscuous mode [ 439.567455][T19138] syzkaller0: entered allmulticast mode [ 439.742989][T19147] syzkaller0: entered promiscuous mode [ 439.748600][T19147] syzkaller0: entered allmulticast mode [ 440.059545][T19157] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5033'. [ 440.138259][T19165] syzkaller0: entered promiscuous mode [ 440.143840][T19165] syzkaller0: entered allmulticast mode [ 440.355818][T19174] syzkaller0: entered promiscuous mode [ 440.361328][T19174] syzkaller0: entered allmulticast mode [ 441.316662][T19178] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5042'. [ 441.574846][T19061] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.681583][T19190] syzkaller0: entered promiscuous mode [ 441.691553][T19190] syzkaller0: entered allmulticast mode [ 442.593787][T19277] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5060'. [ 443.551066][T19369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5067'. [ 444.484490][T19376] syzkaller0: entered promiscuous mode [ 444.490049][T19376] syzkaller0: entered allmulticast mode [ 445.479558][T19246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 445.525873][T19386] syzkaller0: entered promiscuous mode [ 445.539443][T19386] syzkaller0: entered allmulticast mode [ 445.565082][T19386] net_ratelimit: 11 callbacks suppressed [ 445.565168][T19386] TC_ACT_REPEAT abuse ? [ 445.608267][T19400] syzkaller0: entered promiscuous mode [ 445.614198][T19400] syzkaller0: entered allmulticast mode [ 445.864040][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5101'. [ 445.949815][T19452] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5107'. [ 446.894847][T19483] netlink: 'syz.2.5117': attribute type 4 has an invalid length. [ 447.012484][T19493] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5122'. [ 447.095051][T19501] syzkaller0: entered promiscuous mode [ 447.097601][T19503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5126'. [ 447.108574][T19501] syzkaller0: entered allmulticast mode [ 447.163774][T19508] syzkaller0: entered promiscuous mode [ 447.171714][T19508] syzkaller0: entered allmulticast mode [ 447.193301][T19515] syzkaller0: entered promiscuous mode [ 447.198930][T19515] syzkaller0: entered allmulticast mode [ 447.445741][T19558] syzkaller0: entered promiscuous mode [ 447.456017][T19558] syzkaller0: entered allmulticast mode [ 447.604135][T19581] netlink: 'syz.8.5160': attribute type 1 has an invalid length. [ 447.623572][T19581] netlink: 'syz.8.5160': attribute type 2 has an invalid length. [ 447.634924][T19581] bridge0: port 1(syz_tun) entered blocking state [ 447.641709][T19581] bridge0: port 1(syz_tun) entered disabled state [ 447.648808][T19581] syz_tun: entered promiscuous mode [ 447.654530][T19581] bridge0: port 1(syz_tun) entered blocking state [ 447.661038][T19581] bridge0: port 1(syz_tun) entered forwarding state [ 447.698424][T19590] syzkaller0: entered promiscuous mode [ 447.704203][T19590] syzkaller0: entered allmulticast mode [ 447.825460][T19594] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5166'. [ 447.966271][T19624] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5176'. [ 447.975352][T19625] netlink: 'syz.2.5177': attribute type 3 has an invalid length. [ 447.986235][T19624] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5176'. [ 448.019139][T19629] syzkaller0: entered promiscuous mode [ 448.024853][T19629] syzkaller0: entered allmulticast mode [ 448.116627][T19651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5190'. [ 448.125871][T19651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5190'. [ 448.209585][T19669] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5197'. [ 448.235973][T19667] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 448.268491][T19678] syzkaller0: entered promiscuous mode [ 448.275849][T19678] syzkaller0: entered allmulticast mode [ 448.289412][T19683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5206'. [ 448.312511][T19683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5206'. [ 448.336815][T19689] batman_adv: batadv0: Adding interface: macvlan2 [ 448.347202][T19691] netlink: 'syz.1.5210': attribute type 3 has an invalid length. [ 448.351188][T19689] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.380930][T19689] batman_adv: batadv0: Interface activated: macvlan2 [ 448.499822][T19709] syzkaller0: entered promiscuous mode [ 448.505407][T19709] syzkaller0: entered allmulticast mode [ 448.534729][T19713] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5221'. [ 448.556446][T19713] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5221'. [ 448.646993][T19730] netlink: 'syz.2.5228': attribute type 1 has an invalid length. [ 448.660306][T19730] netlink: 'syz.2.5228': attribute type 2 has an invalid length. [ 448.789111][T19747] syzkaller0: entered promiscuous mode [ 448.802477][T19747] syzkaller0: entered allmulticast mode [ 448.891282][T19762] syzkaller0: left promiscuous mode [ 448.896575][T19762] syzkaller0: left allmulticast mode [ 448.933348][T19768] netlink: 'syz.8.5246': attribute type 1 has an invalid length. [ 448.941462][T19768] netlink: 'syz.8.5246': attribute type 2 has an invalid length. [ 449.002038][T19779] batadv0: entered promiscuous mode [ 449.007853][T19779] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 449.098725][T19788] syzkaller0: entered promiscuous mode [ 449.104418][T19788] syzkaller0: entered allmulticast mode [ 449.333967][T19810] syzkaller0: entered promiscuous mode [ 449.339480][T19810] syzkaller0: entered allmulticast mode [ 449.512083][T19832] netlink: 'syz.7.5276': attribute type 3 has an invalid length. [ 449.672315][T19852] lo speed is unknown, defaulting to 1000 [ 449.692933][T19855] syzkaller0: entered promiscuous mode [ 449.698484][T19855] syzkaller0: entered allmulticast mode [ 449.893991][T19881] bridge0: port 1(syz_tun) entered blocking state [ 449.900853][T19881] bridge0: port 1(syz_tun) entered disabled state [ 449.908191][T19881] syz_tun: entered promiscuous mode [ 449.921681][T19885] syzkaller0: entered promiscuous mode [ 449.932006][T19885] syzkaller0: entered allmulticast mode [ 450.499399][T20002] syzkaller1: entered promiscuous mode [ 450.505007][T20002] syzkaller1: entered allmulticast mode [ 450.661398][T20028] syzkaller0: entered promiscuous mode [ 450.666981][T20028] syzkaller0: entered allmulticast mode [ 450.822394][ T28] audit: type=1400 audit(1780637354.840:6581): avc: denied { map } for pid=20055 comm="syz.7.5369" path="socket:[63310]" dev="sockfs" ino=63310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 451.215106][T20140] syzkaller0: entered promiscuous mode [ 451.231290][T20140] syzkaller0: entered allmulticast mode [ 451.470122][T20187] syzkaller0: entered promiscuous mode [ 451.475863][T20187] syzkaller0: entered allmulticast mode [ 451.623212][T20200] syzkaller0: entered promiscuous mode [ 451.628759][T20200] syzkaller0: entered allmulticast mode [ 451.698352][T20206] batadv0: entered promiscuous mode [ 451.769171][T20216] syzkaller0: entered promiscuous mode [ 451.775243][T20216] syzkaller0: entered allmulticast mode [ 452.140488][T20261] syzkaller0: entered promiscuous mode [ 452.146026][T20261] syzkaller0: entered allmulticast mode [ 452.236831][T20272] syzkaller0: entered promiscuous mode [ 452.250039][T20272] syzkaller0: entered allmulticast mode [ 452.413298][T20299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.598989][T20331] syzkaller0: entered promiscuous mode [ 452.604629][T20331] syzkaller0: entered allmulticast mode [ 452.799086][T20361] validate_nla: 11 callbacks suppressed [ 452.799102][T20361] netlink: 'syz.1.5499': attribute type 3 has an invalid length. [ 452.871084][T20371] netlink: 'syz.4.5503': attribute type 1 has an invalid length. [ 452.889138][T20371] netlink: 'syz.4.5503': attribute type 2 has an invalid length. [ 452.968421][T20390] netlink: 'syz.4.5513': attribute type 3 has an invalid length. [ 453.013721][T20398] __nla_validate_parse: 28 callbacks suppressed [ 453.013740][T20398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5516'. [ 453.023030][T20399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5517'. [ 453.040027][T20400] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5514'. [ 453.057833][T20398] bridge0: port 3(vlan3) entered blocking state [ 453.079719][T20398] bridge0: port 3(vlan3) entered disabled state [ 453.091684][T20398] vlan3: entered allmulticast mode [ 453.096904][T20398] geneve0: entered allmulticast mode [ 453.103478][T20398] vlan3: entered promiscuous mode [ 453.108888][T20398] geneve0: entered promiscuous mode [ 453.127023][T12392] syz_tun (unregistering): left allmulticast mode [ 453.133567][T12392] syz_tun (unregistering): left promiscuous mode [ 453.140540][T12392] bridge0: port 1(syz_tun) entered disabled state [ 453.213400][T20405] lo speed is unknown, defaulting to 1000 [ 453.272883][T10147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.300166][T10147] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.333684][T20438] netlink: 'syz.7.5530': attribute type 1 has an invalid length. [ 453.349772][T20438] netlink: 'syz.7.5530': attribute type 2 has an invalid length. [ 453.399446][T10147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.410358][T10147] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.471342][T10147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.481726][T10147] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.575636][T10147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.586168][T20469] netlink: 'syz.4.5544': attribute type 3 has an invalid length. [ 453.625355][T10147] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.678580][T20489] netlink: 'syz.2.5552': attribute type 5 has an invalid length. [ 453.688959][T20405] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.697149][T20405] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.704850][T20405] bridge_slave_0: entered allmulticast mode [ 453.713579][T20405] bridge_slave_0: entered promiscuous mode [ 453.720576][T20405] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.728824][T20405] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.742008][T20405] bridge_slave_1: entered allmulticast mode [ 453.748643][T20405] bridge_slave_1: entered promiscuous mode [ 453.795339][T20502] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5555'. [ 453.796551][T20405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.814806][T20405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.888126][T20405] team0: Port device team_slave_0 added [ 453.901177][T20405] team0: Port device team_slave_1 added [ 453.948775][T20518] netlink: 'syz.8.5564': attribute type 1 has an invalid length. [ 453.977726][T20518] netlink: 'syz.8.5564': attribute type 2 has an invalid length. [ 454.012128][T10147] team0: Port device gretap1 removed [ 454.097320][T20532] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5568'. [ 454.161336][T10147] bond0 (unregistering): Released all slaves [ 454.181258][T20523] syzkaller0: entered promiscuous mode [ 454.186881][T20523] syzkaller0: entered allmulticast mode [ 454.194133][T20532] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5568'. [ 454.217516][T20405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.226556][T20405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.253206][T20405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.268049][T20405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.275841][T20405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.304750][T20405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.321775][T10147] tipc: Left network mode [ 454.326333][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5576'. [ 454.358241][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5576'. [ 454.367305][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5576'. [ 454.377014][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5576'. [ 454.445774][T20557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31413 sclass=netlink_route_socket pid=20557 comm=syz.7.5579 [ 454.484685][T20405] hsr_slave_0: entered promiscuous mode [ 454.501214][T20405] hsr_slave_1: entered promiscuous mode [ 454.503136][ T28] audit: type=1400 audit(1780637358.520:6582): avc: denied { write } for pid=20558 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.514206][T20405] debugfs: 'hsr0' already exists in 'hsr' [ 454.572694][ T28] audit: type=1400 audit(1780637358.590:6583): avc: denied { write } for pid=20583 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.585130][T20405] Cannot create hsr debugfs directory [ 454.614058][T10147] hsr_slave_0: left promiscuous mode [ 454.620476][T10147] hsr_slave_1: left promiscuous mode [ 454.626122][T10147] batman_adv: batadv0: Interface deactivated: dummy0 [ 454.633083][T10147] batman_adv: batadv0: Removing interface: dummy0 [ 454.642943][T10147] veth1_macvtap: left promiscuous mode [ 454.649371][T10147] veth0_macvtap: left promiscuous mode [ 454.655256][T10147] veth1_vlan: left promiscuous mode [ 454.660789][T10147] veth0_vlan: left promiscuous mode [ 454.895738][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 454.948542][T20598] syzkaller0: entered promiscuous mode [ 454.959599][T20598] syzkaller0: entered allmulticast mode [ 455.123182][ T28] audit: type=1400 audit(1780637359.140:6584): avc: denied { write } for pid=20616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.153073][ T28] audit: type=1400 audit(1780637359.160:6585): avc: denied { write } for pid=20636 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.210378][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 455.222386][T20639] TC_ACT_REPEAT abuse ? [ 455.329765][ T28] audit: type=1400 audit(1780637359.340:6586): avc: denied { write } for pid=20640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.385172][ T28] audit: type=1400 audit(1780637359.400:6587): avc: denied { write } for pid=20663 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.415522][T20405] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 455.446035][T20405] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 455.466972][T20405] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 455.490004][T20405] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 455.510775][T20666] netem: change failed [ 455.519946][T20405] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 455.537690][T20405] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 455.555151][T20405] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 455.556446][ T28] audit: type=1400 audit(1780637359.570:6588): avc: denied { write } for pid=20669 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.591352][T20405] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 455.630712][ T28] audit: type=1400 audit(1780637359.640:6589): avc: denied { write } for pid=20695 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.728072][T20405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.749296][T20405] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.770622][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.777798][T10147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.796056][ T28] audit: type=1400 audit(1780637359.810:6590): avc: denied { write } for pid=20708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.798178][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.826269][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.867512][ T28] audit: type=1400 audit(1780637359.880:6591): avc: denied { write } for pid=20741 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 455.993362][T20751] syzkaller0: entered promiscuous mode [ 455.998927][T20751] syzkaller0: entered allmulticast mode [ 456.050574][ T28] audit: type=1400 audit(1780637360.070:6592): avc: denied { write } for pid=20752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.115332][ T28] audit: type=1400 audit(1780637360.130:6593): avc: denied { write } for pid=20780 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.168089][T20789] bridge0: port 1(syz_tun) entered blocking state [ 456.185777][T20789] bridge0: port 1(syz_tun) entered disabled state [ 456.195937][T20789] syz_tun: entered promiscuous mode [ 456.213072][T20405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.288657][ T28] audit: type=1400 audit(1780637360.300:6594): avc: denied { write } for pid=20787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.309726][T20405] veth0_vlan: entered promiscuous mode [ 456.330693][T20818] batman_adv: batadv0: Adding interface: macvlan2 [ 456.332821][ T28] audit: type=1400 audit(1780637360.350:6595): avc: denied { write } for pid=20816 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.357622][T20818] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.388140][T20818] batman_adv: batadv0: Interface activated: macvlan2 [ 456.397704][T20405] veth1_vlan: entered promiscuous mode [ 456.433057][ T28] audit: type=1400 audit(1780637360.450:6596): avc: denied { write } for pid=20820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.435010][T20405] veth0_macvtap: entered promiscuous mode [ 456.479673][ T28] audit: type=1400 audit(1780637360.490:6597): avc: denied { write } for pid=20833 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.518108][T20405] veth1_macvtap: entered promiscuous mode [ 456.530344][T20405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.553496][T20405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.576813][ T4667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.586930][ T4667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.598570][T20840] syzkaller1: entered promiscuous mode [ 456.604503][T20840] syzkaller1: entered allmulticast mode [ 456.620773][ T4667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.624029][ T28] audit: type=1400 audit(1780637360.640:6598): avc: denied { write } for pid=20839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.630160][ T4667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.685103][ T28] audit: type=1400 audit(1780637360.690:6599): avc: denied { write } for pid=20853 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 456.788031][T20869] syzkaller0: entered promiscuous mode [ 456.809902][T20869] syzkaller0: entered allmulticast mode [ 456.835816][ T28] audit: type=1400 audit(1780637360.850:6600): avc: denied { write } for pid=20855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.782319][T20903] syzkaller0: entered promiscuous mode [ 457.790645][T20903] syzkaller0: entered allmulticast mode [ 458.307275][T20937] syzkaller0: entered promiscuous mode [ 458.315868][T20937] syzkaller0: entered allmulticast mode [ 458.526961][T20960] syzkaller0: entered promiscuous mode [ 458.539065][T20960] syzkaller0: entered allmulticast mode [ 458.830504][T20986] __nla_validate_parse: 7 callbacks suppressed [ 458.830520][T20986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5691'. [ 458.924187][T20994] syzkaller0: entered promiscuous mode [ 458.938960][T20994] syzkaller0: entered allmulticast mode [ 459.122965][T21007] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5697'. [ 459.263756][T13926] syz_tun (unregistering): left allmulticast mode [ 459.294935][T21018] bridge0: port 3(syz_tun) entered blocking state [ 459.310095][T21018] bridge0: port 3(syz_tun) entered disabled state [ 459.321069][T21018] syz_tun: entered allmulticast mode [ 459.334849][T21018] syz_tun: entered promiscuous mode [ 459.343740][T21018] bridge0: port 3(syz_tun) entered blocking state [ 459.350233][T21018] bridge0: port 3(syz_tun) entered forwarding state [ 459.406742][T10141] vlan2: left allmulticast mode [ 459.413028][T10141] bridge_slave_0: left allmulticast mode [ 459.428966][T10141] vlan2: left promiscuous mode [ 459.444616][T10141] bridge_slave_0: left promiscuous mode [ 459.456507][T10141] bridge0: port 3(vlan2) entered disabled state [ 459.877902][T10141] erspan0 (unregistering): left allmulticast mode [ 460.013500][T10141] bond1 (unregistering): (slave bond0): Releasing backup interface [ 460.023854][T10141] bond0 (unregistering): Released all slaves [ 460.033158][T10141] bond1 (unregistering): Released all slaves [ 460.052392][T21043] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5710'. [ 460.111944][T10141] tipc: Left network mode [ 460.246286][T10141] hsr_slave_0: left promiscuous mode [ 460.252793][T21051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31413 sclass=netlink_route_socket pid=21051 comm=syz.7.5712 [ 460.274047][T10141] hsr_slave_1: left promiscuous mode [ 460.290262][T10141] veth1_macvtap: left promiscuous mode [ 460.302534][T10141] veth0_macvtap: left promiscuous mode [ 460.309449][T10141] veth1_vlan: left promiscuous mode [ 460.315308][T10141] veth0_vlan: left promiscuous mode [ 460.751523][T21074] validate_nla: 5 callbacks suppressed [ 460.751552][T21074] netlink: 'syz.4.5719': attribute type 10 has an invalid length. [ 460.765364][T21074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5719'. [ 460.819253][T21010] lo speed is unknown, defaulting to 1000 [ 460.826704][T21074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.843528][T21074] team0: Port device netdevsim0 added [ 461.216263][T21106] syzkaller0: entered promiscuous mode [ 461.237791][T21106] syzkaller0: entered allmulticast mode [ 461.519039][T21010] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.544773][T21010] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.553229][T21010] bridge_slave_0: entered allmulticast mode [ 461.579347][T21010] bridge_slave_0: entered promiscuous mode [ 461.595040][T21010] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.611319][T21010] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.644312][T21010] bridge_slave_1: entered allmulticast mode [ 461.661381][T21010] bridge_slave_1: entered promiscuous mode [ 461.725097][T21010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.758572][T21010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.818279][T21010] team0: Port device team_slave_0 added [ 461.832146][T21010] team0: Port device team_slave_1 added [ 461.877518][T21010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.892094][T21010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.946850][T21010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.970591][T21010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.987271][T21010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.039836][T21010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.117475][T21010] hsr_slave_0: entered promiscuous mode [ 462.131721][T21010] hsr_slave_1: entered promiscuous mode [ 462.143664][T21010] debugfs: 'hsr0' already exists in 'hsr' [ 462.155562][T21010] Cannot create hsr debugfs directory [ 462.395801][T21010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.415964][T21010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.532003][T21010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.562131][T21010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.666082][T21163] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5756'. [ 462.680967][T21010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.696470][T21010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.764474][T21167] netlink: 'syz.8.5758': attribute type 3 has an invalid length. [ 462.830864][T21010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.857328][T21010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.930257][T21183] netlink: 'syz.1.5766': attribute type 3 has an invalid length. [ 462.939570][T21183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=21183 comm=syz.1.5766 [ 462.955463][T21183] netlink: 'syz.1.5766': attribute type 1 has an invalid length. [ 462.990719][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811b9c7000: rx timeout, send abort [ 462.999134][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811b9c7000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 463.103076][T10141] vlan3: left allmulticast mode [ 463.108089][T10141] geneve0: left allmulticast mode [ 463.113500][T10141] vlan3: left promiscuous mode [ 463.118363][T10141] geneve0: left promiscuous mode [ 463.124318][T10141] bridge0: port 3(vlan3) entered disabled state [ 463.134668][T10141] bridge_slave_1: left allmulticast mode [ 463.140631][T10141] bridge_slave_1: left promiscuous mode [ 463.146494][T10141] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.156698][T10141] bridge_slave_0: left allmulticast mode [ 463.162578][T10141] bridge_slave_0: left promiscuous mode [ 463.168586][T10141] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.436809][T10141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.453893][T10141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.466990][T10141] bond0 (unregistering): Released all slaves [ 463.475306][T10141] bond1 (unregistering): Released all slaves [ 463.532685][T21010] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 463.558276][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 463.558291][ T28] audit: type=1400 audit(1780637367.570:6603): avc: denied { setopt } for pid=21197 comm="syz.8.5773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 463.587200][T21010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 463.602486][T21010] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 463.619760][T21010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 463.647411][T21010] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 463.677385][T21010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 463.733838][T10141] hsr_slave_0: left promiscuous mode [ 463.746310][T10141] hsr_slave_1: left promiscuous mode [ 463.754522][T10141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.763173][T10141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.772262][T10141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.780307][T10141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.787595][T21209] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5777'. [ 463.822160][T10141] veth1_macvtap: left promiscuous mode [ 463.827823][T10141] veth0_macvtap: left promiscuous mode [ 463.834301][T10141] veth1_vlan: left promiscuous mode [ 463.841938][T10141] veth0_vlan: left promiscuous mode [ 463.983582][T10141] team0 (unregistering): Port device team_slave_1 removed [ 463.996027][T10141] team0 (unregistering): Port device team_slave_0 removed [ 464.034967][T21010] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 464.049119][T21010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.077568][T21212] syzkaller1: entered promiscuous mode [ 464.083659][T21212] syzkaller1: entered allmulticast mode [ 464.107011][T21224] syzkaller0: entered promiscuous mode [ 464.112808][T21224] syzkaller0: entered allmulticast mode [ 464.233077][T21010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.245505][T21010] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.256055][T10144] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.263148][T10144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.293165][T10145] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.300295][T10145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.386397][T10141] IPVS: stop unused estimator thread 0... [ 464.399083][T21239] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5783'. [ 464.534180][T21010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.667401][T21264] syzkaller0: entered promiscuous mode [ 464.682750][T21264] syzkaller0: entered allmulticast mode [ 464.775795][T21270] syzkaller0: entered promiscuous mode [ 464.781664][T21270] syzkaller0: entered allmulticast mode [ 464.798970][T21010] veth0_vlan: entered promiscuous mode [ 464.848014][T21010] veth1_vlan: entered promiscuous mode [ 464.900042][T21280] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 464.908937][T21280] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 465.005375][T21010] veth0_macvtap: entered promiscuous mode [ 465.013624][T21010] veth1_macvtap: entered promiscuous mode [ 465.025646][T21010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.042981][T21010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.059432][T10145] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.068974][T10145] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.087998][ T4667] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.150964][ T4667] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.088087][T21366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5833'. [ 466.327689][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5842'. [ 466.360243][T21386] syzkaller0: entered promiscuous mode [ 466.372443][T21386] syzkaller0: entered allmulticast mode [ 466.457067][T21394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5847'. [ 466.743794][T21412] netlink: 'syz.8.5856': attribute type 1 has an invalid length. [ 466.764962][ T28] audit: type=1400 audit(1780637370.780:6604): avc: denied { getopt } for pid=21413 comm="syz.4.5857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 466.796247][T21412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.847456][T21412] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5856'. [ 466.862786][T21420] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5859'. [ 466.886182][T21416] bond2: (slave veth7): Enslaving as an active interface with a down link [ 466.928708][ T28] audit: type=1400 audit(1780637370.940:6605): avc: denied { connect } for pid=21422 comm="syz.4.5861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 466.956504][T21416] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5856'. [ 466.968870][T21412] bond2: entered allmulticast mode [ 467.018575][T21416] bond2: left allmulticast mode [ 467.023834][T21416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.285687][T12700] syz_tun (unregistering): left allmulticast mode [ 467.295382][T12700] syz_tun (unregistering): left promiscuous mode [ 467.305839][T12700] bridge0: port 1(syz_tun) entered disabled state [ 467.412589][T21449] lo speed is unknown, defaulting to 1000 [ 467.585752][T21441] lo speed is unknown, defaulting to 1000 [ 467.643737][T10145] team0: Port device netdevsim0 removed [ 467.760192][T10145] batman_adv: batadv0: Interface deactivated: macvlan2 [ 467.777535][T10145] batman_adv: batadv0: Removing interface: macvlan2 [ 467.797715][T21470] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5878'. [ 468.023790][T21478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5882'. [ 468.042203][T10145] bond0 (unregistering): Released all slaves [ 468.104887][T10145] tipc: Left network mode [ 468.248088][T10145] hsr_slave_0: left promiscuous mode [ 468.268948][T10145] hsr_slave_1: left promiscuous mode [ 468.626340][T21524] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5894'. [ 468.719520][ T28] audit: type=1400 audit(1780637372.730:6606): avc: denied { write } for pid=21485 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.851759][T21544] syzkaller0: entered promiscuous mode [ 468.900330][T21544] syzkaller0: entered allmulticast mode [ 468.922692][ T28] audit: type=1400 audit(1780637372.930:6607): avc: denied { write } for pid=21546 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.032110][T21554] bridge0: port 1(syz_tun) entered disabled state [ 469.394260][T21554] batman_adv: batadv0: Interface deactivated: macvlan2 [ 469.491756][T21441] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.518290][T21441] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.549353][T21441] bridge_slave_0: entered allmulticast mode [ 469.573310][T21441] bridge_slave_0: entered promiscuous mode [ 469.602878][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5913'. [ 469.603901][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 469.644675][ T68] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.658467][ T68] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.676473][ T68] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.688020][ T68] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.697357][T21441] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.713762][T21577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5918'. [ 469.723746][T21441] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.752654][T21577] netlink: 'syz.1.5918': attribute type 3 has an invalid length. [ 469.779426][T21441] bridge_slave_1: entered allmulticast mode [ 469.793702][T21441] bridge_slave_1: entered promiscuous mode [ 469.812929][ T68] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.843046][ T68] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.875040][ T68] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.898708][ T68] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.955520][T21441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.014634][T21441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.127050][T21441] team0: Port device team_slave_0 added [ 470.181236][ T28] audit: type=1400 audit(1780637374.190:6608): avc: denied { write } for pid=21590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 470.261871][T21441] team0: Port device team_slave_1 added [ 470.465176][ T28] audit: type=1400 audit(1780637374.310:6609): avc: denied { write } for pid=21612 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 505.251053][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 540.251141][T21611] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.258437][T21611] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.098854][T21611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.014508][T21611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.539550][ C1] ================================================================== [ 767.547680][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 767.554898][ C1] [ 767.557212][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0: [ 767.565269][ C1] wq_worker_tick+0x64/0x240 [ 767.569873][ C1] sched_tick+0xbc/0x1f0 [ 767.574117][ C1] update_process_times+0x15e/0x190 [ 767.579325][ C1] tick_nohz_handler+0x275/0x3d0 [ 767.584305][ C1] __hrtimer_run_queues+0x276/0x4f0 [ 767.589531][ C1] hrtimer_interrupt+0x261/0x850 [ 767.594487][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 767.600394][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 767.606038][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 767.612032][ C1] __tsan_read8+0x0/0x190 [ 767.616373][ C1] ip_rcv_finish+0x2e/0x1a0 [ 767.620886][ C1] ip_rcv+0x62/0x160 [ 767.624788][ C1] process_backlog+0x341/0x670 [ 767.629558][ C1] __napi_poll+0x61/0x300 [ 767.633900][ C1] net_rx_action+0x452/0x930 [ 767.638501][ C1] handle_softirqs+0xb9/0x280 [ 767.643176][ C1] do_softirq+0x45/0x60 [ 767.647337][ C1] __local_bh_enable_ip+0x70/0x80 [ 767.652372][ C1] __alloc_skb+0x658/0x690 [ 767.656785][ C1] nsim_dev_trap_report_work+0x18a/0x640 [ 767.662426][ C1] process_scheduled_works+0x4f0/0x9c0 [ 767.667893][ C1] worker_thread+0x58a/0x780 [ 767.672488][ C1] kthread+0x22a/0x280 [ 767.676552][ C1] ret_from_fork+0x146/0x330 [ 767.681145][ C1] ret_from_fork_asm+0x1a/0x30 [ 767.685908][ C1] [ 767.688221][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1: [ 767.696278][ C1] wq_worker_tick+0x64/0x240 [ 767.700876][ C1] sched_tick+0xbc/0x1f0 [ 767.705122][ C1] update_process_times+0x15e/0x190 [ 767.710316][ C1] tick_nohz_handler+0x275/0x3d0 [ 767.715256][ C1] __hrtimer_run_queues+0x276/0x4f0 [ 767.720453][ C1] hrtimer_interrupt+0x261/0x850 [ 767.725395][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 767.731290][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 767.736925][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 767.742912][ C1] __tsan_read8+0x42/0x190 [ 767.747334][ C1] ipt_do_table+0x731/0xb20 [ 767.751839][ C1] iptable_mangle_hook+0xd6/0x260 [ 767.756867][ C1] nf_hook_slow+0x78/0x180 [ 767.761298][ C1] __ip_local_out+0x2fd/0x320 [ 767.765981][ C1] ip_local_out+0x28/0xd0 [ 767.770297][ C1] synproxy_send_tcp+0x293/0x2e0 [ 767.775238][ C1] synproxy_send_client_synack+0x57c/0x5d0 [ 767.781048][ C1] nft_synproxy_eval_v4+0x247/0x2a0 [ 767.786251][ C1] nft_synproxy_do_eval+0x1cf/0x270 [ 767.791448][ C1] nft_synproxy_eval+0x29/0x40 [ 767.796211][ C1] nft_do_chain+0x205/0xe00 [ 767.800705][ C1] nft_do_chain_inet+0x2f0/0x320 [ 767.805645][ C1] nf_hook_slow+0x78/0x180 [ 767.810070][ C1] ip_local_deliver+0x199/0x1e0 [ 767.814925][ C1] ip_rcv_finish+0x188/0x1a0 [ 767.819517][ C1] ip_rcv+0x62/0x160 [ 767.823418][ C1] process_backlog+0x341/0x670 [ 767.828188][ C1] __napi_poll+0x61/0x300 [ 767.832520][ C1] net_rx_action+0x452/0x930 [ 767.837109][ C1] handle_softirqs+0xb9/0x280 [ 767.841783][ C1] do_softirq+0x45/0x60 [ 767.845945][ C1] __local_bh_enable_ip+0x70/0x80 [ 767.850977][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 767.855911][ C1] nsim_dev_trap_report_work+0x53b/0x640 [ 767.861556][ C1] process_scheduled_works+0x4f0/0x9c0 [ 767.867019][ C1] worker_thread+0x58a/0x780 [ 767.871610][ C1] kthread+0x22a/0x280 [ 767.875671][ C1] ret_from_fork+0x146/0x330 [ 767.880265][ C1] ret_from_fork_asm+0x1a/0x30 [ 767.885027][ C1] [ 767.887340][ C1] value changed: 0x0000000009664fa0 -> 0x00000000096676b0 [ 767.894437][ C1] [ 767.896754][ C1] Reported by Kernel Concurrency Sanitizer on: [ 767.902896][ C1] CPU: 1 UID: 0 PID: 10137 Comm: kworker/u8:21 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 767.914101][ C1] Tainted: [W]=WARN [ 767.917895][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 767.927948][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 767.934728][ C1] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 768.014114][ T28] audit: type=1400 audit(1780637672.010:6610): avc: denied { write } for pid=3286 comm="syz-executor" path="pipe:[379]" dev="pipefs" ino=379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 776.610603][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!